Privacy policy

Last updated 9 October 2026

This policy explains what Orb Player (“we”, “us”) collects when you use the Orb Player app and orbplayer.com, why, and what you can do about it. Orb Player is operated by [COMPANY NAME], [ADDRESS]. Contact: [email protected].

The short version

• Orb Player is a media player. It provides no channels, films or other content; you add playlists from your own provider.
• Your playlists are stored on your device. If you add one through orbplayer.com, it is stored encrypted on our server for your TV only, so the TV can fetch it.
• Voice requests are turned into text by your device’s speech service. The text of a request is sent to our server and to an AI language model provider to understand it. It is not used for advertising.
• We don’t sell your data, show ads or use tracking cookies.

What we collect

Device id and device key

When the app starts for the first time it creates a device id (shown as a MAC-style code such as 3A:9F:21:C4:7B:E0) and a 6-digit device key. The app registers them with our server to run your free trial and plan. We store the device id, a one-way hash of the key (never the key itself), the TV model name the app reports, your plan and its dates, and when the device was last seen.

Playlists

Playlists you add on the device stay on the device. If you add a playlist through orbplayer.com, we store its name, type, server address or link, username and, encrypted with AES-256, its password or portal MAC, linked to your device id, so your TV can download it. Delete it from the TV’s settings or from the chat on orbplayer.com and it is removed from our server. We never use your playlist or its contents for anything else.

Voice and text requests

When you talk to Orb Player, your device’s speech recognition service (for example Google’s, on Android) turns your voice into text under that service’s own terms. In some cases the app sends a short audio clip to our server to be transcribed there instead; it is processed in memory and not kept. The resulting text, together with the names of channels or titles needed to answer it, is sent to our server and to an AI language model provider (currently OpenCode Zen / Go, with DeepSeek as a backup) to work out what you want. Spoken replies may be generated on our server. We keep request counts and token usage to prevent abuse, not the content of your requests. These requests are never used for advertising.

The chat on orbplayer.com

Messages you type in the chat are sent to our server and to the same AI provider to answer you. We keep a short conversation history in memory for up to two hours so the assistant can follow the conversation, then it is gone. A single cookie (ibo_sid) keeps your chat session and is strictly necessary for the chat to work; it is not used for tracking. Device keys you type and playlist logins are handled by our server and are not sent to the AI provider.

Film and series artwork

To show posters and details, the app sends titles and years from your playlist to our server, which looks them up at The Movie Database (TMDB). This product uses the TMDB API but is not endorsed or certified by TMDB.

Payments

Payments are processed by Gates2b and its payment partners. You enter card details or pay with PIX or crypto on their pages, not ours; we never see or store card numbers. We receive and keep the order: plan, amount, currency, method, status, the payment reference and the device id it was for.

Server logs

Our server logs requests (time, path, status, duration) with shortened, anonymised identifiers for the device and IP address, to keep the service running and to stop abuse. Logs are kept for up to 30 days.

Why we use it

To provide the app and its free trial and plans (contract), to keep the service secure and prevent abuse (legitimate interest), to process payments and keep records we are required to keep (contract and legal obligation), and to answer you when you contact us.

Who else processes data

• Our hosting provider, which runs our server.
• The AI language model provider, for the text of voice and chat requests.
• TMDB, for title lookups (titles and years only).
• Gates2b and its payment partners, for payments.
• Your device’s speech recognition service, under its own terms.

Some of them are outside your country. Where required we rely on appropriate safeguards such as standard contractual clauses.

How long we keep it

Device records and playlists stored for the portal are kept while the device is in use and deleted 24 months after it was last seen, or sooner on request. Payment records are kept as long as tax and accounting law requires. Chat sessions are deleted after two hours of inactivity.

Your rights

Depending on where you live you can ask to access, correct, delete or export your data, or object to or restrict how we use it. Email [email protected] with your device’s MAC code. You can also complain to your local data protection authority.

Children

Orb Player is not directed at children under 13 and we do not knowingly collect their data. The parental PIN lets parents lock adult categories on the TV.

Changes

If we change this policy we will update the date above, and tell you in the app when the change is significant.