PodPlayer TV Privacy Policy
Last updated October 19, 2026
PodPlayer TV™ is a free podcast app for TVs: Roku, Fire TV, Google TV and Android TV, Samsung and LG. It's built to know as little about you as possible. This page explains exactly what it keeps and who else is involved.
Who we are
PodPlayer TV is made and run by Sean M McClain, an independent developer in Oregon, USA. "We" and "us" on this page mean him. Contact: mcclain.sean.appdev@gmail.com or the support form.
No personal details
The PodPlayer TV app never asks for your name, email address, phone number, or payment details, and it doesn't use advertising or tracking of any kind. The only place you can give us an email address is the optional field on the website's support form (see below).
What our server stores
- Your encrypted podcast list. Your TV encrypts your subscriptions with a key made from your five-word passphrase before sending them. The server can't read the list or see which podcasts are on it. (The size of the encrypted data gives only a rough idea of how long the list is.)
- A lookup value. Your TV derives a random-looking value from your passphrase so the server can find your list. The server stores only a keyed hash of it. Your passphrase itself is never sent to the server.
- Sign-in tokens. A hashed token for each TV signed in to your account, and the date each account and sign-in was created.
- When the account was last used. The date (to the day) a TV last used your account. Accounts that nobody uses for about 12 months are deleted automatically, along with everything above.
Your playback positions, sort order and other preferences stay on your TV and are never sent to us.
Searches and browsing
Searches and podcast details go through our server to the Podcast Index, so our API key stays private. Podcast Index answers, including popular results, are cached for a short time so they load faster. The cache holds the Podcast Index's public answers, not who asked, and we don't save your searches or link them to your account. The Podcast Index sees our server's requests, not your TV.
When you open a show or episode website link, our server turns that link into a QR code. The link isn't stored. The QR code for your passphrase is made on your TV and never leaves it.
Importing podcasts from another app
When you import a list on our import page, your file is read in your browser. Only the feed addresses are sent to our server, to look each show up in the Podcast Index. They aren't saved, though the Podcast Index answers may be briefly cached as described above. Your browser then encrypts the matching shows with the one-time code shown on your TV, so the server holds the list only in a form it can't read. It's deleted as soon as your TV picks it up. If it's never picked up, it expires after 15 minutes and is deleted within a few minutes after that. The code itself is never sent to the server.
Support messages
If you use the support form, the topic, your message and the email address you choose to give (optional) are saved as an issue in our private project on GitHub, where we track bugs and replies. They aren't linked to your PodPlayer TV account. To stop abuse, the form limits how many messages one IP address can send per minute; Cloudflare handles that limit, and we don't store your IP address with the message. We keep support messages as long as they're useful for fixing problems, and delete one on request. If you email us instead, your email is handled by Google (Gmail).
Error reports and analytics
The PodPlayer TV apps don't send crash reports, error reports or usage analytics to us, and they contain no analytics or crash-reporting tools. Your TV platform or app store may collect its own crash and usage statistics under its privacy policy (see below).
When something goes wrong on our server, it writes a short technical error message (for example, that a request to GitHub failed). These messages never contain your passphrase, your podcast list or your support message. Cloudflare's logging tools may keep them, along with standard request details such as time and address requested, for a few days so we can fix problems.
Other services involved
- Podcast publishers. Episodes, artwork, chapters and transcripts stream straight from each podcast's own servers. As with any podcast app, those servers can see your TV's IP address.
- GitHub (Microsoft) stores support form messages, under GitHub's privacy statement.
- Cloudflare hosts our server and this website. Like any web host it handles your TV's IP address to deliver the service and to limit repeated sign-in attempts and support messages, under Cloudflare's privacy policy.
- Your TV platform and app store (Roku, Amazon, Google, Samsung or LG) runs the app and may collect information about your device under its own privacy policy, for example Roku, Amazon, Google, Samsung or LG.
Deleting your data
In the app, go to Settings and choose Delete my account. This removes your encrypted list and signs out every TV right away. Accounts can't be recovered without the passphrase, and we can't recover one for you. See Delete your account and data for all the options, including deleting your account on the website with your passphrase if you no longer have the app.
Your privacy rights
Depending on where you live, laws such as the California Consumer Privacy Act and the Oregon Consumer Privacy Act give you the right to know what personal information we have about you and get a copy of it, to have it corrected or deleted, and to opt out of its sale, sharing for targeted advertising, or profiling. We don't sell or share personal information, or use it for targeted advertising or profiling, so there is nothing to opt out of. Your encrypted list can be deleted in the app or on the delete account page; for anything else, such as a support message, email us. Because we don't know who you are, we may ask for details (like the email you used) to find what you're asking about. We won't treat you differently for using these rights. If we turn down a request, you can appeal by replying to our answer.
Children
PodPlayer TV isn't directed at children under 13, and we don't knowingly collect personal information from anyone.
Changes and contact
If this policy changes, we'll update this page and the date above. Questions? Email mcclain.sean.appdev@gmail.com.