Last updated: 18 August 2026 · Canonical: https://app.glassydev.de/apps/nyxplayer/privacy.html
1. Controller
Controller within the meaning of the GDPR:
Dimitri Valjuzenic (sole proprietorship)
Brauhausstr. 17 B
26506 Norden
Germany
- Privacy / data subject rights: privacy@glassydev.de
- General inquiries: contact@glassydev.de
- Support: support@glassydev.de
- Website: https://app.glassydev.de
- VAT identification number: DE464279698 (provider details also in the legal notice)
This policy applies to Nyx Player for iOS, macOS and tvOS and the information pages at https://app.glassydev.de/apps/nyxplayer/privacy.html.
2. Overview
Nyx Player is a local IPTV/media player. It does not process personal data for advertising or tracking. According to the Apple privacy manifest (PrivacyInfo.xcprivacy), tracking is disabled (tracking=false); Required Reason API: UserDefaults (CA92.1); no Collected Data Types are declared.
- No provider account and no Sign in with Apple.
- No provider tracking, advertising networks or analytics SDKs (TDDDG).
- The provider hosts no media files and does not centrally analyze your streams.
Possible processing categories:
- Device/app settings (locally through UserDefaults)
- Media content and metadata you play or import yourself (playlists, favorites, URLs)
- EPG/program information (public broadcast data) from external servers
- Technical local cache/Application Support data
- When visiting the website: technically necessary connection data at the host (Vercel)
3. Website and hosting (Vercel)
Privacy and legal notice pages are provided at app.glassydev.de through Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. IP address, timestamp, URL and user agent may be processed during access.
| Purpose | Provision and stability of the web pages |
|---|---|
| Legal basis | Article 6(1)(f) GDPR |
| Recipient | Vercel Inc. |
| Third country | USA — Article 46 GDPR (SCCs) where required; https://vercel.com/legal/dpa |
4. Legal bases / processing overview
| Processing | Purpose | Legal basis |
|---|---|---|
| Player features, local playlists/favorites | App use | Article 6(1)(b) GDPR |
| App settings storage (UserDefaults) | User-friendly operation | Article 6(1)(f) GDPR |
| Retrieval of stream/M3U/EPG URLs entered by the user | Playback / program guide | Article 6(1)(b) GDPR |
| Retrieval of optional EPG presets | Program guide | Article 6(1)(b) or (f) GDPR |
| Website logs (Vercel) | Hosting | Article 6(1)(f) GDPR |
Where consent is required, we obtain it in advance; you may withdraw it at any time (Article 7(3) GDPR).
5. Local data storage
The App stores data mainly locally on your device:
- UserDefaults — playback options, recently used sources, display
- Application Support / Caches — playlists, EPG caches, thumbnails/buffers
No Keychain for credentials. This data is not transmitted to us unless you initiate a support request.
6. Integrated third-party components (SDKs)
6.1 VLC / MobileVLCKit / TVVLCKit
Nyx Player uses the open-source VLC library for playback (CocoaPods: MobileVLCKit on iOS, VLCKit on macOS, TVVLCKit on tvOS).
| Aspect | Details |
|---|---|
| Provider | VideoLAN / VLCKit family |
| Purpose | Decoding and playback of media files and streams |
| Data processed | Media data, technical metadata (codec, bitrate, duration), device information for hardware acceleration |
| Tracking | No |
| Data transfer to VideoLAN | No — processing locally on the device |
| Legal basis | Article 6(1)(b) GDPR |
No user profiles are created. No CloudKit, iCloud, StoreKit, Firebase or provider analytics/crash SDKs.
7. External servers and network connections
Connections are initiated by you (your own URLs) or through optional EPG presets. The provider does not centrally log your playback.
7.1 EPG services (program information)
| Host | Purpose |
|---|---|
| cdn.epg.one / epg.one | Retrieval of public EPG/program data |
| epg.it999.ru / it999.ru | Retrieval of public EPG/program data |
| zatikov.net, zyntras.top | Catch-up/IPTV heuristics (ATS exceptions; only when used) |
Requests send technical data (IP address, timestamp, user agent, requested URL and possibly cookies from the destination servers) to the respective server. No account data or user profiles from the app provider. EPG content is public broadcast information unrelated to your identity.
7.2 App Transport Security (ATS)
ATS exceptions are configured for media playback, including NSAllowsArbitraryLoadsInMedia and HTTP exceptions for the listed domains and local network. This concerns technical delivery of media/EPG content, not tracking or profiling. Arbitrary HTTP playlist hosts entered by users may be restricted by ATS.
8. Transfers to third countries
- Vercel (website): USA, safeguards through SCCs/DPA where required.
- EPG/stream providers: Depend on the selected URL. Servers such as epg.it999.ru may be outside the EU/EEA. Technical connection data is sent to the server selected by you or a preset. The app provider does not control these recipients and generally concludes no processing agreements/SCCs with public EPG sources; technical minimization applies (necessary requests only, no profile data). Legal basis: Article 6(1)(b) or (f) GDPR.
You can avoid external EPG sources by not configuring EPG URLs or using presets.
9. Permissions
The Info.plist files contain no standard privacy usage keys (camera, microphone, location, contacts, local network description).
- iOS / tvOS: UIBackgroundModes = Audio (background playback)
- macOS: App Sandbox, network client, user-selected files (import)
- M3U/EPG file import through system dialogs (iOS/macOS)
10. Retention periods
| Data type | Duration |
|---|---|
| UserDefaults / local app data | Until deletion in the App or uninstallation |
| Cache / Application Support | Until automatic or manual deletion |
| Website logs (Vercel) | According to host requirements / technical necessity |
| Support correspondence | Until resolved, at most 3 years |
11. App Store information ↔ PrivacyInfo
Privacy labels should reflect: no tracking, no Collected Data Types collected by the provider, UserDefaults only for internal app use. User content (playlists/URLs) stays local.
12. Your rights
You have the rights of access, rectification, erasure, restriction, data portability and objection (Articles 15–21 GDPR), and to complain under Article 77 GDPR. Contact: privacy@glassydev.de.
13. Supervisory authority
State Commissioner for Data Protection of Lower Saxony
Postfach 221, 30002 Hannover
poststelle@lfd.niedersachsen.de · https://lfd.niedersachsen.de
14. Data security
Technical and organizational measures; TLS where supported by destination servers; macOS sandbox. Protecting your media data primarily depends on your control of the device (passcode, disk encryption). Debug logs only in DEBUG builds.
15. Minors
The App is not intended for children under 16.
16. Changes
We update this policy when relevant changes occur. Current version: https://app.glassydev.de/apps/nyxplayer/privacy.html
17. Legal notice
Provider details: https://app.glassydev.de/apps/nyxplayer/imprint.html