Privacy Policy
Last updated: 18 September 2026
Lumen TV Player is a player for IPTV services you already subscribe to. It contains no channels and no content of its own. This policy describes exactly what the app and its sync service store.
What we store
Your account. Your email address, a salted PBKDF2 hash of your password (never the password itself), and, if you set one, a hash of your parental PIN. The date your account was created.
Your devices. For each signed-in device: a name such as “iPhone” or “Apple TV”, when it signed in, when it was last seen, and a hash of its session token. You can sign any device out remotely from Settings.
Your profiles. The name, avatar colour and settings (kids profile, PIN lock) of each profile on your account.
Your provider details. The server address, username, password or playlist URL you enter when you connect an IPTV provider. These are encrypted at rest with AES-256-GCM and are returned only to your own authenticated account. We use them for one purpose: making the same provider available on your other devices.
Your library. Which titles you add to My List, your playback position in what you have watched, and which categories you have hidden or restricted. Each entry stores the title, an artwork URL and a timestamp so your devices can agree on the most recent state.
What we do not do
- We include no analytics, advertising or tracking SDKs. No third-party code in the app reports on you.
- We do not track you across other apps or websites, and we do not sell or share your data.
- We do not see, record or proxy what you watch. Video streams travel directly from your provider to your device; they do not pass through our servers, and we keep no logs of them.
- We do not use your data to train anything, and we do not profile you.
Where it is stored
On Cloudflare’s platform (Workers and D1), acting as our processor. Nothing is shared with any other company.
Children
Lumen TV Player plays whatever your provider serves, and we cannot filter it, which is why the app is rated for adults. Kids profiles and the parental PIN limit what a given profile can reach on your own devices; they are not a content filter.
Deleting your data
Settings → Account → Delete Account removes your account, profiles, provider details, My List and watch history. The deletion is immediate and permanent; we keep no copy. Signing out alone only removes the session on that device.
Changes
If this policy changes, the date above changes with it, and material changes are announced in the app.