QR onboarding
The TV requests an anonymous session with a random public QR token and a separate polling credential. The database stores SHA-256 hashes of these credentials, a random session ID, status and timestamps. We do not request a phone number, email, precise location, device serial number or MAC address for setup.
What the link does
When the unique setup link is opened, the server marks that session scanned. The TV checks the status using its separate credential, stores completion locally and enters the app. The link is not an account sign-in and does not authorize access to any content-provider account.
Expiry and retention
Pending links expire after 15 minutes. Session records are scheduled for deletion 48 hours after expiry. A timely confirmation can still be retrieved when a TV resumes before cleanup. Actual cleanup depends on the hosting scheduler being configured.
Support messages
If you submit the support form, we store the name, email, subject and message you provide so the support team can review your request. These records are scheduled for deletion after 30 days. Do not include passwords, account codes or sensitive personal details.
Cookies and server information
The website uses essential session cookies and a security token for forms. No third-party analytics or behavioral tracking is included. The host may record IP addresses, request paths, browser details and security events in standard server logs. The operator should redact setup-token paths and set an appropriate log-retention period.
Local app data and other services
The TV stores setup completion and, while pending, session credentials locally. Clearing app data resets setup. Content playback, account services, SponsorBlock and DeArrow may connect to their respective providers and are governed by those services’ practices.
Questions or deletion requests
Use the Support page for privacy questions or requests about a support message you submitted.