Privacy Policy

Last updated November 6, 2026

NovArc makes two apps: NovArc IPTV Player, a media player for IPTV playlists you already have, and NovArc Music, a music player for your own music server. This policy explains what we collect when you use them and this website, why, and what we do with it. The parts for both apps come first, then each app's own. In short: we collect only what we need to run each app, we don't sell your data or show ads, and your video and music never pass through our servers.

For both apps and this website

Who we are

NovArc LLC (“NovArc”, “we”, “us”), based in Illinois, United States, provides both apps, the NovArc IPTV Player portal and this website. You can reach us at support@novarcplayer.com.

No ads, no trackers, no sale of your data

We don't sell or rent personal data, and we don't use third-party analytics, advertising or trackers, in either app or on this website.

This website

This website sets no cookies and runs no scripts. Our hosting provider, Cloudflare, processes your IP address to deliver it and protect it from attacks.

Where it's stored

What our servers keep is stored on Cloudflare's network and database, which may process data in the United States and other countries. Where data leaves your country, we rely on our providers' standard safeguards for international transfers.

Your rights

You can ask us to see, correct, export or delete the data we hold about you or your device, or object to how we use it, by writing to support@novarcplayer.com. Each app's part below says what that data is and what helps us find it. Depending on where you live, you may also complain to your data protection authority.

When you write to us

If you email us, we keep your address and your messages, with anything you send us in them (such as the app's support code or device code, or the order number on Google Play's receipt), to answer you and to help with what you asked, for 24 months after the last message, and then delete them.

Children

Neither app is directed at children under 13, and we don't knowingly collect their personal data. NovArc IPTV Player's kids profiles and parental PIN are tools for parents.

Changes

If we change this policy, we'll update this page and the date at the top.

NovArc IPTV Player

This part covers the NovArc IPTV Player apps, the portal at app.novarcplayer.com, and buying a license.

What we collect

When a device starts the app

The app registers the device with our server. We store:

• a random device ID and 6-digit device key, which you use to sign in to the portal;
• a secret device token (we keep only a hash of it);
• a short label for the kind of device and its browser engine, such as “LG webOS · Chrome”, worked out from what the app reports;
• on Android, which version of the app it runs: the one from Google Play or the one from this website;
• when the device was registered and last used, and its trial and license status;
• on how many different days the device was used: our server counts the days on which the app checked in with it (it does so when it starts and every few minutes while it's open);
• whether the device has at least one playlist: the app tells our server only yes or no, never anything about the playlists themselves (their names, addresses, logins or what's in them);
• the public IP address the device last connected from, and the country that address is in;
• the network the device registered from: the public IPv4 address it registered from, or the network part (the first half) of its IPv6 address. Unlike the last address, it's kept as it was;
• on Android, Samsung TVs and LG TVs, an identifier from the app or TV, so that a license isn't lost when the app's storage is cleared or the app is reinstalled (on Android, the identifier Android gives the app on that device, or a random ID the app created in versions before 1.2.4; on Samsung, the TV's device identifier; on LG, only if you allow it, when the app first starts or later in Settings, a code made from the ID LG gives the TV, never that ID itself. Without it, a reinstall starts as a new device).

Playlists you add in the portal

Their name and type, the server address, username and password (the password is encrypted), or the M3U link, and any custom user agent or TV-guide address you set. We keep them so your device can fetch them. Playlists you add directly on a TV or phone stay on that device and aren't sent to us, unless you choose to include them in a backup: the app only tells us whether the device has any playlist (see above).

Backups

When the app backs up, it sends your favorites, watch history and progress, profiles and settings, and, if you turn it on, the playlists on that device (including their passwords). Backups are compressed and encrypted before they're stored.

Payments

Payments are handled by Stripe through Link, which acts as the seller of record for your purchase. Stripe collects your payment details, name, email address and billing address (which it needs to work out tax) and sends your receipt; its own privacy policy covers that. We receive and keep the amount and currency, the device the license is for, and Stripe's reference for the payment. Stripe also tells us when a payment is refunded or charged back, and how a dispute ends; we keep that with the payment and use it to end the license or give it back (Terms of Use, “Payments and refunds”). We never see or store your card details.

