Last updated: 28 August 2026
What we collect
OakPlayer does not require account registration. Instead, the app generates an anonymous, random Device ID on first install. This Device ID is used only to check your Premium entitlement status against oakplayer.com — it is not linked to your name, email, or any other personal profile unless you choose to give us that information yourself (for example, by messaging us on WhatsApp, or by using the website’s playlist submission form described below).
We do not collect your IPTV/Xtream Codes or M3U playlist usernames and passwords through the app itself. Those credentials are encrypted on your own device using the Android Keystore (hardware-backed where available) and are used locally by the app to connect directly to the playlist provider you added — they are not transmitted to OakPlayer’s own servers in plain text by the app.
The website’s “Add Playlist” submission form
If you choose to use the form on our Add Playlist page instead of entering a playlist yourself in the app, you are voluntarily sending us your Device ID, your chosen playlist type, and the connection details needed to add it (an Xtream Codes server URL/username/password, or an M3U URL), plus an optional contact method (WhatsApp number or email) if you want us to follow up. This is different from the app itself, which never sends these details to us:
- Submissions are sent over an encrypted (HTTPS) connection to our website.
- Your playlist credentials are encrypted at rest in our database using server-side encryption before being stored — they are not stored or logged in plain text at any point in our systems.
- Only our authenticated site administrators can view submitted playlist requests, through a restricted admin screen — there is no public or unauthenticated way to read submitted data.
- We use these details for the single purpose of configuring the requested playlist in your OakPlayer account (and, if you gave us a contact method, following up with you about it). We do not sell, rent, or share this information with third parties.
- If you’d like a submitted playlist request deleted from our records after it has been processed, contact us and we will remove it.
If you’d rather not send credentials through a website form at all, you can always add a playlist entirely on-device through the app instead (see the Add Playlist page for the in-app steps) — using the website form is optional.
How it’s used
- Entitlement checks: your anonymous Device ID is sent to oakplayer.com to confirm whether Premium features should be unlocked on your device.
- Metadata lookups: OakPlayer uses TMDB (The Movie Database) to look up posters, descriptions, and other metadata for movies and series, based on title/year information — this is a standard third-party metadata service, not a source of your personal data.
- Local library data: your synced playlist library, favourites, and watch history are stored locally on your device to make browsing and resuming playback fast; we do not upload this library to our servers.
- Playlist submission data: as described above, only collected if you voluntarily use the website form, and used only to configure the requested playlist.
Premium purchases via WhatsApp
OakPlayer Premium does not currently use an automated in-app payment processor. Instead, upgrading is arranged manually: you contact us on WhatsApp, our team confirms payment with you directly, and we then activate Premium against your Device ID from our admin system. Any personal or payment details you choose to share with us over WhatsApp are handled by our team directly through WhatsApp itself (a platform operated by Meta, subject to its own privacy policy) — this website and the OakPlayer app do not automatically capture, process, or store payment details from that conversation.
Third-party services
- TMDB — movie/show metadata (posters, titles, descriptions).
- WhatsApp (Meta) — used for manual Premium sign-up and support conversations you initiate.
- Your own IPTV/playlist provider(s) — whichever Xtream Codes or M3U source(s) you add yourself; we have no visibility into their own data practices.
How long we keep data
Entitlement records (Device ID + Premium status) are kept for as long as needed to operate the Premium feature, or until you ask us to remove one. Playlist submissions made through the website form are kept only until the request has been actioned, after which they can be deleted on request. We do not otherwise operate a data-retention schedule beyond what’s described on this page, since OakPlayer does not maintain a general personal-data database.
Your rights
Since OakPlayer does not maintain user accounts or a personal-data database tied to your identity, most of what OakPlayer “knows” about you (your playlists, favourites, watch history) lives only on your own device and can be cleared at any time by clearing the app’s data or uninstalling it. If you have contacted us directly (e.g. via WhatsApp, email, or the website form) and would like us to delete that information, contact us and we will action your request.
Contact
Questions about this policy can be sent via our Contact page or WhatsApp.