Privacy Policy

Who We Are

ONYX Player is published by Rynex Technology Ltd. (“Rynex”, “we”, “us” or “our”). Rynex is the controller of the personal data described in this Privacy Policy.

Rynex Technology Ltd. [Registered office address, Ireland — TO CONFIRM] Email: support@onyx-player.com

We have not appointed a Data Protection Officer. For any privacy question, contact us at support@onyx-player.com.

ONYX Player is a media player. It does not supply, host or distribute television channels, movies or series. You connect it to a media service of your own choosing.

This Privacy Policy applies to ONYX Player on every supported platform and to our companion website.

What We Collect

You do not need to give us your name or email address to use ONYX Player. Your account is tied to your device instead. We collect the following.

A. Device information

A device ID generated by the app when it is first installed.
A virtual MAC address, and a Stalker Portal serial number and device IDs, used to sign in to your media service. ONYX Player generates these itself; it does not read your device’s real MAC address or serial number. On Android they are derived from the Android ID, which the app reads for this purpose only and never sends to us.
The device model.
When the device was activated, when its subscription expires and when it was last seen.

B. Playlist and connection details

M3U playlist and EPG (programme guide) URLs.
Xtream Codes server addresses, usernames and passwords.
Stalker Portal addresses.
Names and settings you give to your playlists.

These details are stored on our servers, not only on your device, so that your playlists work on every app you sign in to and so that a reseller can set them up for you. Playlist URLs, usernames and passwords are encrypted on our servers.

C. Viewing activity

Watch progress: what you watched, how far you got and when.
Favourites: the channels, movies and series you saved.
Playback reports: whether a stream started, how long it took, how many retries it needed and which player engine was used, together with your platform and app version.

D. Sign-in and security records

Sign-in sessions, including the IP address and browser or app identifier (user agent) they were created from.
Sign-in events, such as successful and failed sign-ins and sign-outs, with the IP address, user agent and, for failed attempts, the username that was tried.

E. Support requests

If you contact us, we receive your email address, your message and the app details attached to it (app version, language, playlist type and player settings).

F. Stored only on your device

Your sign-in tokens.
Your app settings, such as language, player and parental control settings.
Your recent searches.

ONYX Player does not use third-party analytics, advertising or crash-reporting services.

Why We Use It and Our Legal Basis

To provide the service: activating your device, connecting it to your media service, keeping your playlists, favourites and watch progress, and signing you in. Legal basis: performance of a contract (GDPR Art. 6(1)(b)).
To keep accounts secure: sign-in sessions and sign-in events let us detect and block password guessing and account takeover. Legal basis: our legitimate interest in protecting your account and our service (Art. 6(1)(f)).
To fix playback problems: playback reports show us which streams fail and why, so we can fix faults in the player. Legal basis: our legitimate interest in a working product (Art. 6(1)(f)).
To answer support requests. Legal basis: performance of a contract (Art. 6(1)(b)).
To meet legal obligations, such as keeping financial records. Legal basis: legal obligation (Art. 6(1)(c)).

You can object to processing based on legitimate interest at any time by emailing us (see section 8).

We do not sell your personal data, and we do not use it for advertising.

Who Receives Your Data

Our service providers (processors)

These companies process data only on our instructions, under a data processing agreement:

MongoDB, Inc. (MongoDB Atlas): hosts our database, which holds all the data in section 2 A–D. Region: [MongoDB Atlas region — TO CONFIRM].
[Server hosting company and country — TO CONFIRM]: runs our servers, which handle every request from the app.
Vercel Inc.: hosts our companion website, where you can activate a device and add playlists. Vercel receives your IP address and what you enter on the website.

Content information services

To show artwork, descriptions and subtitles, our servers look up titles with Simkl and OpenSubtitles. These requests are made by our servers and contain only the title or catalogue ID being looked up. They do not contain your IP address, device information or account details.

Your media service

To play content, ONYX Player and our servers connect to the media service you added. That service receives your playlist credentials, your MAC address and Stalker IDs, and your IP address when your device streams from it. Your media service is an independent company that decides for itself how it uses this data. Read its privacy policy.

Resellers

If you received ONYX Player through a reseller, that reseller can see the devices it manages in our management panel: the device ID, model, status, subscription dates and the playlists attached to it.

Authorities

We disclose data to public authorities only when the law requires us to.

Transfers Outside the EEA

Vercel Inc. is based in the United States. Where your data is transferred to the United States, we rely on the EU–US Data Privacy Framework for certified companies, or on the European Commission’s Standard Contractual Clauses.

Our database is hosted in [MongoDB Atlas region — TO CONFIRM]. You can ask us for a copy of the safeguards we use by emailing support@onyx-player.com.

How Long We Keep It

Device information, playlists and favourites: until you delete your account, or until the reseller that manages your device deletes it.
Watch progress: 90 days after you last watched the title, or until you clear it or delete your account.
Playback reports: 30 days.
Sign-in sessions: 60 days after you sign in.
Sign-in events: 90 days.
Support emails: [e.g. 2 years — TO CONFIRM] after your request is closed.
Data stored only on your device: until you clear it in Settings or uninstall the app.

Deleting your account removes the device information, playlists, favourites, watch progress, playback reports, sign-in sessions and sign-in events linked to it, immediately.

We keep records of credits and payments between us and resellers, which can include your device ID, for as long as tax and accounting law requires.

Security

All connections between the app, the website and our servers are encrypted.
Playlist URLs, usernames and passwords are encrypted in our database.
Passwords for staff and reseller accounts are stored only as one-way hashes.
Access to personal data is limited to staff who need it.
Sign-in attempts are rate-limited to block password guessing.

Your Rights

Under the GDPR you have the right to:

Access the personal data we hold about you and get a copy of it.
Have inaccurate data corrected.
Have your data deleted.
Restrict how we use your data.
Object to processing based on our legitimate interests.
Receive the data you gave us in a machine-readable format (data portability).

To delete your account and all data linked to it, open Settings → Delete account in the app.

For any other request, email support@onyx-player.com from within the app (Settings → Contact us), so the message includes your device details. Because we hold no name or email for you, we may ask you for details shown under Settings → Device Info in your app before we act on a request, so that nobody else can obtain or delete your data.

We answer every request within one month, free of charge.

Complaints

You can complain to the Irish Data Protection Commission: 21 Fitzwilliam Square South, Dublin 2, D02 RD28, Ireland, www.dataprotection.ie. You can also complain to the data protection authority in the EU country where you live.

Questions about this document?

Write to us and we'll get back to you.

Email support Contact page

Also readTerms of Use