Privacy Policy

1. What Data We Collect

We collect the minimum data needed to operate our client portal, process payments, and provide support:

• Account information: name, email address, and any other details you provide when you register for or use our client portal.
• Payment and order data: order records, invoice details, BTC transaction/wallet references, and payment status. We do not collect, process, or store any bank card details — all payments are made in Bitcoin (BTC), and we never touch your card, bank, or wallet credentials.
• Support communications: messages, tickets, or emails you send us when requesting help.
• Technical & usage data: IP address, browser type, device information, and pages visited on our marketing website, collected automatically via Google Analytics (see Cookies section below).
• App-side data: The Wizard Player Android app itself stores your Xtream/M3U playlist credentials locally on your device (and/or in your portal account, if you choose to sync them) so the app can connect to your chosen IPTV provider. We do not inspect, monitor, or have visibility into the stream content those credentials retrieve.

2. How We Use Your Data

• To create and manage your client portal account.
• To process orders and payments, and to send transactional emails such as invoices, payment receipts, and password reset emails.
• To provide customer support and respond to enquiries.
• To maintain the security, integrity, and reliability of our services.
• To understand aggregate usage of our marketing website via analytics, so we can improve it.
• To comply with our legal and tax obligations.

We do not use your data to monitor, review, or profile the streaming content you access through your own IPTV credentials, because we have no access to that content or activity in the first place.

3. Cookies & Analytics

Our marketing website (streamport.org / twplayer.org) uses Google Analytics (GA4) to understand how visitors use our site. Google Analytics sets cookies and collects data such as pages visited, session duration, approximate location, and device/browser type. This data is aggregated and used solely to improve our website; it is processed by Google in accordance with Google's own privacy policy.

We also use a small amount of local browser storage (not a tracking cookie) on our homepage purely to remember that you have dismissed our stream-content disclaimer, so it does not reappear on every visit within the storage period.

You can disable cookies and analytics tracking at any time through your browser settings or a browser extension such as Google's opt-out add-on. Disabling cookies will not affect your ability to use the client portal or the app.

4. Data Retention & Deletion

We retain account and order data for as long as your account is active, and for a reasonable period afterwards as required to meet our legal, accounting, and tax obligations (typically up to 6 years for financial records, in line with standard bookkeeping requirements).

You may request deletion of your account and associated personal data at any time by contacting us using the details below. We will action deletion requests promptly, except where we are legally required to retain certain records (e.g. transaction records for tax purposes).

5. Third Parties We Work With

• mempool.space: we use mempool.space's public API to look up current BTC exchange rates and to verify the status/confirmation of Bitcoin transactions relating to your order. We do not send them your personal account details — only transaction references necessary to verify payment.
• Email/mail provider: we use a third-party transactional email provider to deliver invoices, receipts, password reset emails, and support correspondence. Your email address and the content of these emails are shared with that provider solely to deliver these messages.
• Google Analytics: as described above, for website usage analytics.
• Hosting infrastructure: our servers are hosted with a third-party infrastructure provider that stores data on our behalf under standard hosting terms.

We do not sell your personal data to any third party, and we do not share it with advertisers.

6. Data Security

We take reasonable technical and organisational measures to protect your data against unauthorised access, loss, or misuse. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security, but we work to keep your information protected.

7. Your Rights

Depending on your jurisdiction, you may have rights to access, correct, delete, or export your personal data, and to object to or restrict certain processing. To exercise any of these rights, contact us using the details below.

8. Content & Legal Responsibility

To reiterate the point made at the top of this page because it matters: The Wizard Player app is a media player only. Any live TV, movie, or on-demand content you view through the app comes exclusively from IPTV service credentials (Xtream/M3U) that you provide, sourced from a third-party provider of your own choosing. We do not host, stream, index, control, or have any technical ability to access that content. You are solely responsible for ensuring that your chosen IPTV source and your use of it complies with the laws of your jurisdiction.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date at the top of this page. Continued use of our services after changes are posted constitutes acceptance of the updated policy.

10. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us at:

support@twplayer.org