In the Google Play version of the Android app, the license is bought through Google Play instead. Google Play takes the payment and collects your payment details under Google's own privacy policy; in some countries (such as those of the EU and the UK) Google is the seller of record, acting for us, and elsewhere NovArc LLC is the seller. When you buy, the app gives Google Play a code made from the device's ID with a secret key, so the purchase goes to that device; it doesn't reveal the device ID or anything about you. We receive and keep Google Play's references for the purchase (its purchase token and order number), the amount and currency, and the device the license is for. We use them to check the purchase and what was paid with Google, to complete it, to refund it through Google Play if the device already has a lifetime license or has been deactivated, and to end the license if Google refunds it or it's charged back. We never see your payment details.

Online subtitles

If you search for subtitles, our server sends the title, year or TMDB ID, and the languages you chose to OpenSubtitles.com, and keeps the results and subtitle files for a while so they can be reused. Nothing that identifies you is sent.

Support requests and diagnostic reports you choose to send

If you contact us from the app's Help screen or from the portal, we keep your messages and our replies with your device. A request sent from a TV or phone also carries a diagnostic report: the kind of device and its browser engine, the app's version and some of its settings, the kinds of playlists on it, and its recent errors. Stream and playlist addresses, provider logins and passwords are removed from the report before it's sent, and again on our server.

Channel lists and TV guides on Samsung and LG TVs and in web browsers

Those platforms can't contact your IPTV provider directly for text such as your channel list, provider account information, TV guide and channel logos, so the app asks our server to fetch them from your provider for you. They pass straight through and aren't stored. Because these requests can contain your provider login, we don't keep request logs. Video is never sent through our servers. The Android app fetches everything from your provider itself.

Technical data and cookies

• Our hosting provider, Cloudflare, processes your IP address to deliver the service and protect it from attacks. We also use it in counters that limit, per network, how many devices can be registered or set up again, how many sign-in attempts can be made, and how often subtitles and purchases can be looked up; those counters are deleted automatically after a day.
• With each device we keep the public IP address it last connected from and its country (as Cloudflare places it), to help with support, to spot misuse, such as one license used in many places, and to set a trial's length where it depends on the country. It's replaced each time the device connects, and deleted with the device.
• We also keep the network each device registered from, for as long as the device is registered. Free trials are limited per network: we count the devices that registered from the same network in the last 30 days. It also protects the device key, when it's used to sign in to the portal or to copy the device's backup to a new TV: attempts from the device's own network are counted separately, so someone elsewhere who knows the device ID can't lock its owner out.
• The portal sets one sign-in cookie (and the admin dashboard another), which expires after 12 hours.
• We don't use third-party analytics, advertising or trackers. The two usage counts above (the days a device was used, and whether it has a playlist) stay on our own server, with the device's record.

How we use it

To register and activate devices and show their license status; to deliver the playlists you add in the portal to your device; to store and restore backups; to take payments; to find subtitles; to keep the service secure and prevent abuse; to answer your messages; and, from the days a device was used and whether it has a playlist, to understand how many people keep using the app after trying it, so we can improve it. Where the law asks for a legal basis, we rely on providing the service you asked for, and on our legitimate interest in keeping it secure and improving it. For the code made from an LG TV's ID we rely on your consent, which you can withdraw at any time (see below).

Who we share it with

We use these service providers, who process data for us:

• Cloudflare: hosting, database and network, for the apps, the portal and this website.
• Stripe, including Link: payments, as the seller of record for each purchase.
• Google: payments in the Google Play version of the Android app (Google Play).
• OpenSubtitles.com: subtitle search and downloads (no personal data).

We may disclose information when the law requires it. Your IPTV provider is not one of our service providers: the app connects to it on your behalf, and its own privacy policy covers what it collects, such as your IP address when you stream.

How long we keep it

• Device records (including the network it registered from, the last IP address and country, the number of days it was used and whether it has a playlist), portal playlists and backups: while the device is registered. Ask us to delete a device and its data at any time.
• Payment records: as long as accounting and tax rules require, even if the device is deleted.
• Support requests and their diagnostic reports: a request we answered closes after 14 days without a reply, and closed requests are deleted 90 days after they close (or with the device).
• Rate-limit counters: one day.
• Downloaded subtitle files: up to 60 days.
• Sign-in cookies: 12 hours.

Your choices

You can edit or delete portal playlists at any time. Clearing the app's data removes what's stored on the device. On an LG TV you can give or withdraw your consent to using the TV's ID in Settings › This device (on any profile but a kids profile), or by writing to support: we then remove the code from the device's record, and its license stays. To use the rights described above for the data we hold about your device, write to support@novarcplayer.com with your device ID.

