Privacy Policy

Who we are

Tuka Player operates Tuka Player and tukaplayer.com and is the controller of the personal data described here. Contact: legal@tukaplayer.com.

What we process

Devices

To recognise a device and its licence we store these identifiers:

• A device ID generated by our server (shown as a MAC-style code such as AE:12:…; it is not your network card’s MAC address), a device key, and the public key of a key pair the app creates on the device.
• A hashed Android ID and a hashed Widevine (DRM) device ID, plus a hash of the device model and hardware type. The app hashes them before sending and we hash them again with a secret key, so we never receive or store the raw identifiers. They are used only to recognise a reinstalled device, so a licence follows it and trials can’t be reset.
• Device model, manufacturer, Android or iOS / iPadOS version, app version, form factor and language setting.
• An approximate country: the region part of the device’s language setting (for example “GB” from English (United Kingdom)) and, for Google Play purchases, the country Google reports for the purchase. We do not look up your location.
• Check-in times and licence status.

Playlists

Playlist URLs and logins you add on the website are stored encrypted and are only sent to the devices they belong to. Playlists you add in the app stay on the device, unless you turn on Show my playlists on the website or pair the device with your other devices: then the app uploads them (also stored encrypted) so they appear on the website or on your paired devices. We do not use playlists for anything else and do not look at the content behind them.

Cloud sync and device pairing

If you pair devices or use a family plan, your favourites, watch history and progress, hidden or reordered groups and some app settings are uploaded so your devices stay in sync, together with the name you give the device and, for paired devices that share everything, what is playing right now (shown to those devices for about 90 seconds).

Purchases

• Google Play purchases: the purchase token, Google’s order ID, the product, purchase date, status and the device the licence activates. We also send Google a random buyer ID we create for your device (not derived from your Google account) so a purchase can be matched to the device that made it. Card and wallet details stay with Google and never reach us.
• App Store purchases (iPhone / iPad app): Apple’s transaction ID, the product, purchase date, status, storefront and price, and the device the licence activates. The app passes Apple a random ID we create for your device (not derived from your Apple ID) so a purchase can be matched to the device that made it. Payment details stay with Apple and never reach us.
• Orders: plan, amount, status and the payment provider’s reference.

Accounts and support

• Email, optional name, a securely hashed password and optional two-factor settings.
• Support tickets you send us.

Diagnostics

The app sends crash reports, “app not responding” reports and performance metrics (for example start-up time) together with the device ID and app version. They are on by default and you can switch them off in the app’s settings at any time. Reports are scrubbed of URLs and credentials.

Security logs

We keep limited logs (such as salted hashes of IP addresses and failed sign-in attempts) to prevent abuse.

Third-party services the app uses

• TMDB (The Movie Database): to show posters, descriptions and trailers, the app sends the title (and year) of a movie or series to api.themoviedb.org. TMDB sees your IP address but no account or device identifier from us.
• YouTube: trailers play in an embedded player from youtube-nocookie.com (YouTube’s privacy-enhanced mode), only when you start one. Google/YouTube then processes your IP address and playback under its own privacy policy.
• Google Play (Google Play version of the app): Google Play Billing for purchases, Google Play Integrity to confirm the app is a genuine copy on a genuine device (Google evaluates device signals; we only receive the verdict), and the Google Play Install Referrer to learn how the app was installed (for example from a reseller’s link).
• Apple App Store (iPhone / iPad app): Apple processes App Store purchases and sends us the signed transaction (and later notifications such as refunds) so we can activate the device the purchase is for. Your Apple ID and payment details stay with Apple.

These services act under their own terms and privacy policies.

Why we process it

• To provide the Service, sync and your licence (performance of a contract).
• To keep the Service secure and prevent fraud and trial abuse (legitimate interests).
• To find and fix crashes and slow screens (legitimate interests; you can switch diagnostics off).
• To meet tax and accounting obligations for purchases (legal obligation).

Sharing

We share data only with processors that help us run the Service — hosting, email delivery, payment providers (Google Play and the App Store for app purchases; NOWPayments for reseller credit packs) and, if enabled, Cloudflare Turnstile for bot protection — or when required by law. We never sell personal data and use no advertising or tracking cookies.

Cookies

We use only strictly necessary cookies, which do not require your consent: a session cookie while you are signed in to an account, a short-lived (2-hour) cookie while you manage a device, and a “known browser” cookie (90 days) that lets us warn you about sign-ins from a browser we have not seen before. There are no analytics, advertising or third-party tracking cookies. Dismissing the cookie notice is remembered in your browser’s local storage only.

Retention

An automatic clean-up on our servers applies these periods; it runs every 6 hours.

• Playlists and synced data (favourites, watch history and progress, groups, settings): until you delete them (see below), or until the device has not checked in with our servers for 24 months — then they are deleted and the device leaves its pairing group. The device record and its licence are kept. Data a family plan or paired group shares stays while the other devices use it.
• Crash, “app not responding” and performance reports and check-in history: 90 days.
• Website sessions: they end after at most 7 days (2 hours for a device’s manage page) and are deleted at the next clean-up after they end. Records of sign-in, PIN and pairing attempts: 2 days.
• Single-use codes and links (QR codes, pairing codes, email confirmation and password-reset links) and request replay-protection records: deleted within a day after they expire or are used.
• The device record and licence: as long as the licence can be used, so we can honour it. Purchase, order and payment records: as long as tax law requires. Security and audit logs: as long as needed to protect the Service against fraud and abuse.

Delete your data

In the app, open Settings › Account & device › Delete my cloud data. This deletes your playlists, pairing, synced favourites and progress, settings and diagnostics from our servers straight away. We keep only the device record, the licence and purchase records, which are needed to honour a paid licence and for tax law. What is deleted and what is kept — including how to ask us by email if you can’t use the app.

Your rights

Depending on where you live you may have the right to access, correct, delete or export your data, to object to or restrict processing, and to complain to your data-protection authority. Write to legal@tukaplayer.com — for a device, include its MAC so we can find it.

Children

The Service is not directed at children under 16. Kids profiles in the app are managed by a parent or guardian.

Changes

We’ll post updates here and change the date above. See also our Terms of Service.