Privacy Policy
Effective date: November 9, 2026
This is the same text you see in the app (Settings → About).
MLZ IPTV Player is a video player that works with the Xtream Codes or M3U details you obtain from your own IPTV provider. The app does not provide any content and does not send any personal data about you to the developer or to third parties. It contains no analytics, advertising or crash reporting services, and there are no user accounts.
Information stored on your device
Stored only on your device, in the app's private storage: playlists you add (server address, username, password, M3U/EPG URLs, subscription details returned by the provider), a cache of channel/movie/series lists and the program guide, profiles, watch history, favorites, recent searches, settings, a hash of the parental-control PIN (the PIN itself is not stored) and an image cache. On Android TV this data is excluded from cloud backups and device transfers and is deleted when you uninstall the app or clear its data. On a computer it is kept in the app's folder in your user profile; the Windows version also keeps a local error log there (without stream addresses) to diagnose crashes, which never leaves your computer. Uninstalling the app does not delete this folder; you can delete it yourself.
Servers the app connects to
The app connects only to the IPTV provider and EPG servers you enter, to the image/stream addresses those servers return and, on computers, to the update server described below. Your credentials are sent to those servers to sign in and play streams. How they handle your data is your provider's responsibility. If your provider uses unencrypted HTTP, this information travels over the network without encryption; use an HTTPS address when available.
App updates (computers)
The computer versions of the app check download.mlzplayer.com for a new version shortly after starting, every six hours while running and when you check for updates manually. As with any download, this request reveals your IP address and the requested file name; it contains no identifier and no account, playlist or viewing data. The update server runs on Cloudflare, which may process IP addresses in its logs under its own privacy policy. Updates are downloaded over HTTPS and their integrity is verified before they are installed. The portable version does not check for updates.
Voice search · Android TV
When you search with the microphone, the app asks for microphone permission on first use and passes your voice only during that search to your device's speech recognition service (usually Google). Audio is not recorded or sent to the developer; the recognition service processes it under its own privacy policy. Only the recognized text is returned to the app and it is used to search on the device. You can revoke the permission at any time in Android settings.
Phone (QR) setup · Android TV
During QR setup the TV opens a temporary page that only devices on the same local network can reach, protected by a one-time access code. The details you enter on your phone are sent directly to your TV over the local network, not over the internet. The server stops when you leave the setup screen.
Children
The app is not directed at children and does not knowingly collect data from children. Parental controls and kids profiles are provided to restrict access to content on the device.
Changes and contact
If this policy changes, the current version is published in the app and at mlzplayer.com. Questions: support@mlzplayer.com