Security

Everything between the app and our servers is sent over HTTPS. Video, and on some devices your provider's channel lists, come straight from your provider at the address it gives, which may use plain http. On our servers, playlist passwords, device keys and backups are encrypted with AES-256-GCM, device tokens are stored as hashes, and sign-in attempts are limited. On your device, the app keeps your playlists and its device key in its own storage.

NovArc Music

This part covers the NovArc Music app for Android (on phones and tablets, and Android Auto), the licence service it checks its trial and purchases with, and the page our Cast receiver loads on a Chromecast. NovArc Music is coming soon to Google Play: this is what the app does once it's there.

In short

There's no NovArc account. Your music, your library and your sign-ins to your servers stay on your devices and your own servers. Our servers see only what they need to give each device its free trial and to check a purchase with Google Play: never your name, email address, Google account, payment details, songs or what you play.

What stays on your devices

The servers and folders you add (their addresses, user names and sign-ins), your library, playlists, ratings, downloads, play history and listening stats, and your settings are kept in the app's own storage on each device, and are not sent to us. Sign-ins (tokens and passwords) are encrypted with a key kept in Android's keystore on that device. If you allow it, the app reads the music on your phone to play it; that stays on the phone too.

Your music servers and folders

The app connects straight to the servers and shared folders you add (such as Jellyfin, Emby, Navidrome, Kodi or Audiobookshelf, or an SMB or WebDAV share). It signs in, keeps your library up to date, streams and downloads songs, covers and lyrics, and, where the server supports it, tells the server what you play and the favourites, ratings and playlist changes you make. Jellyfin and Emby also get your device's name and an ID for this install of the app, which they show in their list of devices. That's between you and your server: whoever runs it decides what it keeps. To find servers, speakers and TVs on your network, the app sends discovery messages that stay on your local network.

Free trials and purchases: our licence service

The app checks its free trial and your purchase with our licence service, a small service we run on Cloudflare.

• When the app first starts on a device, and from time to time until a plan is bought, it asks the service for that device's trial. It sends the app's name and a code made from the identifier Android gives the app on that device (a hash, never the identifier itself). The service keeps that code with the time the trial started, so reinstalling the app doesn't start a new trial.
• When you buy a plan or restore a purchase, and again from time to time while it lasts, the app sends the service the purchase token Google Play gave it, with the device's code. The service asks Google Play about the purchase (which plan it is, whether it's paid, pending, on hold, paused, refunded or cancelled, and for a subscription, when it's paid up to and whether it renews), confirms a new purchase to Google, and sends back a licence for that device, signed so it can't be altered.
• The service keeps a hash of the purchase token (never the token itself), which product it is, whether it was a test purchase, when it was first and last checked, the earlier purchase it continues when you switch between monthly and yearly, and for each device it unlocks, the device's code and when that device was first and last seen. Once a day it reads Google Play's list of purchases that were refunded, charged back or cancelled, and keeps the hash of each with when and why.
• Cloudflare processes your IP address to deliver the service, and the service uses it in counters that limit how many requests one address can make in a minute. It isn't stored with your records. We don't log requests. If something goes wrong in the service, Cloudflare keeps the error message for us for up to 7 days; our error messages don't include your IP address or your purchase token.

Payments

Plans are bought in the app through Google Play. Google takes the payment and collects your payment details under Google's own privacy policy; we never see them. In some countries, such as the UK, Google is the merchant of record and sells the plan to you itself, and in the EU Google charges and pays the VAT on it. Where Google isn't the merchant of record, NovArc LLC is the seller and Google takes the payment for us. Our licence service receives only the purchase token, as described above, and Google's answer about it, which can also name the country of the purchase; the service doesn't keep that. Google Play Console, Google's site for app developers, also shows us Google's record of each order, which we use only for our accounts, to answer your questions and to handle refunds.

Casting to a TV or speaker

To find and control Chromecasts, the app uses Google Cast, part of Google Play services, under Google's privacy policy. Google Cast sends Google information about casting (such as finding devices and starting and ending casts) and about the phone and the app, which Google says is anonymous and uses to improve Cast. When you cast, the Chromecast loads our receiver page from music-cast.novarcplayer.com, and Google's Cast software from Google. Before a cast, the app checks that our page can be reached. Cloudflare processes the IP address of the phone and the Chromecast to deliver the page; the page stores nothing, and we don't log requests. The phone tells the Chromecast what to play, with the songs' titles, artists, covers and lyrics, and the songs themselves come straight from your server or from your phone, never through our servers.

