GATV Privacy Policy

Last updated: 10 September 2026.

In short

GATV is a player. It has no content of its own and no user accounts; there is no sign-up, no login and no personal area. Everything it knows about you lives on the TV itself.

The app makes exactly two requests of its own accord, and both can be switched off:

• the weather forecast for the screensaver (on by default, section 4.2);
• syncing "Continue watching" between your own devices — OFF until you turn it on yourself (section 4.3). Only that one talks to our server, and even then the server never learns the TITLES of what you watch.

1. Who we are

The GATV app for Samsung TV sets. Developer — Gurgen Shaumjan. Contact: support@gurgenaudio.com.

2. We do not collect personal data

The app does not ask for and does not collect your name, address, phone number, email, payment details, or anything else that could identify you. There is no registration, no login and no personal account.

The app contains no analytics, advertising, trackers, visit counters or advertising identifiers. We do not build a profile of you, and we neither pass nor sell anything to anyone.

3. What is stored on the TV

Everything below lives in the TV's local storage (localStorage and IndexedDB) and is not sent anywhere. It is all removed together with the app; how to remove parts of it is in section 6.

Data you enter yourself:

• Playlists: the address of your source (an m3u link or an Xtream portal address), its username and password, and the playlist name. They are needed to reach your source and are used for nothing else.
• The parental control PIN — stored as a hash, not as the code itself — and the list of groups you marked as adult.

Data that accumulates as you watch:

• watch positions ("Continue watching"): what was played, how many minutes in, and when;
• favourites and the "Watch later" list;
• the "do not suggest" list for the "Recommended" row;
• recent search queries;
• the last channel opened, the order of channel groups, the aspect ratio per channel, the chosen look of the media library;
• app settings: clock, animation, CH± direction, screensaver, weather city;
• a device identifier — a string like dev-… that the app generates itself from the time of first launch plus random characters. It tells this TV's records apart from another device's, and it is part of the salt for the PIN hash. It is not tied to your identity. If you turned syncing on, this string is sent to the service together with your positions (section 4.3) — otherwise the other device cannot tell "I wrote this myself" from "this came from the set-top box". With syncing off it goes nowhere.

Caches, so the same thing is not downloaded twice:

• the TV guide (database gatv-epg) and the media library catalogue (database gatv-vod) — whatever your own source returned;
• the last weather forecast (no older than three hours).

4. Where the app connects

No more than four destinations, and three of them are your choice:

4.1. Your source — at the address you entered

The playlist, the TV guide, the streams and the catalogue are requested directly from the server whose address you entered. The request goes from the TV; the app is not a middleman here, and that traffic does not pass through us. What your provider records about its own subscribers is governed by that provider's own policy.

4.2. Weather for the screensaver — api.met.no

ON BY DEFAULT. The screensaver (it starts when the TV is idle and it is there to keep the panel from burning in) shows the weather. For that the app contacts the Norwegian Meteorological Institute:

• address: https://api.met.no/weatherapi/locationforecast/2.0/compact;
• no more than once an hour, and only when the weather is actually needed — at start-up and when the screensaver appears. A TV nobody is watching makes no requests;
• what is sent: the coordinates of the chosen city (latitude and longitude, rounded to four decimal places) and the things any HTTP request carries — an IP address and the TV browser's user-agent string. Nothing from section 3 takes part in that request: no playlist, no watch history, no device identifier;
• you choose the city yourself (Settings → Screensaver → City); by default it is guessed from the TV's time zone, and that guess is made on the TV, with no requests at all;
• MET's data is governed by the institute itself: https://api.met.no/doc/TermsOfService;
• one more case of contacting the same address: when a channel will not start and your provider's server did NOT answer at all, the app checks whether the network is alive — otherwise it cannot tell you whether the trouble is at the provider or your internet is down. Same request, same address, same coordinates; the body of the reply is not read, only the fact of an answer matters. This happens only after three failed attempts to open a stream, and only when the weather is enabled: if you switched it off, the app does NOT go here either — it simply will not name the cause.

How to switch it off: Settings → Screensaver → Weather on screensaver → off. After that the app contacts nobody at all except your own source.

4.3. Syncing "Continue watching" — gurgenaudio.com

OFF BY DEFAULT. Until you turn it on in Settings → Sync, the app never contacts this address, and no space exists for you on the server at all.

What it is for: the point where you stopped travels between your own devices — pause on the TV, carry on at the set-top box. No account is needed for that: devices are linked by a one-time eight-character code that lives for ten minutes; the permanent key is issued by the server and is never shown to a person.

What is sent to the server:

• the item key — a string such as xt|your-provider|mov|4242 or arc|channel|1757000000. By the rule the key is built by, it never contains logins, passwords or tokens: that is precisely why the address of an m3u source is trimmed to the path without parameters before hashing. Your provider's host is part of the key — without it, keys from different sources would collide;
• the position and the duration in seconds, and the time of the last change;
• the device identifier (dev-…, section 3) and the catalogue id of the item, so that the same card can be found on the other device;
• a mark saying "this card was removed from the row" — otherwise deleting on one device would be undone by the other.

What the server does not and cannot hold:

• titles of films, series and programmes, posters and artwork. They are not part of the exchange at all: the receiving device works out the name itself, from the key, in its own catalogue. The service stores numbers, not names, and from its database it is impossible to say WHAT you watched;
• stream addresses, logins, passwords or tokens of your provider;
• your email, your name or anything else about you — the app does not have any of it (section 2);
• your IP address. This is not a promise but a property of the arrangement: requests reach the server through a local reverse proxy, and in the web server's log EVERY request shows as 127.0.0.1. We have physically nothing to record your address with.

How long it is kept: for as long as you use syncing. A space nobody has touched for six months is deleted in full, with all its records. Marks about deleted cards are dropped after 90 days.

How to switch it off and how to erase it: Settings → Sync → Unlink this device. The access key is revoked on the server, not merely forgotten on the TV. Once every device is unlinked and six months pass with no contact, the records are deleted by themselves; if you need it sooner, write to us (section 9) and quote the space code from the settings.

4.4. Nowhere else

The app requests no other addresses. The debug log upload used during development is not part of a published build: the store build is produced by tools/store-build.sh, which checks the finished package for the absence of such addresses.

5. Children

The app is not intended for children and does not collect data about them. Channels marked as adult are behind parental control with a PIN.

6. Your rights and how to exercise them

We hold no personal data, so there is nothing to ask us to delete — it all sits on your TV and you are the one in charge of it:

• delete a particular playlist together with its username and password: Settings → Playlists, pick the playlist and delete it;
• forget a watch position: long OK on the card → "Remove from Continue watching";
• remove something from favourites or from "Watch later" — the same long-OK menu;
• unlink this TV from syncing and revoke its key on the server: Settings → Sync → Unlink this device;
• reset settings to factory defaults: Settings → About → Reset settings. Playlists are KEPT — they are deleted one by one, see above;
• erase everything at once — remove the app from the TV: all of its local storage goes with it, including playlists, watch history and the TV guide cache.

7. Third-party data and credits

• Weather forecast — the Norwegian Meteorological Institute (MET Norway), api.met.no.
• City list — GeoNames, licensed CC BY 4.0. The attribution is also shown inside the app: Settings → About.

7.1. Our server

The sync service (section 4.3) runs on a rented server in Finland. The connection is always encrypted (TLS). The service's source code lives in the same repository as the app, so it can be read and checked against everything listed here.

8. Changes to this policy

If the set of requests or of stored data changes, we will update this text and the date at the top. Substantial changes will be noted in the app's update description.

9. Contact

support@gurgenaudio.com

gurgenaudio.com · Русский