Privacy Policy
This policy explains what information Ultra Player collects, why we collect it, who we share it with, and how long we keep it. It covers the Ultra Player apps, the website, the device dashboard, and the activation and payment flow.
Last updated: 14 October 2026
Who we are
Ultra Player ("we", "us", "our") provides the Ultra Player media player apps for Smart TVs and other devices, the website at ultraplayer.org, and the device dashboard. The registered legal entity operating Ultra Player will be published here. For anything in this policy, write to support@ultraplayer.org.
The short version
Your TV is identified by an activation code derived from the device itself — no account is needed to use the player. We store the playlists you add so your TV can load them, we record purchase details when you buy a player license or a VPN pass, and the website sets only the cookies it needs to work. We never see your card number, we do not sell personal data, and we do not build advertising profiles.
Device information
When your device talks to our service we process the identifiers it reports: the activation code shown on screen, hardware-derived identifiers used to recognise the same TV again, the platform and app version, the device's IP address and the country derived from it, when it was last seen, and basic connection diagnostics (such as measured speed and buffering counts) that the dashboard shows back to you. Some of these identifiers count as personal information under data-protection law, and we treat them that way.
Playlist information
When you add a playlist in the dashboard we store what you enter so the app can load it on your TV: the playlist name, its URL, an optional EPG URL, and — for Xtream-style playlists — the host, username and password that URL contains. We treat playlist data as confidential: it exists only so your TV can fetch your playlists, and it is never sold, rented, or used for advertising. Be aware that a playlist URL can reveal which provider it came from.
What you watch stays on your TV
The app keeps its recently-viewed list and favourites on the device itself. Our servers do not receive a log of the channels or titles you watch.
Accounts
Creating an account on the website is optional. If you register — for example as a reseller or to manage several devices — we store your name, email address and a hashed password, together with the devices and orders linked to that account.
Purchases and activation
When you buy a player license or a VPN pass we ask for the details needed to complete and document the purchase: your name and email address, the product and amount, and the transaction result (status, reference, date) that the payment provider reports back to us. Card and bank details are entered directly on the payment provider's own secure page — they never reach our servers and we never store them.
VPN passes
If you buy a VPN pass, we create and store the tunnel configuration your device needs to connect and the validity period of your pass. While the tunnel is on, your streaming traffic passes through our VPN servers in encrypted form so it can reach your providers.
Support
If you use the contact form or write to us, we receive your name, email address and the content of your message, and we keep the correspondence for as long as it takes to resolve your request and any dispute connected to it.
Collected automatically
Like almost every web service, our servers record technical data about requests: IP address, browser or app identifier, the endpoints requested, and timestamps. We also receive automatic error reports when something in the app or website crashes, so defects can be found and fixed. These logs are used for security, troubleshooting and abuse prevention, not for profiling.
What we do not collect
We do not receive or store card numbers, CVV codes or bank account details. We do not sell personal information, we do not run advertising or build advertising profiles, and we do not keep a server-side history of what you watch.
Why we use your information
We use personal information to run the service (registering and recognising your device, delivering your playlists, applying your license and VPN pass — performance of our contract with you); to process purchases and confirm their outcome (contract); to answer support requests (contract or our legitimate interest); to keep the service secure and prevent fraud and abuse (legitimate interest); and to meet legal obligations such as tax and accounting record-keeping (legal obligation).
Cookies
The website and dashboard set only the cookies they need to function: a session cookie that keeps you signed in and a security token that protects forms against forgery. We do not set advertising cookies. When you open a payment page, the payment provider may set its own cookies under its own policy. Blocking the necessary cookies will prevent the dashboard from working.
Who we share information with
We share personal information only with providers we need to run the service, and only what they need: payment providers (to take payment and report the result), hosting and infrastructure providers (where the website, panel and databases run), our email delivery provider (to send you transactional mail), and our error-monitoring service (which receives technical crash details). We may also disclose information where the law requires it or to establish, exercise or defend legal claims. We never sell it.
International transfers
Some of our providers operate outside your own country, including outside the European Economic Area. Where personal information crosses borders, we rely on recognised safeguards such as adequacy decisions or standard contractual clauses. Write to us for details of the safeguards that apply.
How long we keep information
Device and playlist information is kept while the device remains registered and is deleted when the device or playlist is removed. Purchase records are kept for as long as tax and accounting law requires. Support correspondence is kept until the matter is closed. Server and security logs are kept for a limited period and then deleted or anonymised.
Your rights
Depending on where you live, you can ask to access, correct, delete or export your personal information, to restrict or object to its processing, and to withdraw consent where processing is based on consent. You can also complain to your data-protection authority. To exercise any right — including deleting a device and its playlists — write to support@ultraplayer.org; we answer within the time the law allows.
Security
Connections to our servers are encrypted, credentials and device secrets are stored hashed, backups are encrypted, and access to systems is restricted. No system is perfectly secure, and we cannot promise absolute security; if a breach ever puts your rights at risk, we will notify the supervisory authority and, where required, you.
Children
Ultra Player is not directed at children and we do not knowingly collect personal information from anyone under 16 (or the lower age your country sets). If you believe a child has given us personal information, contact us and we will delete it.
Your providers are not us
Ultra Player is a media player. The playlists and streams you load come from third parties you choose, and what those providers do with your information is governed by their policies, not this one. The same goes for any external site we link to.
Changes to this policy
When we change this policy we publish the new version on this page with a new date, and for significant changes we will tell you in the app or by email. Using Ultra Player after a change means the updated policy applies.
Contact
Questions or complaints about privacy? Write to support@ultraplayer.org and we will get back to you within one business day.