SUTU IPTV & Stream Player — Privacy Policy

Effective date: October 18, 2026

This application (“SUTU IPTV & Stream Player”, “SUTU”, the “app”) is developed and published by Yusuf Tunc. This policy explains what data the app processes, why, and where it goes. For any questions, contact yusuf.tnc@gmail.com.

Summary. The app does not ask you for personal registration details such as your name, email, or phone number. It shows no ads, does not sell data, and uses no advertising or analytics/tracking SDKs. It stores a limited set of data in the developer's Google Firebase project solely to sync your favorites and playback position across your own devices. Your IPTV subscription credentials are kept encrypted, on your device only.

1. How the app works

SUTU is not a content provider. It is a player: you enter your own IPTV subscription (server address, username, password) to watch streams from your provider. All content, channel lists, and streams come from the IPTV provider you enter, which is not operated or controlled by the developer.

2. Data we collect and why

So that your favorites and “resume where you left off” information appear on a second device, the data below is stored in the developer's Firebase (Google) project. Your identity is created from a one‑way hash of your IPTV server address and username; your IPTV password is never written to this account.

Data	Content	Purpose
Account identifier	A Firebase user ID (UID) derived from your server + username. Not a real name or email.	To tie your records to your own devices only
Favorites	Content name, type, category, poster URL, description, ID, date added	Syncing favorites across devices
Watch history	Content name, type, poster URL, resume position (seconds), total duration, category, watch date	“Resume where you left off” and syncing history
Technical data	Data automatically processed by Firebase such as IP address and connection/session info (on Google's side)	Service security and operation (Google infrastructure)

Note: In some IPTV panels the poster (artwork) URL may contain your server's domain; in that case your server address may be indirectly present in these records.

3. Data that stays only on your device

The following is never sent to our servers and is lost when the app is removed:

Your IPTV login details (server, port, username, password) — stored in the operating system's secure storage (iOS Keychain / Android Keystore), encrypted with AES‑GCM.
The local copy of your favorites and watch history (including stream links).
Your search history and audio/subtitle preferences.

4. Who data is shared with

The app does not sell your data. As part of its core function, data reaches these parties:

Party	Data received	Reason
Google Firebase (Authentication & Cloud Firestore)	The account, favorites, and watch data in Section 2	Cross‑device sync infrastructure
Your own IPTV provider	The username/password you enter, catalog and stream requests	Login and stream playback (not controlled by the developer)
api.anyplay.stream	Your IP address during the request	To fetch the popular‑titles list in the “Discover” section
Chromecast / AirPlay devices	The stream link (which may include your IPTV password)	To cast the stream to your TV (local network)
Poster / artwork servers (CDN)	Image download request and IP	To display content posters

5. Retention and deletion

All on‑device data is deleted when you uninstall the app. To delete the favorites and watch records stored in Firebase, email yusuf.tnc@gmail.com with the IPTV server address and username that your account is derived from; your records will be permanently deleted. Requests are handled within a reasonable time.

6. Children's privacy

The app is not directed to children under 13 and does not knowingly collect personal data from children.

7. Changes

This policy may be updated from time to time. For significant changes, the effective date on this page is updated. We recommend reviewing the current version periodically.

8. Contact

Developer: Yusuf Tunc
Email: yusuf.tnc@gmail.com