Privacy Policy

1. Introduction

Telvaz is a media player application. We do not provide, host, or distribute any media content. This policy explains how the app handles your data.

2. Data We Do Not Collect

We do not ask for your name or email address. Specifically:

• No account registration required
• No tracking of viewing habits, watch history, or what you play
• No collection of playlist URLs or credentials

3. Data Stored Locally

All data is stored locally on your device only. This includes:

• Playlist configurations (URLs, credentials)
• Favorites and watch history
• App preferences (theme, language, player settings)
• The activation code your device received, which holds no name, email, or playlist data

Your playlists, favorites, and watch history never leave your device.

4. Device Activation

The app shows a QR code and its device ID. Scanning the QR code opens telvaz.co/activate, where a bot check runs. The site then computes a code for that device and shows it once. You type the code into the app on the device that showed the QR code. Activation does not create an account. The activation service processes:

• The device ID: a one-way hash of 16 characters that the app makes on your device, from a device identifier or, where none is available, from a random install identifier. It is not your name, email address, or playlist.
• The activation code: a code tied to that device ID and valid for 90 days. The code is computed when you pass the bot check and shown once. Nothing is stored on the service: there is no mailbox and no pickup step.
• The device type (the kind of device the app runs on) and the app version.
• A random one-time value (a nonce) that the app makes for each request, so a request cannot be replayed.
• Request data needed for the bot check and for rate limiting. We may verify your IP address as a security measure. The Telvaz servers do not log codes or device IDs.

There is no database of devices or users, and no account. The activation service does not receive your playlists, credentials, or viewing history. Those stay on your device. The install number check at telvaz.co/verify keeps a record for each issued number for up to 10 minutes so it can be used once. The record is keyed by a one-way hash of the number and holds only its expiry time. It stores no device ID and no code.

Problem reports. If you send a problem report from the Telvaz report page, the text you type, your Device ID, the error code and any reply email you give are sent by email to Telvaz support. Telvaz does not store these on its servers and does not log them.

5. Third-Party Services

Cloudflare (hosting, bot check and rate limiting): Cloudflare hosts this website and the activation service. Cloudflare Turnstile runs the bot check on the activation page, and it receives browser signals to do so. Cloudflare acts as our service provider. See the Cloudflare privacy policy.

No ads: no ads are shown, no impressions are tracked, and no analytics events are sent. The app does not track what you watch and does not collect anonymous device identifiers for advertising.

No payment processing: Telvaz does not sell subscriptions or in-app purchases, and we do not process or store payment information.

6. Data Security

On LG, Samsung and Android TV, playlist passwords rely on the app sandbox only, without extra encryption. We do not transmit credentials to any server.

7. Children's Privacy

Telvaz does not knowingly collect data from children under 13.

8. Changes to This Policy

We may update this policy. Changes will be posted on this page with an updated date.

9. Contact

For questions about this policy, contact: contact@telvaz.co