Privacy Policy

1. Controller

ALMA Player is responsible for the personal data processed by ALMA Player. Contact for any privacy question or request: our support team.

2. Data we process

• Account: email address, optional display name, language, password (stored only as an Argon2id hash), date you accepted these terms.
• TVs: a random device identifier, TV name, model, app version, and a salted keyed hash of the TV’s hardware ID used only to prevent trial abuse. We do not collect MAC addresses or build device fingerprints.
• Playlists: the name and connection details you enter. Server addresses, usernames and passwords are encrypted (AES-256-GCM) before storage and are only decrypted to send them to TVs you assigned. They are never displayed again in full.
• Licenses and payments: plan, dates, status; payment records once online payment is available (card details are handled by the payment provider, never by us).
• Security records: sign-ins, important account changes, a truncated IP address and the browser type, to protect your account and investigate abuse.

3. What we do not collect

• We do not see, log or store what you watch. Recently watched items and favorites stay on your TV only.
• We do not proxy or record streams: your TV connects directly to your provider.
• We use no advertising, no tracking cookies and no third-party analytics.

4. Why and on what legal basis

• To provide the Service you signed up for (performance of a contract): account, TV linking, playlist delivery, licenses.
• To keep the Service and your account secure and prevent fraud or trial abuse (legitimate interest).
• To keep billing records required by tax and accounting law (legal obligation).
• To send service emails: confirmation, password reset, security notices. We do not send marketing without your consent.

5. How long we keep data

• Account data: as long as your account exists. When you delete it, personal data is erased or irreversibly anonymized immediately.
• Playlist credentials: erased immediately when you delete the playlist or your account (the encrypted data is destroyed).
• Sign-in sessions: 30 days at most, then removed within 7 days of expiry.
• Email links (confirmation, reset): removed one day after they expire. Sent email records: 30 days.
• Security records: 12 months, then deleted.
• License and billing records: for the period required by applicable tax law (often up to 10 years), linked only to an anonymized account after deletion.

6. Who receives data

Hosting and email delivery providers acting on our instructions, and payment providers when you pay. Your playlist details are sent only to your own TVs. We do not sell personal data.

7. Your rights

• Access and portability: download a copy of your data anytime in Settings → Your data (JSON, passwords excluded).
• Erasure: delete your account in Settings; it takes effect immediately.
• Rectification: edit your profile in Settings, or contact us.
• Objection and restriction: contact our support team.
• You may also complain to your data protection authority.

8. Cookies

We only use cookies that are strictly necessary: sign-in cookies (HttpOnly, not readable by scripts), a security token protecting forms against cross-site attacks, and your language choice. No consent banner is needed because no tracking cookies are used.

9. Security

Data in transit is protected with HTTPS. Passwords are hashed with Argon2id, playlist credentials are encrypted with keys kept outside the database, and access by our staff is limited, logged and never includes your playlist passwords.