KSKPix — Privacy Policy

KSKPix (“the App”) is developed and operated by KSKTech LLC (“we,” “our,” or “us”). This Privacy Policy explains how the App handles information. KSKPix is designed to collect as little as possible: in normal use it collects no personal data and requires no account or login.

1. Information stored on your device

KSKPix is a media player. To use it, you add your own streaming “sources” — for example Xtream Codes credentials, M3U playlist URLs, or Stalker portal details. This information, including any server addresses, usernames, and passwords, is entered by you and stored only locally on your device (credentials are kept in your operating system’s secure storage). It is never sent to KSKTech LLC and is never shared by us with anyone.

2. Information we do not collect

We do not collect or have access to your name, email, phone number, location, contacts, or advertising identifiers. We do not keep a record of which titles you watch, and we never receive your source credentials. The limited exceptions are the title look-up described in the next section, the anonymous diagnostics described in Section 4 (which you can turn off), and any feedback you choose to send us — in each case only the information described there.

3. Network connections and metadata look-ups

When you load a playlist or play content, the App connects directly from your device to the third-party server you configured (your streaming provider). Those connections are between you and that provider; we are not party to them and do not see their contents. Each provider operates under its own terms and privacy policy — please review theirs.

Separately, to enrich your library — posters, backdrops, cast lists, ratings and descriptions for movies and series, and logos and a program guide (EPG) for live channels — the App looks these up through a metadata service operated by KSKTech LLC, which in turn draws on third-party sources including The Movie Database (TMDB) and public channel/EPG datasets. What is sent for these look-ups is only the item’s title or channel name (and basic catalog hints such as whether it is a movie, a series, or a channel, and its category), together with the standard technical information present in any internet request, such as your device’s IP address. We do not send your name, your account (there is none), your source credentials or server addresses, or a record of what you actually play. These look-ups are not linked to any identity, and results are cached to reduce repeat requests. Title look-ups occur when you browse or open the Movies and Series sections; channel logo and guide look-ups occur when you load or refresh a playlist. You can disable all of this at any time with the Auto-enrichment switch in Settings, which makes the App fully local.

This product uses the TMDB API but is not endorsed or certified by TMDB. Titles you look up are also handled by TMDB under their privacy policy.

4. Diagnostics and usage statistics

To find crashes quickly and understand which features matter, the App sends anonymous diagnostics: crash reports (what went wrong inside the App’s own code, with your device model, operating-system version, and app version) and usage statistics (coarse events such as “a playback started”, “search was used”, or “a source was added”, with the same basic technical context). The usage statistics also include coarse performance timings (for example how long a library refresh took) and your connection type (Wi‑Fi, Ethernet, or cellular), along with non-identifying playback quality indicators such as video resolution and codec — never a bitrate tied to any specific title. This is on by default and you can turn it off at any time with the crash reports & usage statistics switch in the App’s Settings; switching it off stops collection immediately and discards unsent reports.

These diagnostics never include the names of channels or titles you watch, your playlists or server addresses, your credentials, your search text, your Wi‑Fi network name, your IP-based precise location, or anything that identifies you — there is no account, no user ID, and advertising identifiers are never used for diagnostics. Crash reports and usage statistics are processed on our behalf by Google Firebase (Crashlytics and Google Analytics for Firebase), are retained for limited periods, and are used only to fix bugs and improve the App — not for advertising or cross-app tracking, by us or by Google. Firebase handles this data under Google’s Firebase privacy documentation.

Separately from the automatic reports, after a crash the App may ask whether you’d like to send us a report directly — that per-crash prompt is optional each time and goes to our own infrastructure like feedback (Section 5).

5. Feedback you send us

KSKPix offers an optional “Submit Feedback” form — on our support page and within the apps. If you choose to use it, we receive the message you write and, only if you add them, your name and email (an email lets us reply). To help us reproduce problems, we also include basic technical context — your device model, operating-system version, and app version (for feedback sent from a TV, these describe that TV). Only the message is required; your name and email are entirely optional.

We use this solely to read your feedback, reply to you, and improve the App. It is stored on infrastructure we operate (Cloudflare), is never sold or shared with third parties, and is not used for advertising or tracking. To have feedback you’ve sent deleted, email contact@ksktech.dev.

6. Backups and transferring between devices

KSKPix lets you export a backup of your sources and settings to a file on storage you control, and import it later. These backup files are created and kept by you. We never receive them.

