Privacy policy

Nipo Player is a media player. It does not provide, sell or host any channels or content: it only plays the playlists you add yourself.

This policy covers the Nipo Player apps (Android, Android TV, Google TV, Fire TV, iPhone, iPad, Mac, Windows, Samsung and LG TVs) and the nipoplayer.com website.

Who we are

Nipo Player is published by 361 DEV, which is responsible for the data described here (the "controller" under the GDPR). Contact for anything about your data: privacy@nipoplayer.com.

Part 1 — The free app, today

What we don't collect

• No sign-up needed to use the player.
• No ads, no analytics inside the app, no trackers.
• We never receive the content of your playlists (addresses, usernames, passwords), or what you watch. Only their names and types can be shown in your account (see "On the device" below).
• No name, and no e-mail address unless you activate Premium with your e-mail, create an account or join the waiting list.

Data stored on your device

Your playlists (your playlist's server address, username, password), favourites, history, reminders and settings are stored only on your device. They are deleted when you remove the playlist or uninstall the app. On Android they are excluded from system cloud backups; on iPhone/iPad they may be part of your device's encrypted backup (iCloud or computer), like any app's data.

Network connections

The app connects directly to the servers you enter (your playlist's server, your TV guide). Those services have their own privacy policies; Nipo Player is not affiliated with them.

It also contacts nipoplayer.com for the items below (Nipo code, licence, playlists sent from the website, available version).

Your device's Nipo code

On first launch, every Nipo Player app (the free one included) registers its device with nipoplayer.com. We receive:

• the device's Nipo code: an identifier made by hashing a random identifier the app creates on first launch (Android, computers) or the TV's own app identifier (Samsung, LG). It is never a hardware identifier and never the MAC address. On Android, uninstalling the app or clearing its data gives the device a new Nipo code;
• the platform, model, system version and app version;
• a public encryption key (the private key never leaves the device).

Why: so that you can send an encrypted playlist to this screen from nipoplayer.com/appareil, and activate Premium on this device if you buy it. This data contains no playlist, no name, no e-mail address, and says nothing about what you watch.

How long: as long as the device uses Nipo Player. Uninstalling the app does not erase it on our side: write to privacy@nipoplayer.com and we delete it (tell us the device's model, or the e-mail address you activated it with, so we can find it).

IP address: used only to limit abuse (too many attempts) and kept only as a fingerprint keyed with a secret key, never in clear.

Activating with your e-mail

If you choose Activate with my e-mail in the app, you type your e-mail address and we send a 6-digit code to it (valid 15 minutes, 5 tries).

• What we keep: the request itself holds only a keyed fingerprint of your address and of the code, and is deleted after 2 days.
• When the right code is entered, your address is confirmed: we open your Nipo account with that address (or find the existing one) and link this device to it. If the account holds a licence, Premium is activated on the device.
• Why: you asked for it (performing your request, and the licence contract when there is one).
• The code e-mail is sent through our transactional e-mail company (see "Processors" below).

Camera

On phones and tablets, the camera is used only when you choose to scan the QR code shown on your TV (phone remote). The image is read on your phone to decode the QR code; it is never recorded or sent to us. The permission is asked the first time you tap "Scan", and the app works without it.

QR pairing and device transfer

When you use the QR code, the phone remote or settings transfer, the data goes through our pairing service end-to-end encrypted (AES-256-GCM) with the code shown on your screen. Our service never knows that code and cannot read the data. It is deleted as soon as it is delivered, and after 10 minutes at the latest.

A playlist sent to a device from nipoplayer.com/appareil is encrypted in your browser with that device's public key: we store only the ciphertext, which we cannot read, and delete it as soon as the device receives it, or after 24 hours.

"On the device" in your account

When a device is in an account's "My devices" and "Allow remote changes" is turned on in its app, the app sends nipoplayer.com the list of its playlists so it shows on that device's page in your account: for each playlist, the name you gave it (if any), its type (M3U URL or Xtream), where it came from (added on the device, My playlists, sent), whether it is in use, when it last loaded and whether that worked. Never the server address, username or password. Only the accounts that have this device in "My devices" see this list. From their account they can delete a playlist from the device or empty it: the device does it the next time it connects. Turning the setting off on the device erases this list from our servers.

Diagnostic report

The diagnostic report is created on your device and is never sent automatically. It contains no username or password. You alone decide to copy or share it.

Analytics on nipoplayer.com

The website may use cookieless analytics (Plausible or Umami), which does not track visitors individually and sets no identifier. See the Cookies page.

Children

Nipo Player is not designed for children under 13. The free app asks for no name, age or e-mail address; it only registers the device's Nipo code described above. A parental PIN can lock categories, set locally on the device.

"Notify me" waiting list

On pages where a device or Nipo Premium is not available yet, a "Notify me" button lets you leave your e-mail to be told as soon as it's ready. No account is needed.

