Effective date: 7 October 2026
Version: 1.0
Ondaro is a video player for Android TV. You add your own playlists, and Ondaro plays them. We built it so that your playlists, logins and viewing habits stay on your TV. This policy explains, in plain language, what little information does leave your TV, where it goes and why.
If you only read one part, read the summary table below.
1. Summary
What stays on your TV (we never receive it)
| Information | Why it is on your TV |
|---|---|
| Playlists you add (names, addresses, M3U files) | To load your channels, films and series |
| Provider logins (server address, user name, password) | To connect to your IPTV provider. The password is encrypted with the Android Keystore where your device supports it |
| Channels, categories, film and series lists, TV guide (EPG) data | To show what you can watch |
| Favourites, recently watched, watch progress, recent searches | To let you continue where you left off |
| Settings, theme, language, audio and subtitle choices, parental PIN (stored only as a salted hash) | To remember your preferences |
None of this is sent to us, and it is excluded from Android cloud backup and device-to-device transfer.
What leaves your TV
| Information | Who receives it | Why | Kept by us? |
|---|---|---|---|
| Your provider login, stream and guide requests, your IP address | Your IPTV provider and the guide (EPG) sources you add | To play what you choose | No — we are not involved in these connections |
| Film and series titles (and release year) from your library, your IP address | TMDB (The Movie Database) | To show posters, ratings, cast and descriptions | No |
| Email address, account ID, list of your devices | Us (Ondaro licence server) | Only if you buy Premium and sign in: to manage your licence and devices | Yes, while your account exists |
| Purchase details from Google Play (order ID, product, status — never your card number) | Us, via Google Play | To unlock Premium and verify that the purchase is real | Yes (see Retention) |
| Crash reports (technical data, no playlists or logins) | Us, via Sentry (EU region) | To find and fix bugs | Yes, for 90 days |
| Problem reports you choose to send | Us | To answer you and fix the problem | Yes, for up to 24 months |
What we never do: we do not sell your data, we show no ads, we do not track you across other apps or websites, and we have no access to your playlists, logins or what you watch.
2. Who is responsible
Ondaro is developed and published by an individual developer based in Türkiye:
- Controller (veri sorumlusu): Hakan Ilıkkan
- Privacy contact: privacy@ondaro.tv
- General support: support@ondaro.tv
In this policy, "we", "us" and "our" mean Hakan Ilıkkan. "You" means anyone who uses the Ondaro app or the ondaro.tv website.
3. Information that stays on your TV
Ondaro stores the following only in the app's private storage on your TV. Other apps cannot read it, and we cannot see it.
- Playlists and logins. The playlist addresses you enter, and for Xtream Codes accounts the server address, user name and password. The password is encrypted with a key kept in the Android Keystore; the key cannot be exported from the device. On the rare devices whose Keystore does not work, the password is kept in the app's private storage without this extra layer. For Xtream Codes accounts and standard provider links, saved channel, film and guide addresses do not contain your user name and password; Ondaro adds them only at the moment a request leaves the TV. Other playlist addresses are stored exactly as you entered them.
- Your library. Channel lists, categories, film and series catalogues, and TV guide data downloaded from your provider or guide sources.
- Your activity in the app. Favourites, recently watched channels, watch progress for films and episodes, and recent searches.
- Settings. Interface language and size, theme, player options, preferred audio and subtitle languages, and your parental PIN. The PIN is stored only as a salted, one-way hash (PBKDF2), never as the digits themselves.
- Caches. Copies of images and of TMDB information, so screens load faster.
No backup, no transfer. Ondaro switches off Android cloud backup and device-to-device transfer for all of its data. If you uninstall Ondaro or clear its data (Android Settings › Apps › Ondaro › Clear data), all of the above is deleted from your TV and cannot be recovered by us or anyone else.
4. Connections your TV makes to other services
To do its job, Ondaro connects directly from your TV to the services below. We do not route, see or store this traffic. Each service handles your data under its own privacy policy.