The App can also copy your setup directly from one device to another — for example, from your phone to your TV. The receiving device shows a code, and you scan it with the sending device. The transfer first tries your local network only, so the data passes straight between your two devices and never reaches us. If the local network can’t be used, the App will — only after you explicitly confirm — fall back to relaying the data through a KSKTech LLC relay server. In that case your setup is encrypted end-to-end: the encryption key exists only inside the on-screen code (it travels from the screen to the other device’s camera and is never sent to the server), so the relay holds only encrypted data it cannot read, that data is automatically deleted within minutes (and immediately once the receiving device retrieves it), and we never see your sources, credentials, or settings in readable form.

7. Permissions

The App requests only what it needs to function: network/internet access to load playlists and stream the content you choose, and storage access only when you export or import a backup file. When you transfer a setup between devices (Section 6), the App uses camera access only while you are scanning the on-screen code, and local network access only to send or receive the setup directly between your two devices. We do not use any of these permissions to collect information about you.

8. Children’s privacy

KSKPix is a general-audience media player and is not directed to children under 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect any personal information from children.

9. Advertising

The App currently contains no advertising and no advertising SDKs, no advertising identifiers are used, and nothing in the App is used to track you across other companies’ apps or websites or to build an advertising profile. It does include the Google Firebase SDKs for the anonymous diagnostics described in Section 4, which you can turn off in Settings. If any of this ever changes, we will update this Privacy Policy and the app stores’ data-safety disclosures before such a feature is released.

10. Data security

Because your data never reaches us, the primary safeguard is your own device. Source credentials are stored using your operating system’s secure storage. We recommend protecting your device with a passcode and keeping it up to date.

11. Donations

KSKTech offers an optional way to support our work through a voluntary donation on our website. Payments are processed entirely by Stripe, our third-party payment processor, on Stripe’s own secure hosted page — we never see or handle your card details. When you donate, we receive from Stripe only the information needed to process and acknowledge it: your name, email address, and the amount. Stripe handles your payment information under its own privacy policy. We use these details solely to process, acknowledge, and keep records of your contribution; we do not sell or share them, and we do not use them for advertising or tracking. To have your donation records deleted, email contact@ksktech.dev.

12. Samsung and LG TV apps

KSKPix for Samsung smart TVs (Tizen) and LG smart TVs (webOS) follows this policy, with these differences:

• No automatic diagnostics. The Samsung and LG apps do not include Google Firebase and send no crash reports or usage statistics on their own; Section 4 does not apply to them. When you send feedback (Section 5), an “Include diagnostics in feedback” switch in Settings adds only the TV’s language, screen size and the names of recent app errors — never channel or title names, playlist addresses, usernames or passwords. Turn it off to send only what you type.
• Where your data is kept. Your sources, credentials, library and settings are stored in the app’s private storage on the TV. The TV does not offer web apps a separate secure keystore, so KSKPix encrypts your logins itself before storing them. On Samsung TVs the key is kept in the app’s private folder, and uninstalling the app removes this data. On LG TVs, KSKPix also keeps a recovery copy of your library, settings and encrypted logins, with the key that opens them, in a folder on the TV’s internal storage that only KSKPix can read, so your setup survives if the TV clears the app’s storage; this copy can stay on the TV after you uninstall the app, and you can delete it any time in Settings › Storage.
• Connections. The TV apps connect only to your own provider, to our metadata service and TMDB (Section 3; you can turn this off in Settings), to our feedback service when you choose to send feedback (Section 5), and to our relay when you use transfer or sync (below). On LG TVs, requests to your provider may pass through a small helper that runs on the TV itself; it forwards them to your provider and nowhere else.
• Permissions. Internet access and the remote control’s media, colour and number keys. On Samsung TVs, also permission to restart the app once if its storage needs recovering, and file and download access, used only for the app’s own files, backup files you export or import, and some Stalker portal requests. The TV apps do not use the camera, microphone, location or contacts.
• Transfer and sync. A TV cannot receive a direct local-network connection, so copying your setup to or from a TV always goes through our relay, and only after you turn it on: the encryption key lives only in the code shown on screen, the data is encrypted end-to-end, and it is deleted as soon as it is read or within minutes. If you choose “Keep in sync”, your linked devices exchange your setup through our sync service in the same end-to-end-encrypted form, which we cannot read; it is deleted after about six months without use. Backup files you export work as described in Section 6.

13. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date above reflects the latest version.

14. Contact

Questions about this Privacy Policy? Contact KSKTech LLC at contact@ksktech.dev.