Deno Player · Last updated: 9 July 2026
The controller responsible under the General Data Protection Regulation (GDPR) for the mobile application Deno Player (the “App”) is:
Deno Studios E-Mail: support@denoz.net
Deno Player is a pure media player for IPTV content (Xtream Codes, Stalker/Ministra portals and M3U playlists). The following applies to its operation:
To function, the App stores the following data in a local database and in the app settings on your device:
| Data category | Content | Purpose |
|---|---|---|
| Playlist / portal profiles | Display name, server URL, username, password, MAC address, EPG URL, M3U URL | Connecting to your chosen IPTV provider |
| Favorites | Bookmarked channels/titles | Quick access |
| Watch history | Recently watched titles, playback position | “Continue watching” |
| EPG cache | Programme info (title, description, air times) | Fast, offline-capable guide |
| Reminders | Scheduled reminders / auto-tune | Notification before a programme starts |
| Settings | Language, buffering, parental PIN, optional TMDB API key | Configuration & parental control |
| Recordings | Streams you record | Stored in the app's private directory |
Important: The credentials for your IPTV provider (username, password, MAC address) are stored unencrypted in the local app database and are accessible only on your device. Please protect your device accordingly (lock screen, device encryption).
Legal basis: Provision of the features you requested (Art. 6(1)(b) GDPR) and our legitimate interest in a functioning app (Art. 6(1)(f) GDPR). Because none of this data is transmitted to us, we never have access to it.
To play content, the App connects directly to the server you enter. In doing so, your credentials (username/password or MAC address) and request data (channel lists, streams, EPG) are transmitted to that server; your IP address is technically visible to the provider. This provider is a third party chosen by you, whose own privacy policy applies to its data processing. Many IPTV portals communicate unencrypted over HTTP; the App supports this for compatibility reasons.
Legal basis Art. 6(1)(b) GDPR.
Only if you voluntarily enter your own TMDB API key in the
settings does the App fetch additional metadata (poster, description, rating).
To do so, the title of the movie/series is sent to
themoviedb.org. Without a stored key, no
communication with TMDB takes place. Provider: TMDB (USA),
privacy policy.
Legal basis Art. 6(1)(a) GDPR (consent); transfer to a third country (USA).
Channel logos and preview images are loaded directly from the URLs provided in your playlist or by TMDB. This establishes a connection to the respective image server (your IP address, among other things, is technically visible).
The optional voice search uses your device's speech recognition
(Android RecognizerIntent). Processing is performed by the system
component on your device (e.g. Google speech recognition) in accordance with its
privacy terms. The App itself does not record or store any
audio.
| Permission | Purpose |
|---|---|
INTERNET, ACCESS_NETWORK_STATE | Load streams/data, check network status |
WAKE_LOCK | Keep the screen/CPU awake during playback |
RECEIVE_BOOT_COMPLETED | Optional auto-start and re-scheduling reminders after a reboot |
POST_NOTIFICATIONS | Displaying programme reminders |
SCHEDULE_EXACT_ALARM, USE_EXACT_ALARM | Triggering reminders at the exact air time |
FOREGROUND_SERVICE, …_DATA_SYNC | Recording a stream in a foreground service |
The App requests no access to location, contacts, camera, microphone (outside the system voice search) or your personal media library.
The App has Android backup enabled. If you have enabled device backup, the local database (including credentials and parental PIN), settings and preferences may be backed up to your Google account or transferred when switching devices. This backup is performed by Google under the Google Privacy Policy and can be disabled in your Android system settings.
All local data is retained until you delete it yourself. At any time you can remove individual profiles, favorites or history entries, reset the cache per profile, clear the app data via the Android system settings, or uninstall the App (which removes all local data – except for any Google backups already created, see section 6).
We as the provider receive none of your data. Data is only transmitted to the services named in section 4 that you chose yourself: your IPTV provider, optionally TMDB (USA), and optionally Google (backup).
Because we neither collect nor store any personal data about you, we generally hold no data to which data-subject rights could relate. All data processed in the App is under your sole control on your device.
Under the GDPR you generally have the rights to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection (Art. 21). With regard to the local data you can exercise these rights directly yourself. You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).
The App is not directed at children. An optional PIN lock (parental control) is available for adult content. The App does not provide any content itself; the content retrieved is determined solely by the provider you choose.
Deno Player is solely a playback application and is shipped without any channels, playlists or credentials. You alone are responsible for the legality of the sources you configure and the content you retrieve.
We reserve the right to amend this Privacy Policy so that it always complies with current legal requirements or to implement changes to the App. The version current at the time of use applies.