Privacy Policy

Effective Date: 2026-03-09 | Last Updated: 2026-03-15

1. Introduction

MACAAL (“the App”, “we”, “our”) is a media player application for Samsung Smart TVs. This privacy policy explains what data we collect, how we use it, and your rights regarding your personal information.

MACAAL is a media player — it does not provide, host, or distribute any media content. Users supply their own media server credentials independently.

2. Data We Collect

2.1 Device Identifier (DUID)

  • What: Your Samsung TV's unique device identifier (Tizen ID / DUID).
  • Why: Used solely for license activation and device binding. One license is bound to one device.
  • Where stored: On the license backend server (see Section 5).

2.2 License Activation Data

  • What: Activation code, license status, activation timestamp, and device binding record.
  • Why: To validate that the device has an activated license.
  • Where stored: On the license backend server.

2.3 App Settings and Preferences

  • What: User preferences including category visibility, subtitle settings, TMDB API key, OpenSubtitles API key, favorite items, playback resume positions, and display preferences.
  • Why: To personalize the app experience and remember user choices.
  • Where stored: Locally on the device in localStorage only. This data is never transmitted to our servers.

2.4 User-Supplied Media Server Credentials

  • What: Xtream-format server URL, username, and password provided by the user.
  • Why: To connect to the user's own media server and retrieve their content catalog.
  • Where stored: Encrypted in localStorage on the device only. These credentials are never transmitted to our servers — they are sent only to the user's own media server.

2.5 Email Address (Website Only)

  • What: Email address provided during license activation on this website.
  • Why: Used for passwordless authentication (magic link login) and license management.
  • Where stored: On the license backend server. Not collected or stored by the TV app.

3. Data We Do NOT Collect

  • No viewing history: We do not track, log, or transmit what content you watch.
  • No personal browsing data: We do not monitor your browsing behavior within the app.
  • No content catalog data: We do not collect or store information about the content available on your media server.
  • No location data: We do not access or store your geographic location.
  • No analytics or telemetry: We do not send usage analytics to any service.
  • No advertising data: The app contains no advertisements and collects no advertising identifiers.
  • No email addresses on the TV app: The TV app does not collect or store email addresses. Email is only used on the separate license activation website.

4. Third-Party Services

4.1 TMDB (The Movie Database)

  • Purpose: Optional. Fetches movie and series metadata to enrich the browsing experience.
  • User-supplied key: Requires the user to provide their own TMDB API key. MACAAL does not provide or distribute API keys.
  • Data sent: Movie and series titles for metadata lookup, using the user's own API key.
  • Data received: Publicly available metadata and images.
  • Privacy policy: themoviedb.org/privacy-policy
  • This product uses the TMDB API but is not endorsed or certified by TMDB.

4.2 OpenSubtitles

  • Purpose: Optional. Searches and downloads subtitles for movies and series.
  • User-supplied key: Requires the user to provide their own OpenSubtitles API key. MACAAL does not provide or distribute API keys.
  • Data sent: Movie/episode title, year, and language preference, using the user's own API key.
  • Data received: Subtitle files.
  • Privacy policy: opensubtitles.com/en/privacy

4.3 LemonSqueezy (External License Activation)

  • Purpose: Processes license purchases on this website (not within the TV app). There are no in-app purchases.
  • Data handled by LemonSqueezy: Payment and account information — processed entirely by LemonSqueezy, never accessible to the TV app.
  • Privacy policy: lemonsqueezy.com/privacy

4.4 User's Media Server

  • Purpose: The user's own Xtream-format media server provides the content catalog and stream URLs.
  • Data sent: User-supplied credentials (server URL, username, password).
  • Note: This is a server chosen and controlled by the user. MACAAL has no relationship with, control over, or responsibility for these third-party servers.

5. Data Storage

5.1 On-Device Storage (localStorage)

All user settings, preferences, favorites, playback positions, and encrypted credentials are stored locally on the Samsung TV using the browser's localStorage API. This data:

  • Never leaves the device (except credentials sent to the user's own media server).
  • Is deleted if the user uninstalls the app or uses “Reset All Settings”.
  • Is not accessible to other applications on the TV.

5.2 License Backend Server

License activation data (device DUID, activation code, license status, timestamps) is stored on our backend server:

  • Database: Neon PostgreSQL (encrypted at rest)
  • Purpose: License validation only
  • Retention: License records are retained for the lifetime of the license.

6. Data Sharing

We do not sell, rent, or share your personal data with third parties for marketing or advertising purposes.

Data is shared only with:

  • LemonSqueezy: Payment data for license purchases (on this website only, not the TV app).
  • TMDB: Content titles for metadata lookup, only if the user provides their own API key (no personal data).
  • OpenSubtitles: Content titles for subtitle search, only if the user provides their own API key (no personal data).
  • User's media server: User-supplied credentials (chosen by the user).

7. Your Rights (GDPR / CCPA)

7.1 Right of Access

You may request a copy of any personal data we hold about you. For on-device data, view this in the app's Settings. For license data, contact us at macaal.media@gmail.com.

7.2 Right to Deletion

  • On-device data: Use Settings > Reset All Settings to delete all locally stored data.
  • License data: Contact us at macaal.media@gmail.com to request deletion of your license record.

7.3 Right to Portability

Your on-device data is stored in standard localStorage format. License records can be exported upon request.

7.4 Right to Rectification

Contact us to correct any inaccurate personal data.

7.5 Right to Object

You may object to the processing of your data by discontinuing use of the app and requesting deletion.

8. Children's Privacy

MACAAL is a general-purpose media player and does not knowingly collect data from children under 13. The app does not contain age-restricted content — it plays content from user-supplied servers, and users are responsible for the content on their own servers.

9. Changes to This Policy

We may update this privacy policy from time to time. Changes will be reflected in the “Last Updated” date at the top of this document. Continued use of the app after changes constitutes acceptance of the updated policy.

10. Contact

For questions, data access requests, or deletion requests:

Email: macaal.media@gmail.com

This product uses the TMDB API but is not endorsed or certified by TMDB.