4.1 Your IPTV provider and guide sources
When you add a playlist, refresh it, check your account status or play something, your TV contacts the server you entered. That server receives your login (for Xtream Codes accounts), your IP address, the item you request and standard technical information such as the app's user agent. If you add a guide (EPG) source, or your playlist names one, your TV downloads the guide from that address and, if you allow automatic updates, refreshes it in the background. Account details your provider returns (status, expiry date, number of connections) are shown to you and not sent to us.
Your provider decides how its service is secured. Many providers use plain http:// addresses, which means your login travels unencrypted, as the provider designed it. Use an https:// address when your provider offers one. Your provider is a separate company; we have no relationship with it and are not responsible for how it handles your data.
4.2 Images named in your playlist
Channel logos and posters listed in your playlist are downloaded from the addresses the playlist gives. Those servers see your IP address.
4.3 TMDB (The Movie Database)
To show posters, ratings, cast, trailers and descriptions for films and series, Ondaro sends TMDB the title and, if known, the release year of items in your library, and later the TMDB ID of the matching title. Images come from TMDB's image server. TMDB also sees your IP address. We do not send TMDB your login, your playlist address, any account ID or anything that names you. Results are cached on your TV. See TMDB's privacy policy at themoviedb.org.
This product uses the TMDB API but is not endorsed or certified by TMDB.
4.4 YouTube
If you choose "Trailer", Ondaro opens the trailer in the YouTube app or your browser. From then on, Google's privacy policy applies.
4.5 Google Play
Ondaro is installed and updated through Google Play, and purchases are made through Google Play Billing. Google processes your payment and payment details under the Google Play Terms of Service and Google's Privacy Policy. We never see your card or bank details. We may also use Google's Play Integrity service, which tells our server whether a request comes from a genuine copy of Ondaro installed from Google Play; Google processes device and app information to give that answer.
4.6 Adding a playlist from your phone
If you use "Add from phone", your TV shows a QR code with a one-time code. Your phone then sends the playlist address and login straight to your TV over your home network. This information does not pass through our servers.
5. Information we process
We receive personal data only in the situations below.
5.1 Ondaro account and Premium licence
You do not need an account to use the free version of Ondaro. If you buy Premium and want to use it on more than one device, you create an Ondaro account by scanning a QR code on your TV and confirming your email address on your phone. We then process:
- Email address — to identify your account, send you a sign-in link or code, and send service messages about your licence (for example, that a new device was added). We do not send marketing emails unless you separately agree.
- Account ID — a random identifier we create for your account.
- Device information — for each TV linked to your account: a random installation ID that Ondaro creates (not your device's hardware serial number or advertising ID), the device model, a device name you can change, the Ondaro version, and the date the device was added and last checked its licence. We use this to enforce the device limit (up to 5 devices) and to let you see and remove devices.
- Licence status — which Premium product you hold, when it started and, for subscriptions, when it renews or ends.
5.2 Purchases
When you buy Premium in Google Play, Google tells us — through Google Play Billing and Google's server interface — the product, the order ID, a purchase token, the purchase time, the country of purchase and the subscription status (active, cancelled, refunded, expired). We use this to unlock Premium, verify that the purchase is genuine, restore it on your devices, handle refunds and meet our accounting and tax obligations. We do not receive your name, card number or billing address from Google.
5.3 Crash reports
If Ondaro crashes or hits a serious error, it sends us a crash report through Sentry (EU region). A report contains: the error and the place in our code where it happened, the Ondaro version, the device model and manufacturer, the Android version, free memory and storage, the time, and a random installation ID so we can tell whether one device crashes repeatedly. Before a report leaves your TV, Ondaro removes playlist addresses, logins and other web addresses from it. You can turn crash reports off at any time in Settings › Privacy › Send crash reports.
5.4 "Report a problem"
If you use Settings › Help › Report a problem, Ondaro shows you what it will send before you send it: your message, the Ondaro version, device model, Android version, the app's settings, a summary of your playlists (counts and types only, never their addresses or logins) and a recent technical log with addresses and logins removed. You can add an email address if you want a reply. Nothing is sent unless you press Send.
