Privacy Policy
Last updated: 14 September 2026 · Version 1.3
The short version. Hala Player does not ask you to create an account, does not run ads, and contains no analytics or tracking. Sources you add on the television stay on it — your playlists, credentials and viewing history never leave it. There is one exception, and it only applies if you choose it: playlists you add through the web portal are stored on our server so that your television can collect them. The web portal subsection in section 5 explains this.
Separately, to check whether your television holds a licence for the app, it sends us an identifier for the device — and nothing about what you watch. Section 5 explains exactly what that is.
1. Who we are
Hala Player ("the app", "we", "us") is a media player application for LG webOS and Android TV, published by Hala Player. You can reach us at privacy@halaplayer.com.
This policy explains what happens to information when you use the app. It applies to every platform the app is distributed on.
2. What we do not collect
To be unambiguous, the app does not do any of the following:
- It does not require, or offer, an account, login, or registration with us.
- It does not collect your name, email address, phone number, or postal address.
- It does not contain advertising or advertising identifiers.
- It does not contain analytics, telemetry, crash reporting, or usage tracking software.
- Sources entered on the television are not uploaded to us. Sources entered through the optional web portal are stored by us as described in section 5.
- It does not record, report, or profile what you watch. No channel, film, series, or viewing time is ever sent to us.
- It does not sell, rent, or share personal information.
3. What is stored on your device
The app stores the following locally, on the television itself, using the platform's own application storage. This information is not transmitted to us:
| Stored | Why |
|---|---|
| The playlist or portal details you enter (server address, username, password, or M3U URL) | So the app can connect to the provider you chose, without you re-entering it each time |
| The channel, film, and series catalogue downloaded from your provider | So browsing is fast and does not re-query your provider on every screen |
| Favourites and resume positions | So you can continue watching where you stopped |
| Preferences — language, stream format, clock format, display size, sleep timer | So the app behaves the way you set it |
| The record that you accepted these terms | So you are not asked on every launch |
| The most recent licence answer from our service | So the app keeps working when your connection or our service is briefly unavailable — see section 5 |
Deleting this data: uninstalling the app removes all of it. You can also remove an individual source at any time from Settings → Manage sources, which deletes its stored catalogue and credentials.
4. Your content provider
This is the most important section to understand. Hala Player does not supply any channels, films, or series. You bring your own playlist or portal, from a provider you have chosen and are entitled to use.
When you add a source on the television, the app connects directly from your television to that provider's server. Your username and password are sent to that provider in order to log in, exactly as they would be in any other player. We do not operate, proxy, intercept, or receive that connection, and we never see those credentials.
That remains true of every source added on the television, and it is still the default way to use Hala Player. It stops being true for the web portal, which is described next.
What that provider does with your data — what it logs, how long it keeps it, who it shares it with — is governed by that provider's own privacy policy, not this one. We have no relationship with them and no control over them. Please review their terms before entering your details.
5. The licence service
The app is licensed per television rather than per person, because a TV is a poor place to ask anyone to type an email address and a password. To know whether your television is licensed, the app contacts our own service at api.halaplayer.com when it starts.
What is sent
| Sent | What it is |
|---|---|
| A device identifier | A code the television itself provides — the LGUDID on LG, DUID on Samsung Tizen, and the app-scoped Android ID on Android TV. Where the platform gives none, the app generates a random one and keeps it locally. It identifies the set, not you. |
| The app version | So a support request can be matched to the build that produced it |
| A licence code | Only at the moment you type one in to activate |
As with any internet request, our server also sees the IP address the request came from, and records when each check happened. That is the complete list. Licence checks do not include playlists or viewing history. The optional web portal separately stores the sources you enter there.
Why it is sent
To answer one question — is this television inside its trial, licensed, or neither — and nothing else. The answer is signed by us and checked by the app, so that an intercepted connection cannot fabricate one.
How often
On launch, and at most a few times a day. The answer is cached on the television, and if our service cannot be reached the app keeps working from that cached answer for up to 72 hours rather than locking you out over a network problem.
Is the identifier personal data?
On its own it identifies a television, not a person. But because it is stable and tied to a device you use, data-protection law such as the GDPR treats it as personal data, and we treat it that way too: your rights in section 11 apply to it in full.
How long it is kept
For as long as the licence is in use, and for 24 months after the last time a television checked in. The record is then anonymised rather than removed outright: the device identifier, the device key, the address it last connected from and every playlist saved in the web portal are erased. What remains is the record that a payment was made, which accounting and tax law require us to keep, and it no longer points to you or to your television. If you switch the same set back on afterwards, support can still match it to that payment and restore your licence.
