Privacy Policy

Last updated: 6 July 2026

Cobalt ("the app") is a media player for IPTV playlists and Xtream Codes accounts that you provide. This policy explains what the app does and does not do with your information. It is written to be honest and plain.

The short version

• Cobalt does not have user accounts and does not collect personal data on our servers. We do not run an analytics server.
• The playlist/portal credentials you enter are stored only on your device and are used only to connect to the IPTV service you chose.
• Cobalt ships with no channels, playlists, or media content. You bring your own.

What information the app handles, and where it goes

1. Your IPTV credentials and playlists (M3U URL or Xtream host / username / password)

• Stored locally on your device using the operating system's secure storage.
• Sent only to the IPTV provider you entered, in order to load and play your channels. They are never sent to the developer of Cobalt.

2. Your in-app preferences (favorites, buckets, watch history, settings)

• Stored locally on your device. Not transmitted to the developer.
• You may export this data to a file yourself (Backup & Restore). That file stays on your device/storage unless you move it.

3. Purchases and subscriptions (if you subscribe)

• Handled by Google Play Billing. Cobalt does not see or store your payment details. Google processes payment and manages your subscription. See Google's Privacy Policy for how Google handles that data.

4. App updates and version checks

• On Android installs distributed outside Google Play, the app may check a public GitHub releases page to see if a newer version exists. This request contains no personal data.

5. License keys (for platforms without Google Play, e.g. Windows)

• If you enter a license key, it is validated on your device. To support key revocation, the app may fetch a public list of revoked key identifiers. This request contains no personal data.

What Cobalt does NOT do

• Does not collect your name, email, contacts, location, or advertising ID.
• Does not include third-party advertising or third-party analytics/tracking SDKs.
• Does not sell or share personal data (we don't collect any to sell).
• Does not host, provide, or bundle any TV channels, movies, or other media.

Data retention and deletion

Because your data lives on your device, you control it. Uninstalling the app, or clearing its data in your system settings, removes the locally stored credentials and preferences. Google-managed subscription data is controlled through your Google account.

Children

Cobalt is a general-audience media player and is not directed at children under 13. It contains no content of its own.

Contact

Changes

If this policy changes, the "Last updated" date above will change and the new version will be posted at this URL.