What we keep: your e-mail address, the topic you chose (the device, or "Nipo Premium"), the page's language, the date and time you signed up, the confirmation date (a confirmation e-mail is sent before any other message: double opt-in) and, once sent, the date of the availability e-mail.

Legal basis: your consent, given by clicking "Notify me" and then confirming from the e-mail you receive.

What we do with it: a single e-mail, the day the device or Nipo Premium you chose becomes available. Nothing else is sent from this sign-up: no newsletter, no offer.

Retention: a sign-up that is never confirmed is deleted after 7 days. A confirmed sign-up is deleted 30 days after the availability e-mail is sent, or immediately if you unsubscribe before then.

Unsubscribing: every e-mail has an immediate unsubscribe link. Your rights over this data (access, rectification, erasure…) are the same as for your other data, see "Your rights" below.

Sending: these e-mails go through the same transactional e-mail company as the rest of the site, see "Processors" below.

Anti-spam: the form is protected by a proof-of-work check computed in your browser (ALTCHA), hosted by us: no third-party service, no cookie.

---

Part 2 — Nipo accounts and Premium

A Nipo account exists as soon as you confirm your e-mail address (in the app with "Activate with my e-mail", or by signing in on nipoplayer.com). The purchase items below apply once Nipo Premium and Nipo Family go on sale. The free app without an account stays covered by Part 1.

Data collected for a Nipo account

• Account e-mail (confirmed with a code or a sign-in link).
• Nipo codes of your devices (see « Your device's Nipo code » above; never the MAC address).
• Purchase history: product, date, amount, payment method (card data never passes through our servers: it is handled by the company that processes the payment).
• Licence checks: which device, when, to keep your licence up to date.
• Mes playlists (optional, Premium/Family only): if you choose to save a playlist in your account so it reaches your devices automatically, it is encrypted on our servers (encryption at rest), but this is not end-to-end encryption: our service can decrypt it to deliver it to your devices. Every decryption is logged, without the content. To never store your playlist with us, use the Nipo-code push instead (end-to-end encrypted, free). A playlist deleted from Mes playlists is removed server-side immediately; it disappears from backups after their rotation (about 30 days).

Legal bases

• Contract performance (or steps you asked for before one): e-mail activation, managing your licence, purchases, devices, and Mes playlists delivery.
• Legal obligation: keeping invoices and accounting records (Greek accounting and tax law).
• Legitimate interest: security (limiting attempts, new-device alerts), registering devices so they can receive a playlist or a licence, service improvement.
• Consent: marketing e-mails (off by default, explicit opt-in) and the waiting list.

Who receives data

We never sell your data and never share it for advertising. Only these companies process it for us, under a data processing agreement:

• Website and function hosting: Vercel Inc. (United States).
• Database: Supabase, hosted in the European Union (Ireland).
• Transactional e-mail (activation codes, account e-mails, waiting list): Resend, sending from its European Union region.
• Payment: company to be named before sales launch; this page and the app stores' privacy forms will be updated in the same release.

When a company is based outside the European Union, transfers are covered by the European Commission's Standard Contractual Clauses. We may also disclose data when the law requires it.

Security

All traffic between the apps, the website and our servers is encrypted (HTTPS/TLS). The database is encrypted at rest and hosted in the European Union. IP addresses and activation codes are kept only as keyed fingerprints. Access to customer data is limited to the people who need it for support, and every staff action is logged.

Retention

• Device registration (Nipo code, platform, model, public key): as long as the device uses Nipo Player, or until you ask us to delete it.
• E-mail activation requests: 2 days.
• Pairing and transfer data: until delivered, 10 minutes at most. Playlists sent from nipoplayer.com/appareil: until received, 24 hours at most.
• Account: as long as it exists, then deleted on request (see "Your rights").
• Orders and invoices: as long as Greek accounting and tax law requires.
• Mes playlists: deleted 30 days after a licence ends, with a warning e-mail beforehand.
• "On the device" list: replaced each time the device sends it, erased as soon as "Allow remote changes" is turned off or the app is reinstalled. Deletion requests sent to the device: 30 days.
• Technical logs (IP addresses): 30 days maximum.

Your rights

You have rights of access, rectification, erasure, restriction, objection and portability over your data. With a Nipo account, you can export your data and delete your account yourself on nipoplayer.com, in My account → Settings (see How do I delete my account?). For anything else, including erasing a device's registration: privacy@nipoplayer.com. We answer within one month.

Complaint

You can file a complaint with the Hellenic Data Protection Authority, our lead authority: dpa.gr. You may also contact the authority of the EU country where you live, for example the CNIL in France: cnil.fr.

Changes

If this policy changes, the date at the top of the page changes too; for an important change affecting accounts, we tell account holders by e-mail beforehand.

---

Contact

For any question about this policy: privacy@nipoplayer.com.