5.5 Emails to us
If you write to support@ondaro.tv or privacy@ondaro.tv, we receive your email address, your message and anything you attach. We use it only to answer you. Please never send us your provider login or playlist address; we do not need them.
5.6 The ondaro.tv website
The website is hosted by Cloudflare. When you visit it, Cloudflare processes your IP address and standard request data to deliver the page and protect it from attacks. The website does not use advertising or tracking cookies.
5.7 What we do not collect
We do not collect your location, contacts, photos, microphone or camera input, the list of other apps on your TV, your viewing history, your searches, or any advertising ID. Ondaro contains no advertising or analytics SDKs.
6. Why we use your data (legal bases)
| Purpose | Data | Legal basis (EU/UK GDPR) | Legal basis (Türkiye, KVKK Art. 5(2)) |
|---|---|---|---|
| Providing Premium, managing your account, devices and licence | Email, account ID, device information, licence status | Performance of our contract with you (Art. 6(1)(b)) | Necessary for the performance of a contract (Art. 5(2)(c)) |
| Verifying purchases, handling refunds | Purchase details | Contract (Art. 6(1)(b)) | Contract (Art. 5(2)(c)) |
| Keeping accounting and tax records | Purchase details | Legal obligation (Art. 6(1)(c)) | Legal obligation (Art. 5(2)(ç)) |
| Preventing licence abuse and fraud (for example, tampered copies, shared accounts beyond the device limit) | Device information, purchase details, Play Integrity result | Legitimate interests (Art. 6(1)(f)) — protecting our product and paying users | Legitimate interests (Art. 5(2)(f)) |
| Fixing crashes and bugs | Crash reports | Legitimate interests (Art. 6(1)(f)) — keeping the app working; you can opt out | Legitimate interests (Art. 5(2)(f)) |
| Answering your messages and problem reports | Your message, email, diagnostics you send | Legitimate interests (Art. 6(1)(f)), or contract where it concerns your purchase | Legitimate interests (Art. 5(2)(f)); contract (Art. 5(2)(c)) |
| Establishing or defending legal claims | Relevant records | Legitimate interests (Art. 6(1)(f)) | Establishment, exercise or protection of a right (Art. 5(2)(e)) |
Where we rely on legitimate interests, we have weighed them against your rights; you can object at any time (see section 10). We do not use your data for automated decisions that have legal or similarly significant effects on you.
7. Who we share data with
We do not sell or rent your personal data, and we do not share it for advertising. We share it only with:
-
Service providers who process it for us, under contracts that limit them to our instructions:
- Google (Google Play Billing, Google Play Developer API, Play Integrity) — payments and purchase verification;
- Cloudflare, Inc. (Workers and D1 database, with data stored in the EU) — hosting our licence server and database;
- Sentry (Functional Software, Inc.), with data stored in its EU region (Germany) — crash reports;
- Amazon Web Services EMEA SARL (Amazon SES, EU region in Ireland) — sending sign-in and service emails;
- Cloudflare, Inc. — website hosting and email forwarding for our ondaro.tv addresses;
- Google LLC (Gmail) — the mailbox where support@ and privacy@ messages are delivered.
- Authorities, when the law requires us to, and only to the extent required.
- A successor, if Ondaro is transferred to another person or company; we will tell you beforehand, and this policy will continue to protect your data.
8. International transfers
We are based in Türkiye, and some of our service providers store data in other countries, including the United States and member states of the European Union. When we collect data directly from you while you are in the EU or UK, it is processed in Türkiye, which does not have an EU adequacy decision; GDPR continues to apply to that processing. When we pass data on to providers in other countries, we use the safeguards the law requires: adequacy decisions where they exist (for example, the EU–US Data Privacy Framework for certified US companies), or standard contractual clauses approved by the European Commission, the UK authorities or, under Article 9 of KVKK, the Turkish Personal Data Protection Board. You can ask us for a copy of the relevant safeguards at privacy@ondaro.tv.
