Privacy Policy

Effective from November 7, 2026.

This policy explains what personal data XLitePlayer, the TV app by ArkanoDevs, processes, why it uses it, how long it keeps it and how you can exercise your rights. It applies to the app, to the xliteplayer.com website and to email support. The Spanish version is the reference text; this English version is provided for convenience.

1. Controller

The controller is ArkanoDevs, the developer of XLitePlayer, based in Peru. For any privacy matter, write to soporte@xliteplayer.com.

2. What XLitePlayer is

XLitePlayer is a media player. It does not include, sell or host channels, movies, series or playlists. To use it you need an account with a content provider, which gives you a provider code, a username and a password. Video, artwork and the program guide travel directly from your provider's servers to your TV: they do not go through our servers.

3. What data we process and why

TV data. The first time you open the app, the TV registers with our server. We store:

• a TV identifier: the MAC address on Samsung and LG, or an installation ID created by the app itself on Android TV, Fire TV and Vega OS. We store it encrypted;
• the platform, the model, the app version and the video formats the TV supports;
• the dates of registration and last connection, and the status of its access.

We use them to register the TV, keep it signed in, apply the access your provider gives it, prevent abuse and give you support. The identifier is shown on the sign-in screen so you can tell us which TV you mean when you write to us.

Signing in with your provider. When you sign in, the app sends the provider code, your username and your password to our server, always encrypted in transit (HTTPS). The server checks them once with your provider and discards them: we do not store your username or your password. We do store which provider the TV connected with and the dates of its access period, because access is assigned per TV and in 30-day periods.

Acceptance of these documents. We store which version of the terms of use and of this policy the TV accepted, and when.

Technical logs. Like any internet service, our servers record each request: IP address, date and time, requested address (without its parameters), result and type of device or browser. We use them only to keep the service secure and to fix problems.

Support messages. If you write to us, we process your email address and what you tell us in order to reply.

4. What stays only on your TV

Your provider username and password (so you are not asked for them every time), your favorites, history, where you stopped each movie or episode, the parental control PIN and your settings are stored only on the TV: we do not receive them. You can remove a saved account with the "Quitar" (Remove) option in the user list, and delete everything by uninstalling the app.

5. What we do not do

• We do not show ads or use analytics or tracking tools.
• We do not sell or rent your data, or use it to build profiles.
• We do not access your location, microphone, camera or contacts.
• We do not know which channels, movies or series you play: that happens between your TV and your provider.

6. Legal basis

We process your data because it is necessary to provide the service you request by using the app, because of our legitimate interest in keeping the service secure (technical logs), and with your consent, which you give by accepting this policy on the TV. We may keep or disclose data when a law or a competent authority requires it.

7. Who we share data with

Only with those who help us provide the service, and only what is necessary:

• Your provider receives your username and password when our server checks your account. What your provider does with your data is governed by its own terms.
• Contabo GmbH hosts our servers in France.
• Cloudflare, Inc. protects and delivers the traffic of our website and our server, and forwards support email.
• Google LLC (Gmail) hosts the mailbox where we receive support email.
• YouTube (Google LLC): if you open a trailer, the TV loads it directly from YouTube, which receives your IP address under its own policy.

App stores (Samsung, LG, Amazon and Google) process your account and download data under their own policies. We do not share data with anyone else unless the law requires it.

8. International transfers

Our servers are in France (European Union); Cloudflare and Google may process data in the United States and other countries. We work with providers that apply appropriate security measures and data protection commitments. By accepting this policy, you consent to these transfers.

9. How long we keep data

• TV data, access periods and acceptances: while the TV uses XLitePlayer. If you ask us to delete them, we do so within 30 days.
• Technical logs: deleted automatically within 30 days.
• Database backups: deleted automatically after 14 days.
• Support messages: as long as needed to handle your request.

10. Security

We use encrypted connections (HTTPS) between the TV and our server, store the TV identifier encrypted, protect session keys and limit server access to the people who run them. No system is infallible: if an incident affected your data, we would notify you and, where the law requires it, the authority.

11. Your rights

You can ask us at any time to access, correct or delete your data, to object to its processing or to withdraw your consent, under Peru's Personal Data Protection Law (Law No. 29733) and its regulations. If you live in another country, you can also exercise the rights your local law gives you.

Write to soporte@xliteplayer.com with your request and the MAC or installation ID shown on the app's sign-in screen, so we know which TV it concerns. We will reply within the time limits set by law. If you are not satisfied, you can file a complaint with Peru's National Authority for Personal Data Protection (Ministry of Justice and Human Rights).

To delete your data, follow the steps at xliteplayer.com/en/delete-data.

12. Children

XLitePlayer is intended for people aged 18 or over, who are the ones able to get an account with a provider. We do not knowingly collect data from minors; if you believe a minor has given us data, write to us and we will delete it.

13. Changes to this policy

If we change this policy, we will publish the new version in the app and at xliteplayer.com/en/privacy, with its date. If the change is significant, the app will ask you to accept it again.

14. Contact

ArkanoDevs · soporte@xliteplayer.com