1. Scope
This Privacy Policy explains how Hot Player Plus processes information when you use the Hot Player Plus application, visit this website, check a device, or upload playlist details. Hot Player Plus is a media player and does not provide channels, media, or playlist subscriptions.
2. Information we process
Device information
We process the virtual device identifier shown as “MAC” in the app, together with device platform, app version, access status, and related service timestamps. The virtual MAC is an application identifier and is not the physical network MAC of your device.
Playlist information
When you add a playlist, we process its name, provider host, username, and password. An Xtream-generated M3U link is converted into those Xtream login fields. Provider usernames and passwords are encrypted at rest.
Upload security information
To protect the upload service and enforce rate limits, the service stores keyed hashes of the requesting IP address and virtual MAC, failure timestamps, and a per-IP count of failed MAC checks. If Lock MAC is enabled, the submitted PIN is verified by the server and is not stored as plain text.
Human verification
After three failed MAC checks from the same IP within 15 minutes, Cloudflare Turnstile is used for human verification. Your browser connects to Cloudflare, and our server sends the verification token to Cloudflare for validation. Playlist credentials and device PINs are not included in that validation request.
Technical request information
Web servers and infrastructure providers may process standard request information such as IP address, browser type, requested URL, response status, and time of request for security, reliability, and troubleshooting.
3. How we use information
- Register and identify an app installation.
- Load device access and playlist configuration.
- Add, update, order, and secure playlists associated with a device.
- Prevent abuse, rate-limit requests, investigate failures, and maintain service reliability.
- Respond to support requests and comply with valid legal obligations.
4. Cookies and accounts
The current public website does not provide customer accounts, advertising profiles, or online checkout. The playlist upload flow does not create a browser session. If these features change, this policy will be updated.
5. Sharing
Information may be processed by infrastructure providers that host the website, database, network, or application services. We do not sell playlist credentials or use them for advertising. We may disclose information when required to comply with law, protect users, or defend the security and integrity of the service.
6. Retention
Device and playlist information is retained while needed to provide the service and maintain device configuration. Security and request records are retained as needed for abuse prevention, troubleshooting, and legal obligations. Information may be removed or anonymized when it is no longer required.
7. Security
Hot Player Plus uses access controls, encrypted connections, encrypted playlist credentials, and hashed security identifiers. No internet service can guarantee absolute security. Use HTTPS, keep provider credentials private, and enable Lock MAC with a PIN when additional upload protection is needed.
8. Your choices
You can change playlists in the app or through the website upload flow. Depending on applicable law, you may have rights to request access, correction, deletion, restriction, or a copy of information associated with you. Use the Contact us link on this website to begin a request. We may need enough information to verify the relevant device and request.
9. Children
The service is not directed to children who are not old enough to consent to digital services under the laws that apply to them. Do not submit another person’s credentials or personal information without authorization.
10. Changes and contact
We may update this policy when the product, security controls, or legal requirements change. The updated date will appear at the top of this page. Questions can be submitted through the Contact us link in the website header.