Privacy Policy
In short
- No data is sent to the developer. No analytics, no tracking, no ads, no developer account.
- Settings and personal lists are stored on your own device. Credentials are sent to the service you configure to authenticate requests.
- The developer never receives, sees or stores any of your data. The extension has no backend.
- Network requests go only to the server you point it at — your own IPTV server.
- The extension cannot see the pages you browse. It has no content scripts and requests access to no website at install time.
1.What Kepuli-TV is
Kepuli-TV is a browser extension that plays back the content of the user's own Xtream Codes IPTV account in a browser tab. It ships no media, no channel list and no accounts of its own: it is a player, useless without credentials the user brings.
The developer and author of this policy is Samuli Vainio, a private individual. Kepuli-TV is a personal project, not a company product. Contact: samuli.vainio@gmail.com.
2.What data the extension handles
Everything below is created by the user's own actions inside the extension's own tab and is
stored locally only, in the browser's per-extension storage
(chrome.storage.local and IndexedDB) on the device where it is used.
| Data | Why it is kept | Where it lives |
|---|---|---|
| Connection settings: server address, port, username and password | To connect to your own IPTV server without retyping the credentials on every launch | chrome.storage.local |
| Player preferences: subtitle language and size, stream mode, adult-category hiding, external player template | To remember interface and playback settings | chrome.storage.local |
| Favourites, watch history and resume positions | To show your own lists and continue playback where it stopped | chrome.storage.local |
| Catalogue cache: channel, movie and series listings, categories and programme guide data | To avoid re-downloading the whole catalogue on every launch | IndexedDB |
The extension does not ask for or handle names, email addresses, location, payment information, health information, contacts, messages or browsing history.
3.Where data is sent
The extension has no server or cloud service of its own and sends nothing to the developer. Network traffic occurs only as follows:
- Your own IPTV server. The extension fetches catalogues, programme data and media streams from the address you enter in the settings. As the Xtream Codes API works, the username and password travel in the request URL. Your provider sees this traffic, including your IP address and what you watch — governed by their terms and privacy policy, not by this one.
- Channel logos and cover art. The browser loads images from the addresses your provider put in the listing. Those may point to a third-party server, which then sees your IP address and browser details, exactly as when any web page loads an image. The extension does not choose these addresses and adds no identifiers to them.
- Handoff to an external player. If you use the handoff feature (VLC, IINA, mpv), the extension builds a playlist file or a URL and gives it to your operating system. The address contains your IPTV credentials, but it does not leave your device: it is passed locally to the player you installed, which opens the stream from your own server.
- Copy to clipboard. A stream URL is copied only when you explicitly click to copy it. That URL contains your credentials, so take care where you paste it.
4.Credential storage and security
Your IPTV credentials are stored unencrypted in the browser's extension storage, as local extension data generally is. Anyone with access to your user account or browser profile on that device can read them. Do not use the extension on a shared or unattended computer if that is a concern.
Credentials are sent as-is to the address you supply. If your server uses http,
that traffic is unencrypted on the network too — use an https address whenever
your provider offers one.
5.Permissions and why they are requested
storage— to keep settings, credentials, favourites, history and resume positions on the device.unlimitedStorage— for the catalogue cache. A typical IPTV catalogue is tens of megabytes and exceeds the browser's default quota.-
Optional host access (
http://*/*,https://*/*) — not requested at install time. The browser asks for permission only when you enter your own server address, and grants it for that address alone. It is needed because your server's address cannot be known in advance.
The extension has no content scripts: it does not read, modify or observe any other tab or web page. It operates solely within its own tab.
6.Remote code
The extension neither loads nor executes any code from outside its package. All executable code — including the media libraries and the WebAssembly audio decoder — ships inside the extension package. Only media and catalogue data are fetched from the network; never code.
7.Deleting your data
- Cache: can be cleared from the extension's settings at any time (Settings → Clear cache).
- Everything the extension stored: Settings → Reset everything (“reset”) removes the credentials, preferences, favourites, watch history, resume positions and the whole cache database.
- Everything: uninstalling the extension removes all data it stored on the device. There is nothing for the developer to delete, because nothing was ever sent to the developer.
8.Sale and transfer of data
User data is not sold or transferred to third parties. It is not used or transferred for purposes unrelated to the extension's single purpose, nor to determine creditworthiness or for lending purposes. This is guaranteed technically: the developer receives no data at all.
9.Children
The extension is not directed at children under 13 and collects no data from them — as it collects none from anyone.
10.Data controller and GDPR
Because the developer neither receives, processes nor stores personal data, using the extension creates no personal data register held by the developer. The data on your device is under your control and can be deleted as described above. Data subject requests (access, rectification, erasure, portability) are in practice directed at your IPTV provider, which is its own controller.
11.Changes
If this policy changes, the updated version is published at this address and the date at the top of the page changes. Material changes are noted in the extension's release notes.
12.Contact
Samuli Vainio · Tampere, Finland
samuli.vainio@gmail.com