Privacy Policy
Zapline for Android · Effective 2026-10-23
Zapline is a media player for playlists that you add yourself. It is made by an independent developer (“we”). This policy explains what the app does with data. In short: we do not collect personal data, there are no accounts, no ads and no analytics of our own.
1. Data that stays on your device
- Your sources: playlist (M3U) addresses, Xtream Codes server addresses and usernames, program guide (EPG/XMLTV) addresses, channel lists, favorites, recently watched channels, search history, reminders and settings are stored only in the app's private storage on your device.
- Passwords and tokens for your sources are stored encrypted with a key held in the Android Keystore.
- We have no server that receives this data. Uninstalling the app or clearing its data deletes it.
2. Network connections
- The app connects directly from your device to the addresses you enter (your playlist, Xtream server, guide and stream addresses). Those servers belong to whoever operates them, not to us, and their own privacy practices apply.
- If you tap Try demo, or open the help, terms, privacy or licenses links, the app loads files from this website (
zapline-player.pages.dev), which is static content hosted on Cloudflare Pages. We set no cookies there and run no analytics; Cloudflare may keep standard infrastructure logs (such as IP address) as described in Cloudflare's privacy policy. - The app sends nothing about you or your viewing to us.
3. Purchases
Zapline Premium is a one-time in-app purchase processed by Google Play Billing. Google handles payment details; we never see them. The app checks your purchase with Google Play on the device and does not send purchase information to any server of ours. See the Google Privacy Policy.
4. Google components that may send diagnostic data to Google
- Google Play Billing Library communicates with the Google Play Store app on your device to process purchases.
- Google Cast SDK is started only when you tap the Cast button. From then on it discovers Cast devices on your network and, through Google Play services (datatransport), may send Google anonymous usage and diagnostic data about device discovery and Cast sessions, encrypted in transit. If you never tap Cast, the Cast SDK is not started.
- These components are provided by Google and covered by the Google Privacy Policy. We do not receive this data.
5. Backups
- Android Auto Backup (to your own Google account, if you have backup turned on) includes only the app's settings. It never includes your playlists, channel database, passwords or tokens.
- In-app backup files are created only when you choose to export one, and are saved where you choose. Passwords are included only if you opt in and set a file password; that section is encrypted with your file password. Keep such files private.
6. Permissions
Internet and network state (to load your sources and tell “offline” from “server down”), notifications (program reminders and progress of large imports), start at boot (to restore reminders), foreground service (large playlist imports) and billing. The app does not request location, contacts, camera, microphone or storage permissions.
7. Data sharing and selling
We do not sell or share personal data. We do not have access to it.
8. Children
Zapline is not directed at children under 13 and is not designed for them. Parental controls (PIN-locked groups) are provided for households, but the app does not knowingly collect any data from anyone, including children.
9. Your choices
You can delete any source, clear history and favorites in the app, or uninstall it to remove all its data from your device. Because we hold no data about you, there is nothing for us to delete on our side; data Google collects through its components is managed under Google's policies.
10. Changes and contact
If this policy changes, the new version will be posted on this page with a new effective date. Questions: gnurtnel@gmail.com.