The optional web portal
If you use the web portal, we store the playlist name, type, provider address, username and password you enter, its order and availability, and the time the television last fetched it. Provider addresses, usernames and passwords are encrypted at rest. We return these details to your television after checking its device key. You can remove a playlist through the portal; removing the app from your television does not remove a playlist stored on our server.
The app also sends a randomly generated installation token during licence checks. We store its hash to prevent someone who knows only your device ID from retrieving your portal key. The token is stored privately on your television and is separate from the device ID displayed on screen. The website uses a session cookie for portal sign-in and a language-preference cookie.
6. Other services the app contacts
The Movie Database (TMDB)
To show cast photographs and biographical details — which IPTV portals do not provide — the app queries TMDB. What is sent is the identifier or title of the film or series whose details page you opened, plus our own API key. No information identifying you, your device, or your provider is sent, and the request is not linked to your device identifier.
This request is made only when you open a details page. If you never open one, the app never contacts TMDB. As with any internet request, TMDB's servers will see the IP address your request comes from; this is inherent to how the internet works and is not something we transmit or store.
This product uses the TMDB API but is not endorsed or certified by TMDB.
Apart from TMDB and our own licence service, the app contacts nothing except the provider you configured yourself.
7. Permissions the app requests
| Permission | Purpose |
|---|---|
| Internet access | Required to reach the provider you configured, to stream video, and to check the licence |
| Network state | To detect when the television is offline and show a useful message rather than failing silently |
The app requests no access to your location, camera, microphone, contacts, files, or any other personal data on the device.
8. Unencrypted connections
Many IPTV portals are only reachable over unencrypted HTTP rather than HTTPS. The app therefore permits unencrypted connections, because otherwise it could not connect to the providers most people actually use.
You should understand what this means: when a provider only offers HTTP, the credentials and video travelling between your television and that provider are not encrypted in transit, and could in principle be observed on the network in between. This is a property of your provider's server, not of this app. Where a provider offers HTTPS, we recommend you enter the HTTPS address.
Our own licence service is reachable over HTTPS only, and the app will not build against a plain-http address.
9. Children
The app is not directed at children and we do not knowingly collect information from anyone, of any age, beyond the device identifier described in section 5. The app does not itself provide content, so the material available through it is determined entirely by the source you add. Parents and guardians are responsible for supervising which sources are configured on a shared television.
10. Security
Information on your television is protected by the security model of the television's own operating system and the application sandbox it provides.
The licence records described in section 5 are held on a server we control, reachable over HTTPS only. They contain no credentials, no viewing data, and no contact details.
Playlists added through the web portal are the exception, and we would rather be plain about it than reassuring. If you use the portal, the server holds the playlist name, the provider's address, and the username and password for it. The provider address, username and password are encrypted before they are written, so a copy of the database alone does not yield them. But a playlist stored with us is a subscription we are holding on your behalf, and a serious enough breach could expose it. We think the portal is worth having, because entering a server address and a password with a remote control is genuinely awful — but it is your choice, not ours. Add your sources on the television and none of this paragraph applies to you.
11. Your rights
Data protection laws such as the GDPR give you rights to access, correct, export, and erase personal data held about you.
Everything in section 3 is on your television and under your direct control: uninstalling removes it. For the licence records in section 5, write to privacy@halaplayer.com with your device identifier — the app shows it on the activation screen, and it is also in Settings — and we will retrieve, correct, or delete the record within 30 days.
Deleting a licence record also deletes the licence attached to it. If you have paid for one, tell us so we can move it to your new television rather than erase it.
12. Changes to this policy
The version number and date at the top of this page change whenever this document does, and material changes are surfaced inside the app so you can review them before continuing.
Version 1.1 added section 5: earlier versions correctly stated that we operated no server, which stopped being true when device licensing was introduced.
Version 1.2 described the optional web portal, the playlists it stores for you, and the private credential your installation keeps so that nobody else can claim your licence.
Version 1.3 says what happens at the end of the 24 months in plain terms. Earlier versions said the record was deleted; what actually happens is that everything identifying you or your television is erased and the payment record is kept, because accounting law requires it. This is also what lets support restore a licence for someone who switches an old set back on.
13. Contact
Questions about this policy: privacy@halaplayer.com
General support: support@halaplayer.com