Privacy Policy

• Device data: a device identifier (shown as a MAC address), a generated device code, an optional device name and model, and the app version. This is created when you first open the app and is what links your TV to your playlists.
• Playlist data: the playlists you add — names, M3U URLs or Xtream server addresses and usernames, EPG URLs, and uploaded playlist files.
• Provider passwords: stored encrypted at rest (AES-256) and used only to fetch your own streams.
• Billing data: when you purchase a license, our payment processor (PayPal) handles your card details. We receive only the result of the payment and which license to apply — never your full card number.
• Basic technical logs: standard server logs (such as IP address and request time) used to operate and secure the Service.

We do not store, proxy, or record what you watch. Your television fetches streams directly from your provider, so GoBox is not in the path of that traffic and never sees your viewing activity. We do not use third-party advertising or tracking.

We use the data above only to: activate your device, sync your playlists to your TV, process the payment for your license, keep the Service secure, and respond to support requests. We do not sell, rent, or share your personal data with anyone for their own marketing.

We share data only with service providers that help us run the Service and only as needed: our payment processor (PayPal) for billing, and our hosting provider for running the servers. We may disclose data if required by law.

The portal uses a single signed session cookie to keep you logged in. We do not use advertising or analytics cookies.

We keep device and playlist data for as long as the device is active. When you remove a playlist or device from the portal, the associated records are deleted. Encrypted backups are rotated and retained for a short period for disaster recovery.

You can view, change, or delete your playlists and devices at any time from the portal, which removes the associated data. Depending on where you live, you may also have the right to access, correct, export, or erase your personal data, and to object to certain processing. To exercise these rights, contact us using the details below.

Provider credentials are encrypted at rest, the portal session is signed, and access to the dashboard requires your device’s code. No system is perfectly secure, but we take reasonable measures to protect your data.

The Service is not directed to children and is intended for adults only.

We may update this policy. Material changes take effect when posted on this page, with the date above updated accordingly.

For privacy questions or data requests, email support@goboxplayer.com.