Privacy Policy
Last updated:
Our Commitment to Privacy
PlayMux takes your privacy seriously. We believe that privacy is a fundamental right, not a feature. Our app is designed with a simple principle: your data stays on your device unless you turn on sync with PlayMux Pro or use iCloud Keychain for your passwords. We do not track you, we do not require accounts, and we do not collect personal information on our own servers.
Controller
The controller responsible for processing personal data under the GDPR is Bekir Üstün, the provider of PlayMux and of this website. The postal address is in the imprint; you can reach us at support@playmux.app.
Data Collection
PlayMux does not collect any personal data on its own servers. There are no user accounts, no sign-up forms, no email collection, and no analytics or telemetry of any kind in the apps (the analytics of this website are described under “Website Analytics”). We have no servers that store your information.
All data you enter into the app, including playlist URLs, media server credentials, favorites, watch progress and collections, is stored on your device. On Apple devices, passwords and access tokens are kept in the system Keychain. On Android, media server credentials are encrypted with a key in the Android Keystore, while playlist addresses are stored as you entered them and can contain access data. If you turn on sync with PlayMux Pro, the data described under “Sync with PlayMux Pro” is stored in your own iCloud or Google Drive account. Independently of PlayMux Pro, passwords and access tokens on Apple devices can sync through your iCloud Keychain if you have iCloud Keychain turned on.
Local Storage
PlayMux stores the following data locally on your device:
- Playlist configurations — M3U URLs and Xtream Codes API credentials
- Media server credentials — Connection details for Jellyfin, Plex, Emby, and SMB/NAS servers
- Favorites and collections — Your personal channel and content organization
- Watch progress — Playback position for movies and series episodes
- EPG cache — Cached electronic program guide data for faster loading
- App settings — Your display preferences and configuration
This data stays on your device unless you turn on sync with PlayMux Pro (see below). On Apple devices, passwords and access tokens are the exception: they can sync through your iCloud Keychain even without PlayMux Pro (see “Media Server Credentials” below). It is under your control and is not accessible to PlayMux developers.
Sync with PlayMux Pro
Sync is optional, requires PlayMux Pro and works only within one platform.
- Apple devices: playlists (with names, types, addresses and user names, but without passwords), favorites, hidden groups, recently watched items, collections, settings, watch progress, the lock lists and the PIN hash of the parental controls and a technical index of category names are stored in the private iCloud storage of your Apple ID (iCloud key-value storage and your private CloudKit database). A playlist address can contain access data if your provider puts it into the URL. Passwords and access tokens are not part of this sync; they travel only through iCloud Keychain, which is end-to-end encrypted (see below).
- Android devices: see “Google user data” below.
PlayMux developers cannot access your iCloud or Google Drive data. You can turn off sync in the app at any time. On Apple devices, “Delete All PlayMux Data” in the app also removes the synced iCloud data.
Google user data (Android)
If you turn on sync with PlayMux Pro on Android and sign in with Google, PlayMux asks for access to the app data folder of your Google Drive (scope drive.appdata). This is a hidden folder that only PlayMux can read and write. PlayMux cannot see any other files in your Google Drive.
What PlayMux stores there: playlists (name, address, type and program guide address), favorites from your media library (title, subtitle and artwork address), collections, watch progress, five playback settings (play next episode automatically, resume playback, default speed, seek step and program guide on or off) and a technical index of category names. A playlist address can contain access data: if your provider puts a user name and password into the address, as Xtream Codes accounts do, they are stored in that address. Credentials for media servers (Jellyfin, Plex, Emby, SMB) are not synced.
How it is used: only to sync this data between your Android devices. The data is transferred directly between your device and Google. It never passes through a PlayMux server, is not shared with anyone and is not used for advertising.
How to remove it: turning off sync in the app only stops syncing; the files already in Google Drive stay. To delete them from within the app, use the option to delete all local data and select the checkbox that also deletes the Google Drive sync data (this dialog is currently shown in German only). Alternatively, remove PlayMux’s access in the security settings of your Google Account, and delete the hidden app data in the Google Drive settings under “Manage apps”.