To play on DLNA speakers and TVs, and to give a Chromecast songs that are on your phone or on a share, the app runs a small server on your home network while it plays, which answers only the addresses it made for those songs.

Internet radio

If you search for stations, what you search for is sent to radio-browser.info, a free list of stations its users keep, which sees your IP address. When you start a station you found there, the app tells radio-browser.info, as it asks apps to, so it can rank stations by what people play. This is on at first, and you can turn it off in Settings. Stations from your servers, or added by their address, are never reported. A station's logo comes from the address the list gives for it, and its stream from the station; both see your IP address.

ListenBrainz, if you turn it on

If you sign in to ListenBrainz with your token, the app sends ListenBrainz, for your account, what you play: what's playing now, and for each song you've listened to, its title, artist, album, track number, length, MusicBrainz ID where it has one, when you played it and for how long, with the app's name and version. ListenBrainz's own privacy policy covers it. Your token is kept on the device, encrypted. You can turn it off or sign out at any time.

Android's backups

If Android's backup is on, Android copies the app's settings, your saved radio stations, the speakers and TVs it found on your network, and its licence (with the purchase token and when the trial started) to your Google account, and to a new phone when you move, so a purchase comes with you. Your sign-ins to your servers, your library and your downloads are left out. Google keeps these backups under its own privacy policy, and we can't see them. Back up settings, in the app's Settings, saves your settings to a file you choose; it holds no sign-ins and stays where you save it.

How we use it

To give each device its free trial, to check purchases and honour them (and to end a licence when its purchase is refunded or charged back), and to keep the licence service from being abused. Where the law asks for a legal basis, we rely on providing the app you asked for, and on our legitimate interest in preventing abuse: one trial per device, and a purchase on at most 10 devices at a time.

Who we share it with

We use these service providers, who process data for us:

• Cloudflare: hosting for the licence service and the Cast receiver page.
• Google: Google Play, for payments and to check purchases; Google Cast, for casting.

The services you choose to use from the app, such as your own servers, radio-browser.info, radio stations and ListenBrainz, aren't our service providers: the app connects to them for you, and their own privacy policies cover what they collect. We may disclose information when the law requires it.

How long we keep it

• A device's trial record (its code, the app's name and when the trial started): for as long as we offer NovArc Music, so the trial can't start again, unless you ask us to delete it.
• Purchase records (the token's hash, the plan, and the codes of the devices it unlocks with when each was first and last seen): for as long as we offer NovArc Music, so the purchase keeps working. A device not seen for 90 days stops counting towards the purchase's device limit.
• The list of refunded, charged back or cancelled purchases (each one's hash, when, and Google's reason): for as long as we offer NovArc Music, so a refunded purchase stays ended.
• Rate-limit counters: a minute.
• Error messages in Cloudflare's logs: up to 7 days.
• If we stop offering NovArc Music, we delete these records within 12 months.

Your choices

Everything the app keeps on a device goes when you clear its data or uninstall it (a copy in Android's backup stays until Android replaces or deletes it). You can stop telling radio-browser.info what you play in Settings, and turn off ListenBrainz at any time. The licence service's records don't include your name or account, so we can only find them by a code. For a purchase, that's the support code the app shows in Settings › Licence; for a device's own records (its trial, and its place on a purchase), it's the device code the app shows in Settings › About. Write to support@novarcplayer.com with the code to use the rights described above, and we'll answer within 30 days. Removing a purchase's records doesn't cancel the purchase: if the app checks it again on one of your devices, the service writes them again, because that's how it unlocks the app. A device's trial record comes back the same way while the app is on that device. So remove the app from your devices first. Once a device's trial record is deleted, that device can start a free trial again.

Security

The app talks to the licence service only over HTTPS, and accepts only licences signed with our key. Purchase tokens are kept on our side as hashes only. On your device, sign-ins are encrypted with a key kept in Android's keystore, and before a password would go to a server over plain http outside your home network, the app warns you, and it won't send a shared folder's password over SMB or plain http outside your home network.