Privacy policy

Imane El Oumari, sole trader (micro-entreprise) operating under the trade name W.M.I System, RCS Montpellier 131 146 649. Domiciliation address to come.

For any question about your data: support@storkplayer.com.

Stork Player is a media player for Android, Android TV and Fire TV. It plays the playlists you add yourself (M3U or Xtream Codes). Stork Player does not provide, host or sell any content, any channel or any IPTV subscription.

Playback runs directly between your device and your source: videos do not go through our servers and we do not know what you watch. Only the app’s demo videos come from our server, which does not log those requests.

• Your device. On first launch, the app sends the device’s Android identifier (ANDROID_ID) to our server. We keep only a fingerprint of it, computed with a server-side secret key: it is used to recognize the device if the app is reinstalled and to grant the free trial only once. The server gives the device a public identifier (STK-XXXXXXXX), shown in the app, and a device key of which we keep only a fingerprint. We also record the trial and activation dates, the license status and the date the device last connected. The six-digit web key, used to manage the device on the website, is computed: we do not store it.
• Your playlist. You add your source on the website (“Manage Playlist” page): its name, and the M3U URL or the Xtream server address, username and password. We store them on our server, encrypted, and send them only to your device, which also keeps them encrypted.
• Your account, if you create one. E-mail address and password (stored hashed, never in clear text), the devices linked to the account, and a record of unlinks and wrong link codes (date only), used to limit abuse. An account is optional: a device can also be managed with its identifier and its web key, with no e-mail address.
• Your payments on the website. Payment takes place on a Stripe page, which collects your e-mail address, your card details and, where required, your billing address, and sends you the invoice. We never receive your card number, and your e-mail address is not recorded in our database: we view the payment and its invoice in our Stripe account. We record the amount, the currency, the date, Stripe’s references for the payment, any refund or dispute, and the activated device, whose identifier appears on the invoice. We also keep the proof that you waived your right of withdrawal: version, language and fingerprint of the accepted text, date, and a fingerprint of your IP address (hashed, never in clear text).
• Your purchases on Google Play (the version of the app distributed on Google Play). Payment is processed by Google. We receive from Google, and keep, the order number, the date and status of the purchase and the billing country, together with the activated device. The purchase token the app sends us is kept only as a fingerprint.
• Your sign-in on the website without an account. A record of each device’s sign-in attempts (success or failure, date, fingerprint of the IP address) and a failure counter per network (fingerprint of the IPv4 address or of the /64 prefix of an IPv6 address, date). They are used to block repeated attempts.
• Technical logs. Our web server records, for each request, the IP address, the date, the address requested and the browser or app used. The server application does not log your requests, and its error logs contain no personal data.
• Your messages to support. If you write to us, your e-mail address and the content of your message.
• On your device only. The app keeps locally, without ever sending them to us: the list of channels and content of your source, your favorites, your playback resume position, your settings and the parental control code (as a fingerprint).

No advertising, no audience measurement, no ad tracking, and no third-party analytics or crash-reporting library (neither Firebase nor Crashlytics). The app does not access your location, contacts, microphone or camera: it only asks for access to the Internet and to the network state. We do not sell any data.

• Providing the service (trial, activation, delivery of your playlist, management of the device and the account), answering your requests: performance of the contract.
• Securing the service (limiting attempts, technical logs, free trial granted only once per device): legitimate interest.
• Payments, invoices and proof of waiver: performance of the contract and legal obligation (accounting).

• Bluehost, which hosts our server.
• Stripe, payment provider, for purchases made on the website.
• Google, for purchases made on Google Play.

Only the publisher has access to the server and to the backups. No data is sold or shared for advertising. Where these providers process data outside the European Union, the transfer relies on the safeguards set out by the GDPR (adequacy decision or standard contractual clauses).

• Device data (identifier, fingerprints, dates, status): with no automatic time limit, until you ask for deletion.
• Playlist: until you delete it on the website, or until you ask for deletion.
• Account: until you ask for deletion.
• Payments, Google Play purchases, proof of waiver: 10 years (accounting obligation).
• A device’s sign-in attempt record: 31 days; failure counter per network: 2 hours. These deletions happen during later attempts, not as a scheduled task: an entry may remain a little beyond its expiry.
• Web server logs: 14 days; error logs: 7 days.
• Messages to support: as long as needed to handle your request.
• Backups: encrypted, kept for about 3 months. Deleted data disappears from the backups within that period at the latest.
• Data kept on the device: until the app is uninstalled or its data is cleared.

The website only uses cookies it needs to work, with no advertising and no audience measurement:

• __Host-stork_session: account session, 30 days.
• __Host-stork_device_session: device session (sign-in with the identifier and the web key), 7 days.
• stork_locale: chosen language, 1 year.

All communication with our servers uses HTTPS. Passwords are hashed (bcrypt), playlists are encrypted (AES-256-GCM), and device keys and IP addresses are kept only as fingerprints. Access to the server is reserved to the publisher, by SSH key, and backups are encrypted.

You have the right to access, rectify, erase, restrict and object to the processing of your data, and to data portability. To exercise these rights, write to support@storkplayer.com. We answer within one month. You may also lodge a complaint with the CNIL, the French data protection authority (www.cnil.fr).

To ask for your account and your data to be deleted, write to support@storkplayer.com with the subject “Delete my data”, giving the device identifier (STK-XXXXXXXX, shown in the app: Settings, Device, Device management) and, if you have an account, writing from its e-mail address. Never send us the device key: we do not ask for it.

• Deleted: the account, the playlists, the device data and its sign-in records. The device loses its activation.
• Kept for 10 years, under our accounting obligations: payment data, with the identifier of the device it relates to, and the proof of waiver. Stripe and Google keep their own data under their own policies.
• Time frame: one month at most; backups are then cleared within about 3 months.

Without writing to us, you can delete your playlist at any time on the website, and uninstalling the app erases the data it keeps on the device.

Stork Player is not intended for children under 13, and we do not knowingly collect their data.

Any change to this policy is published on this page; the date of its last update is shown at the top of the page.