9. How long we keep data
| Data | How long |
|---|---|
| Data on your TV | Until you delete it, clear the app's data or uninstall Ondaro |
| Account email, account ID | While your account exists; deleted within 30 days after you delete the account |
| Device entries | Until you remove the device or delete your account; devices that have not checked in for 12 months are removed automatically |
| Purchase and order records | For as long as Turkish tax and commercial law requires — up to 10 years after the end of the year of purchase — then deleted |
| Crash reports | 90 days |
| Problem reports and support emails | Up to 24 months after the conversation ends, unless needed longer for a legal claim |
| Licence server security logs (IP address, time, request) | 30 days |
| Backups | Overwritten within 35 days |
10. Your rights
Wherever you live, you can ask us to:
- tell you whether we hold data about you and give you a copy (access);
- correct inaccurate data (rectification);
- delete your data (erasure) — see our account deletion page;
- restrict or object to processing based on legitimate interests;
- give you the data you provided in a machine-readable format (portability);
- withdraw any consent you gave, without affecting earlier processing.
How to ask: email privacy@ondaro.tv from the address linked to your account, or include enough information for us to find your data (for example, your Google Play order ID). We may ask you to confirm your identity. We answer within one month (EU/UK) and within 30 days (Türkiye), free of charge, unless a request is manifestly unfounded or excessive. Because we hold no data about free users without an account, we will usually have nothing to return to them.
EU and UK. You can complain to the data protection authority where you live or work, or, in the UK, to the Information Commissioner's Office (ico.org.uk).
Türkiye (KVKK Article 11). You have the rights listed in Article 11 of Law No. 6698, including the right to learn whether your data is processed, to request information, to learn the purpose of processing, to know the third parties in Türkiye or abroad to whom it is transferred, to request correction or deletion and notification of these to third parties, to object to a result against you arising solely from automated analysis, and to claim compensation for damage caused by unlawful processing. You can apply by email to privacy@ondaro.tv from the email address registered with us, or in any other way the KVKK application rules allow. If you are not satisfied with our answer, or we do not answer within 30 days, you can complain to the Personal Data Protection Board (Kişisel Verileri Koruma Kurulu) within the periods set by law.
United States. We do not sell or "share" personal information for cross-context behavioural advertising, and we do not use sensitive personal information to infer characteristics about you. Residents of US states with privacy laws can exercise the rights those laws give them by emailing privacy@ondaro.tv; we will not discriminate against you for doing so. You may use an authorised agent; we may ask the agent for proof of authority.
11. Security
- Logins and personal data on your TV are kept in the app's private storage, with the password encrypted by the Android Keystore where supported, and excluded from backups.
- The app keeps no network log in store builds, and its diagnostic logs remove addresses and logins.
- All connections between Ondaro and our servers use HTTPS (TLS). TMDB connections are always encrypted.
- Access to our servers is limited to the developer and protected by strong authentication.
No system is perfectly secure. If a breach affects your personal data, we will notify you and the relevant authorities as the law requires (for example, under GDPR Article 33–34 and KVKK Article 12).
12. Children
Ondaro is a general-purpose video player and is not directed at children. We do not knowingly collect personal data from children under 13, or under the age of digital consent in your country (up to 16 in parts of the EU). Premium accounts are intended for adults. If you believe a child has given us personal data, email privacy@ondaro.tv and we will delete it. Parents can use Ondaro's parental PIN to restrict access on the TV.
13. Your choices at a glance
- Delete everything on the TV: remove playlists in Settings › Playlists, or uninstall Ondaro / clear its data.
- Stop crash reports: Settings › Privacy › Send crash reports.
- Remove a device: Settings › Account › Devices on the TV, or ondaro.tv/account on the web.
- Cancel a subscription: Google Play › Payments & subscriptions › Subscriptions. Uninstalling the app does not cancel it.
- Delete your account: see ondaro.tv/delete-account.
14. Changes to this policy
If we change this policy, we will publish the new version at ondaro.tv/privacy with a new effective date. If a change materially affects how we use your personal data, we will tell you in the app or by email before it takes effect. Earlier versions are available on request.
15. Contact
Hakan Ilıkkan
Türkiye
privacy@ondaro.tv · support@ondaro.tv