Privacy policy
The short version. Your music, your listening history, your play counts and your ratings stay on your own devices — none of that is ever sent to us. What our server holds is the minimum needed to run accounts and licences: your email address from Google sign-in, a name for each device, and records of trials and purchases. We do not sell or share any of it for advertising.
What never leaves your device
EyePlayer's whole design keeps your listening private. The following exist only on your own phone or PC and are never transmitted to us:
- Your music files and the contents of your library — the app connects only to servers you configure (your own NAS, HTTP server or folders), never to ours.
- Listening history, play counts and ratings (used locally for smart lists).
- Your equaliser, playback and interface settings.
What our server stores, and why
If you use EyePlayer without signing in, we store nothing about you at all. If you create an account (for the free trial, a purchase, or syncing your licence between phone and PC), our licensing server keeps:
| Data | Why |
|---|---|
| Your email address and a Google account identifier | Sign-in, and attaching purchases made on the web to your account |
| A name for each signed-in device (e.g. “Studio PC”) and its platform | So you can see which device holds your seat, and pick it out when moving the licence |
| A one-way salted hash of a device identifier (a “fingerprint hash”) | Fraud prevention: limiting free trials to one per device. The hash cannot be reversed into anything that identifies the device |
| Trial, subscription and licence status, with dates | Delivering what you're entitled to |
| Purchase records: which product, when, and the payment provider's reference | Delivering purchases, handling refunds, and tax law. We never see your card or bank details — payment is handled entirely by Paddle or Google Play |
| If ads are shown in the free tier: which ad was shown or tapped, and when | Capping how often you see one, and counting whether campaigns are seen. Ads are served from our own server; this data goes to no ad network |
The mailing list
If you join the mailing list on our home page, we store your email address and the date you joined — nothing else, and it is not linked to any app account. It is used only to write to you about EyePlayer. Every mail includes an unsubscribe link, or write to support@eyeplayer.org and we will remove you.
Who else is involved
- Google — operates the sign-in (we receive your email address and a Google account identifier; we never see your password), Google Play billing, and, on Android, Play Integrity (an anti-fraud check that tells us only whether the device passes; we receive no device details from it).
- Paddle — our merchant of record for purchases on the web and PC. Paddle handles payment details, invoices and VAT under its own privacy policy.
- Cloudflare — hosts our server and database. Like any host, it processes connection metadata (such as IP addresses) to deliver traffic and block abuse.
There are no analytics trackers and no third-party advertising SDKs in the apps. If a third-party ad network is ever added to the free tier, this policy and the Play Store data-safety listing will be updated first, and consent will be requested where the law requires it.
How long we keep things
- Account data — until you delete your account. Deletion takes effect immediately and the data is purged from the database within 7 days.
- Purchase records — kept after account deletion, because tax law requires sellers to retain transaction records (typically 6 years).
- The trial-lock hash — the salted device-fingerprint hash and the date a free trial was used are kept after account deletion. This is what prevents “delete account, repeat free trial” abuse. It contains no name, no email, and cannot be reversed into anything that identifies you or the device.
- Mailing list — until you unsubscribe.
Your rights and choices
You can use EyePlayer's player features without any account at all. If you have an account, you can delete it yourself from inside either app — see how to delete your account — or by emailing support@eyeplayer.org. Depending on where you live (including under the EU and UK GDPR), you may also have rights to access, correct, export or restrict the data above; write to the same address and we will honour them.
Children
EyePlayer is not directed at children and we do not knowingly collect data from anyone under 13 (or the higher age your country sets for consent).
Changes
If this policy changes materially, the date at the top changes and the apps will point it out before the change applies to you.
Contact
EyePlayer is published by [publisher legal name].
Privacy questions: support@eyeplayer.org