Privacy Policy

1. Who we are

This policy describes how Play Cresta (“Cresta”, “we”, “us”) handles information in connection with the Cresta application for Apple platforms and the CrestaXR application for Meta Quest (together, the “App”). It applies to the App and to this website, playcresta.com.

2. Our approach to your data

Cresta is designed to be a private, on-device player. The App connects directly from your device to the IPTV source and services youchoose. We do not run an account system, an advertising network, or an analytics backend that profiles you, and we do not receive your provider credentials, playlists, or a record of what you watch.

3. Information stored on your device

To do its job, the App stores the following locally on your device only. This information is not transmitted to us:

• The IPTV source you add — its server URL, username, and password, or an M3U/Stalker address. Credentials are held in your operating system's secure store (Apple Keychain on iOS/macOS; the Android Keystore / encrypted storage on Meta Quest).
• Downloaded playlist and channel data, program-guide (EPG) data, and cached artwork, used to render your library.
• Your preferences — favorites, pinned and hidden categories, appearance, and playback settings.
• An optional TMDb API key you provide to enrich movie and series artwork.
• An optional parental-control PIN, stored only as a salted hash — never as plain text.

Because this data lives on your device, we have no ability to access, view, or recover it.

4. What we do not collect

• No account, name, email, or phone number is required to use the App.
• No advertising identifiers, and no advertising or behavioral-analytics SDKs.
• No sale or sharing of personal information — we have none to sell or share.
• No location data, contacts, photos, microphone, or camera access is used by the App's media-player features.

5. Connections the App makes on your behalf

When you use the App, your device communicates directly with the services you configure. These are independent third parties with their own privacy practices; we do not receive or intermediate this traffic:

• Your IPTV provider. To list and play content, the App contacts the server address you enter. Your provider receives the requests needed to authenticate and stream, and handles them under its own policy.
• The Movie Database (TMDb). If enabled, the App requests movie and series artwork and details from TMDb. This product uses the TMDb API but is not endorsed or certified by TMDb.
• Program-guide (XMLTV/EPG) sources you configure, if any, to display schedule information.

As with any internet request, these services necessarily receive standard technical information such as your device's IP address in order to respond. That exchange is between your device and those services directly.

6. Diagnostics & crash reports

The App does not embed a third-party analytics or crash-reporting service. Your device's operating system (Apple or Meta) may offer to share aggregated, de-identified crash or performance diagnostics with developers, but only if you have opted in through your system settings. Where that is enabled, we may receive anonymized crash information that helps us fix bugs; it is not linked to your identity, credentials, or viewing.

7. Children

The App is intended for a general audience aged 13 and older and is not directed to children under 13. An adult-content filter is enabled by default, and a parental PIN is available. Because the App plays content from a source you supply, you are responsible for supervising its use by minors in your household.

8. Data retention & deletion

All App data is stored on your device for as long as the App is installed. You are always in control:

• Remove a source, favorite, or setting at any time within the App.
• Clear the App's data through your device's system settings.
• Uninstalling the App permanently deletes all locally stored data, including your saved credentials.

Because we do not hold your data on our servers, there is no server-side copy for us to retain or delete.

9. Security

Credentials are stored using your operating system's protected secure storage. No method of storage or transmission is perfectly secure, and the security of your IPTV account also depends on your provider and your own device security (passcode, up-to-date OS). Please keep your device and provider account protected.

10. Your rights & international users

Depending on where you live, you may have rights to access, correct, or delete personal data a company holds about you (for example under the GDPR or CCPA). Because Cresta does not collect or hold personal data about you on our systems, the most complete way to exercise these rights is directly on your device, as described above. If you believe we hold any information about you, contact us and we will respond.

11. Changes to this policy

We may update this policy as the App evolves. When we do, we will revise the “Last updated” date above and, for material changes, provide notice within the App or on this site. Continued use of the App after an update means you accept the revised policy.

12. Contact us

Questions about privacy? Email privacy@playcresta.com — we're the team behind the Cresta and CrestaXR apps, and we'll respond as promptly as we can.