Privacy Policy

Last updated September 26, 2026

We're finalizing this policy ahead of the apps' launch in the app stores. If anything here is unclear, write to support@novarcplayer.com.

NovArc Player is a media player for IPTV playlists you already have. This policy explains what we collect when you use the NovArc Player apps, the portal at app.novarcplayer.com and this website, why, and what we do with it. In short: we collect only what we need to run the service, we don't sell your data or show ads, and your video never passes through our servers.

Who we are

NovArc Player (“NovArc”, “we”, “us”) provides the apps, the portal and this website. You can reach us at support@novarcplayer.com.

What we collect

When a device starts the app

The app registers the device with our server. We store:

• a random device ID and 6-digit device key, which you use to sign in to the portal;
• a secret device token (we keep only a hash of it);
• a short label for the kind of device and its browser engine, such as “LG webOS · Chrome”, worked out from what the app reports;
• when the device was registered and last used, and its trial and license status;
• on Android and Samsung TVs, an identifier from the app or TV, so that a license isn't lost when the app's storage is cleared (a random ID created by the app on Android, the TV's device identifier on Samsung).

Playlists you add in the portal

Their name and type, the server address, username and password (the password is encrypted), or the M3U link, and any custom user agent or TV-guide address you set. We keep them so your device can fetch them. Playlists you add directly on a TV or phone stay on that device and aren't sent to us, unless you choose to include them in a backup.

Backups

When the app backs up, it sends your favorites, watch history and progress, profiles and settings, and, if you turn it on, the playlists on that device (including their passwords). Backups are compressed and encrypted before they're stored.

Payments

Card payments are handled by Stripe. We receive and keep the plan, the amount and currency, the device it's for, and Stripe's reference for the payment. We never see or store your card details.

Online subtitles

If you search for subtitles, our server sends the title, year or TMDB ID, and the languages you chose to OpenSubtitles.com, and keeps the results and subtitle files for a while so they can be reused. Nothing that identifies you is sent.

Channel lists and TV guides on Samsung and LG TVs and in web browsers

Those platforms can't contact your IPTV provider directly for text such as your channel list, provider account information, TV guide and channel logos, so the app asks our server to fetch them from your provider for you. They pass straight through and aren't stored. Because these requests can contain your provider login, we don't keep request logs. Video is never sent through our servers. The Android app fetches everything from your provider itself.

Technical data and cookies

• Our hosting provider, Cloudflare, processes your IP address to deliver the service and protect it from attacks. We use it briefly to limit how many devices can be registered, and how many sign-in attempts can be made, from one network; those counters are deleted within a day.
• The portal sets one sign-in cookie (and the admin dashboard another), which expires after 12 hours. This website sets no cookies.
• We don't use analytics, advertising or third-party trackers.

How we use it

To register and activate devices and show their license status; to deliver the playlists you add in the portal to your device; to store and restore backups; to take payments; to find subtitles; to keep the service secure and prevent abuse; and to answer your messages. Where the law asks for a legal basis, we rely on providing the service you asked for, and on our legitimate interest in keeping it secure.

Who we share it with

We don't sell or rent personal data. We use these service providers, who process data for us:

• Cloudflare: hosting, database and network, for the apps, the portal and this website.
• Stripe: card payments.
• OpenSubtitles.com: subtitle search and downloads (no personal data).

We may disclose information when the law requires it. Your IPTV provider is not one of our service providers: the app connects to it on your behalf, and its own privacy policy covers what it collects, such as your IP address when you stream.

Where it's stored

On Cloudflare's network and database, which may process data in the United States and other countries. Where data leaves your country, we rely on our providers' standard safeguards for international transfers.

How long we keep it

• Device records, portal playlists and backups: while the device is registered. Ask us to delete a device and its data at any time.
• Payment records: as long as accounting and tax rules require, even if the device is deleted.
• Rate-limit counters: up to one day.
• Downloaded subtitle files: up to 60 days.
• Sign-in cookies: 12 hours.

Your choices and rights

You can edit or delete portal playlists at any time. Clearing the app's data removes what's stored on the device. You can ask us to see, correct, export or delete the data we hold about your device, or object to how we use it: write to support@novarcplayer.com with your device ID. Depending on where you live, you may also complain to your data protection authority.

Security

Everything is sent over HTTPS. Playlist passwords, device keys and backups are encrypted with AES-256-GCM, device tokens are stored as hashes, and sign-in attempts are limited.

Children

NovArc Player isn't directed at children under 13, and we don't knowingly collect their personal data. Kids profiles and the parental PIN are tools for parents.

Changes

If we change this policy, we'll update this page and the date at the top.