PlayMux’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Network Access
PlayMux connects to the internet solely for the following purposes:
- Loading playlists — Fetching M3U files and Xtream Codes API data from your configured providers
- Streaming media — Playing live TV channels, movies, and series from your sources
- EPG data — Downloading electronic program guide information (XMLTV format)
- Media server communication — Browsing and streaming from your Jellyfin, Plex, Emby, or SMB servers
- TMDB metadata — Fetching movie and series information (posters, descriptions, ratings) from The Movie Database API
- Sync (optional, PlayMux Pro): iCloud on Apple devices, Google Drive on Android
- Purchases: the App Store or Google Play for the PlayMux Pro subscription. PlayMux receives only the status of your subscription, no payment details.
- Trailers: only when you tap “Trailer” on a movie or show page, the trailer opens on YouTube
No analytics, no telemetry, no tracking. We do not send any usage data, crash reports, or behavioral information to any server.
Third-Party Services
PlayMux interacts with the following third-party services to provide functionality:
The Movie Database (TMDB)
Used for fetching movie and series metadata (posters, descriptions, ratings, trending content). No personal data is shared with TMDB. Only content identifiers (titles, IDs) are sent as search queries. TMDB's privacy policy applies to their service: themoviedb.org/privacy-policy.
YouTube
Movie and show pages can show a “Trailer” button. Only when you tap it does PlayMux open the trailer outside the app, in the YouTube app or your browser; the link comes from TMDB. YouTube then receives the same data as with any other visit, and Google’s privacy policy applies: policies.google.com/privacy. PlayMux itself sends no data to YouTube.
iptv-epg.org
Used as a fallback source for electronic program guide (EPG) data when no EPG URL is provided in your playlist. Only channel identifiers are used to match EPG data. No personal information is transmitted.
Media Server Credentials
If you connect PlayMux to media servers (Jellyfin, Plex, Emby or SMB/NAS), your credentials (user names, passwords, tokens and server addresses) are stored on your device, passwords and tokens in the Keychain or the Android Keystore. On Apple devices, passwords and tokens are stored so that iCloud Keychain can sync them end-to-end encrypted between your Apple devices if you have iCloud Keychain turned on in your Apple ID settings. This does not depend on PlayMux Pro. Credentials are used only to sign in to your servers and are never sent to PlayMux or any third party.
Communication between PlayMux and your media servers happens directly between your device and your server, without any intermediary.
Website Analytics
This website uses Google Analytics 4 to understand how visitors use our site. Google Analytics collects anonymized usage data such as pages visited, visit duration, and general device/browser information. IP addresses are anonymized.
Google Analytics is only loaded after you agree in the cookie banner. Until then, this website makes no connection to Google. If you decline, no analytics data is collected. You can change your choice at any time with “Cookie settings” at the bottom of every page. If you withdraw your consent, the Google Analytics cookies are removed.
Google Analytics is operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. For more information, see Google's Privacy Policy. The legal basis for this processing is your consent (Article 6(1)(a) GDPR).
Cookies
The PlayMux app does not use cookies. This website uses cookies set by Google Analytics only if you have given consent via the cookie banner. No tracking cookies are set without your explicit permission.
Your consent preference is stored in your browser's local storage (not as a cookie) under the key playmux_cookie_consent. This is a technical necessity and does not require consent.
Legal Basis & Your Rights (GDPR)
While PlayMux does not collect, store, or process any personal data on our servers, any local processing on your device or network requests to third parties (like TMDB) are strictly necessary to provide the app's core functionality (Article 6(1)(b) and (f) GDPR).
Under the General Data Protection Regulation (GDPR), you have the right to access, rectify, erase, restrict processing, and port your personal data. Because we do not hold any data about you on our own servers, you can exercise these rights directly by deleting app data or uninstalling the app.
You also have the right to lodge a complaint with a supervisory data protection authority (Article 77 GDPR) if you believe your data protection rights have been violated.
Web Fonts
This website uses the font Schibsted Grotesk, which is hosted on our own server. No font is loaded from Google Fonts or any other external service, so your IP address is not sent to third parties when the fonts are displayed.
Children's Privacy
PlayMux does not collect personal data from anyone, including children, on its own servers. Since no data collection by PlayMux occurs, the app is suitable for users of all ages. Parents and guardians are responsible for the content sources configured in the app.
Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be reflected on this page with an updated "Last updated" date. Since we do not collect email addresses or contact information, we encourage you to review this page periodically. Significant changes will also be communicated through the app's release notes.
Contact
If you have any questions or concerns about this Privacy Policy, please contact us at: