Privacy Policy

This Privacy Policy explains how CYP Player ("we", "us") collects, uses, shares and protects information when you use the Cyp Player apps and the website cypplayer.com (together, the "Service").

The Cyp Player apps are available on Android TV, Amazon Fire TV, LG webOS, Samsung Tizen and Roku devices, on iPhone, iPad and Apple TV, and in a web browser. Cyp Player is a media player. It does not come with any channels or content; it plays playlists that you add from a service provider of your choice.

Information We Collect

Device information. When the app starts, it registers your device with our Service and sends:

• a device identifier, such as the device's MAC address or an ID generated by the app or provided by the device platform;
• the device model, operating system or firmware version, screen resolution and app version;
• the country or region setting, where the device provides it.

Connection information. Each time the app or website contacts our servers, we receive your IP address and the app or browser identification (user agent).

Sign-in information. Each device is given a PIN, which you use with the device ID to sign in on our website. If you set a parental control PIN, we store it. If you create an account on our website, we store your email address and your password. The password is stored only as a one-way hash, so we cannot read it.

Playlist information you enter. When you add a playlist, we store what you enter: the playlist name, the server address or URL, the username and password for that server, a portal MAC address if used, and the playlist protection PIN. We store this so the app can load your playlists on your device and you can manage them on our website.

App settings. Your language, theme and TV / phone mode, so they can be kept in sync between the app and our website.

Activity records. Records of sign-ins (including failed attempts), device activations, playlist changes, and app update status reports, including any error messages, with the date and time.

Messages to us. If you contact us, we receive your email address and the content of your message.

What we do not collect. The Service shows no ads and contains no analytics or tracking tools. It does not use advertising identifiers and does not collect your precise location. When you pay on our website, you enter your card or bank details on Stripe's checkout page, not on our website, and we never receive them.

How We Use Information

• To register and activate your device, sign you in, and deliver your playlists and settings to your device.
• To manage trials and licences, including activations made by resellers and lifetime licences bought on our website.
• To provide app updates and to find out why an update failed.
• To provide customer support.
• To keep the Service secure and to detect and prevent misuse, fraud and unauthorised access. For example, we look for repeated failed sign-ins, and we may look up the approximate location (country, city and internet provider) linked to an IP address.
• To meet legal obligations.

We do not sell or rent your information, and we do not use it for advertising.

How Information Is Shared

• Resellers. Subscriptions are sold through authorised resellers. The reseller who activates or manages your device, and our own support staff, can see that device's details, status and playlists, so they can activate the Service and help you.
• Payment processor. Lifetime licences bought on our website are paid through Stripe. Your device ID is sent to Stripe with the payment, so that we can match the payment to your device.
• Bitcoin payment check. If you pay with Bitcoin, our server asks the public blockchain services mempool.space and blockstream.info which payments our Bitcoin address has received, and gets the current Bitcoin price from mempool.space or Coinbase. These requests contain only our own Bitcoin address, never your device ID or other information about you.
• Service providers. We use a hosting provider to run the servers that store the Service's data. We use an IP location service (ip-api.com), which receives IP addresses so it can return their approximate location. Our website loads fonts from Google Fonts, which receives your IP address and browser information when a page loads.
• Your content provider. When you play or load a playlist, a connection is made to the server you entered, using the details you entered. Some features, such as the web player, make that connection through our server for you. Your content provider's own privacy policy applies to its service.
• Legal reasons. We may disclose information if required by law, or where needed to protect the rights, safety or security of our users, the public or CYP Player.

Payments

You can buy a lifetime licence from an independent reseller, or on our website.

Website payments are processed by Stripe. You enter your payment details on Stripe's secure checkout page, and we do not receive or store your card or bank details. From Stripe we receive the payment result, the amount, the email address you gave Stripe and your device ID, which we use to activate your device and to answer questions about your payment. Stripe's own privacy policy applies to the information you give Stripe.

You can also pay with Bitcoin. We then store the amount we asked you to pay, the Bitcoin transaction ID and the amount received, together with your device ID, so that we can activate your device and answer questions about your payment. We do not ask for your name or email address for Bitcoin payments. Bitcoin transactions are public and permanent: anyone can see them on the Bitcoin blockchain, and we cannot change or delete them.

If you buy from a reseller, the reseller's own terms and privacy practices apply to that payment.

Cookies and Browser Storage

Our website uses only essential cookies, which keep you signed in. It also uses your browser's temporary session storage during a visit. We do not use advertising or analytics cookies.

Security and Retention

Information is sent to and from our servers over an encrypted connection (HTTPS), and access to stored information is restricted. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

We keep device, account and playlist information for as long as your device or account uses the Service. We keep activity records for as long as they are needed for security, support and legal purposes. When you ask us to delete your information, we delete your device record, account and playlists, except for any information we must keep to meet legal obligations or to prevent fraud.

Your Choices and Rights

• You can view, change or remove your playlists and settings at any time in the app or on our website.
• You can ask us for a copy of the information we hold about your device or account, ask us to correct it, or ask us to delete it. Email us from the address linked to your account, or include your device ID (MAC address) so we can find your records.
• Depending on where you live, you may have other rights under local law. We will respond to requests as required by that law.

Children

The Service is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has given us personal information, contact us and we will delete it. Parents can use the parental control PIN to restrict access on a device.

International Use

Our servers and service providers may be located in a different country from you. By using the Service, you understand that your information may be stored and processed there.

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will change the "Last updated" date at the top of this page. If we make significant changes, we will also post a notice on our website.

Contact Us

For questions or requests about this Privacy Policy or your information, contact CYP Player at info@cypplayer.com or through our Contact page.