1. Who we are
Otium operates this website and Otium IPTV Player. For privacy questions or to exercise your rights, contact support@otiumplayer.com. This policy covers Otium’s handling of information; your IPTV provider, identity provider and app store have their own policies.
2. Visiting this website
This website introduces Otium and lets you ask for a launch notification. It has no account registration, checkout or advertising. Optional Google Analytics measurement is off by default. Before you make a choice, and if you continue without analytics, the Google tag is not loaded and no analytics request is sent.
If you accept analytics, Google Analytics receives page-view information such as the public page URL and title, approximate location derived from the network address, and browser, device and interaction information. Analytics cookies may be stored in your browser. We do not send your launch-notification email, Otium account information, provider details, content or viewing activity to website Analytics. Advertising storage, personalization and Google Signals are disabled. Your analytics choice is stored in your browser so the site can respect it; you can change it through Analytics preferences in the footer.
Firebase Hosting processes technical request information, including IP addresses, to deliver and secure the website. Google describes Hosting IP-address retention as a few months. See https://firebase.google.com/support/privacy for the provider’s current processing and retention information.
3. Launch notification emails
When you choose Notify me, we collect your email address, selected language, consent record and submission time for an Otium launch notification. These are stored in a private Firebase database, separately from app accounts. Signing up does not create an Otium account or enroll you in app testing. We do not sell the list or use it for advertising.
Submitting the form is optional. By choosing Notify me, you consent to this launch email. We keep the record until the launch notification has been sent or you ask us to remove it, whichever comes first. If the launch-notification plan is cancelled, we will delete the list. To withdraw consent or remove your email, write to support@otiumplayer.com from that address; we may need to verify ownership. App-account deletion does not automatically remove a separate launch-list entry, so mention it in your request.
The signup endpoint uses short-lived abuse counters in memory and a shared submission count. The application does not persist your raw IP address with the signup. Firebase still processes network requests and service logs under its own terms. A successful signup saves your request; it does not send a confirmation email or promise a release date.
4. App accounts and authorized devices
When you use an account feature, Otium and Firebase process the account identifier and basic information supplied by your sign-in provider, such as email address, display name and profile image. Authorized-device and session records can include device identifiers, device names, platform information, public keys, authorization status and timestamps. These support sign-in, device pairing, access revocation and account security.
A guest session does not provide the same account recovery or device-management capabilities as a signed-in account. Otium account identity is separate from your IPTV provider account.
5. Your provider connections
You supply your own Xtream server, username and password, or a complete playlist or stream URL. A complete URL may contain passwords or signed access tokens. Otium uses these details to connect to your selected provider. Saved details are masked as *** and cannot be revealed or copied through the interface; you can replace or delete them.
Native apps protect saved connection details using encrypted storage and platform secure storage. The browser player keeps provider details and viewing data in session memory. Do not treat a browser session as a permanent backup.
Sync provider connections is optional and off by default. If you enable it, connection details and associated connection/profile information are processed through Firebase so your authorized devices can restore them. Cloud copies are encrypted, but the authorized backend can decrypt them to support recovery. This is not zero-knowledge or server-blind end-to-end encryption. Local playlist file paths cannot be synced as portable sources.
Turning connection sync off removes the cloud connection copies and keeps the local connections. Deleting a connection removes its corresponding synced data. A network failure can leave removal pending until the service completes it. Connection sync is separate from viewing-history and personal-state processing.
6. Catalogs, viewing data and downloads
The player processes provider catalogs, program guides, artwork and media information to display your sources. It also processes profiles, preferences, saved items, watched state, viewing history and playback positions to support the features you use. Native apps retain protected local records and caches; browser player records are session-only.
Signed-in app versions can also process saved items, viewing history, watched state and playback positions in Firebase account records. These account records exclude provider passwords and playback URLs. Complete cross-device personal-state synchronization is still being developed; do not rely on an early testing version as your only copy.
Where a native app offers downloads, downloaded media stays on that device. This website and the browser player do not offer media downloads or offline watching. Otium does not upload your downloaded media to its account service.
7. Who receives information
Google Firebase provides hosting, authentication, database and application-function services. If you accept website analytics, Google Analytics also receives the limited website measurement described above. Your chosen sign-in provider handles its authentication flow. When the app requests a playlist, program guide, image or stream, the relevant provider or content host receives the network request, which may include your IP address, device/request information and the credentials needed for that source. Those providers control their own processing.
If you email us, Otium and its email service process your address, message and any attachments to answer your request. Do not send provider passwords, complete playlist/stream URLs, sign-in codes or recovery secrets. We do not sell personal data or use it for advertising. Information may also be disclosed when legally required or necessary to protect users and the service.
8. Purposes and legal grounds
We process information to provide the features you request, maintain accounts and authorized devices, secure the service, handle support and deletion requests, and meet legal obligations. Where applicable law requires a legal basis, these purposes rely on performing our agreement with you, legitimate interests in operating and securing the service, legal obligations, or consent where required. Optional website analytics relies on your consent; connection sync starts only when you enable it. You can withdraw analytics consent through the website footer and turn connection sync off in Account settings.
9. Retention and deletion
Local records remain until you remove them using the app’s data controls or remove the app’s local data. The website keeps your analytics choice in your browser until you change it or clear site storage. Accepted Analytics measurements follow the Google Analytics property’s configured retention; aggregated reports may remain after the underlying event-level retention period. Withdrawing consent stops future website measurement and removes Otium’s accessible Analytics cookies on that browser.
Account and synced connection records remain while needed for your account or the feature, unless you delete them. Support correspondence is kept for handling your request and any necessary follow-up or legal obligation. Contact us for a retention or deletion question about a specific record.
Account deletion removes the authentication account, cloud user records, synced provider connections and recovery keys. A minimal record of the deleted account identifier and deletion time remains to reject old access tokens and prevent access from being restored. It does not contain your provider credentials or viewing history.
Network failures can delay completion. Other devices’ local account data is removed on their next successful online connection; offline devices cannot be erased immediately. Firebase’s operational logs and backups follow its own removal schedules. Google describes removal of deleted Authentication data from live and backup systems as taking up to 180 days. Deleting an app or signing out alone does not delete the cloud account. See the Account and data deletion page for instructions.
10. Security and international processing
We use access controls, device authorization and encryption to protect supported records. No system can guarantee absolute security. Your source’s own transport matters: prefer HTTPS and use only providers you trust. Do not share pairing or recovery secrets.
Firebase and, if you accept website measurement, Google Analytics may process information outside your country. Sign-in providers, content hosts and email services may do the same. Their applicable data-processing terms and transfer safeguards govern that processing. Firebase’s privacy information is at https://firebase.google.com/support/privacy and Google’s privacy policy, which also covers Analytics, is at https://policies.google.com/privacy.
11. Your choices and rights
You can manage connections and authorized devices, disable connection sync, use available local data controls, or delete your account. Depending on applicable law, you may request access, correction, erasure, restriction, portability, objection or withdrawal of consent. Email support@otiumplayer.com; we may ask for information needed to verify account ownership. You may also complain to your relevant data-protection authority. Withdrawing consent does not affect prior lawful processing.
Otium is not directed at children. If you believe a child has provided personal information, contact us so we can investigate and handle removal as appropriate.
12. Policy updates
We update this policy when the product or data practices change. The date above identifies this version. Material changes will be explained through the website or app as appropriate.