1What the App Is
The Xtream-Masters Player is an Android media-player application. It plays HLS, DASH, MP4, MKV, MP3, and other standard media formats from URLs that you supply. The App ships with no preloaded channels, no curated content list, no built-in directory of providers, and no sample playlists. The first time you open the App, every input field is blank and stays blank until you fill it in.
The App is a software tool. It is not a content service, not a broadcaster, not an aggregator, and not an account provider.
2You Bring Your Own Content
To play anything you need to enter your own:
- Provider URL plus username and password (panel-style login), or
- An M3U / M3U8 playlist URL, or
- A single direct stream URL.
You alone are responsible for ensuring that whatever you point the App at is content you have the legal right to play under the laws of your country, including copyright, broadcast, and licensing law. Xtream-Masters does not supply, host, recommend, endorse, or have any relationship with any specific provider, server, or playlist.
3Data Stored on Your Device
The App keeps the following items in app-private storage on the device. Other apps on the same device cannot read this data.
Saved Profiles
Provider profiles you create with the in-app "Users List" feature so you can switch between accounts.
Playlist URLs
Any M3U or single stream URL you choose to save for one-tap return.
VPN Configurations
OpenVPN .ovpn, WireGuard, IKEv2, and proxy configurations you import yourself.
Preferences
Theme, language, default external player, parental control PIN, EPG schedule.
Cached Metadata
Posters and episode listings fetched from the provider you supplied, cached so the App opens fast next time.
Continue Watching
Resume positions for streams you have played.
To delete all of this in one step go to Android Settings → Apps → Xtream-Masters Player → Storage → Clear data, or simply uninstall the App. There is no off-device copy to retrieve.
4What We Do NOT Collect
We do not transmit to Xtream-Masters or any third party (other than the limited services listed in section 5):
- Your provider URL, panel URL, M3U URL, or any individual stream URL.
- Your username or password for any media provider.
- The titles, channels, episodes, or programmes you watch.
- Any VPN configuration files, OpenVPN credentials, WireGuard keys, IKEv2 logins, or proxy credentials you import.
- Your parental control PIN.
- Your contact list, photos, or location.
- Your IP address — the App connects directly to whatever URL you supplied; we never see that connection.
5Third-Party Services
The App uses a small number of Google services and one optional metadata service. Each is described below with the data it actually receives.
Firebase Crashlytics
Anonymous crash reports — stack trace, device model, OS version, App version, locale. Never includes credentials, URLs, or watch history. Provider: Google LLC.
Firebase Remote Config
Lets us push branding values (logo URL, theme color, app version metadata) without releasing a new APK. Sends an anonymous Firebase Installation ID. Provider: Google LLC.
Firebase Cloud Messaging
Optional update notifications. Sends an anonymous registration token. Provider: Google LLC.
The Movie Database (TMDB)
If your provider configuration includes a TMDB key, the App sends the title of what you are about to play to TMDB to fetch a poster image. Disabled if no TMDB key is configured.
The App does not bundle any advertising SDKs, social-network SDKs, attribution trackers, or fingerprinting libraries.
6The In-App VPN
This is the part that confuses people, so we will say it plainly: Xtream-Masters does not operate, sell, or recommend any VPN service. The App contains zero preloaded VPN endpoints. We have never bundled, hosted, or distributed a VPN configuration of our own.
What is included is the standard Android VPNService client code, plus support for OpenVPN, WireGuard, IKEv2, and SOCKS / HTTP proxy protocols. So if you have a VPN configuration from a provider you trust, or you run your own VPN server at home, you can drop the configuration file into the App and it will use it.
Two things matter about how it works:
- The tunnel is per-application. Only the App's traffic is routed through it. Your other apps and your phone's general internet connection stay on your normal network path.
- You can disable the VPN at any time, from inside the App or from Android Settings → Network & Internet → VPN.
The intended use case: many self-hosted media servers require IP whitelisting. Routing only this App through a known IP saves you from forcing every app on your device through a VPN you may not want device-wide.
7Permissions
- INTERNET, ACCESS_NETWORK_STATE, ACCESS_WIFI_STATE — stream playback and connectivity detection.
- WAKE_LOCK — keeps the screen alive during playback.
- FOREGROUND_SERVICE_MEDIA_PROJECTION — required by Android only while the in-app screen recorder is running, to keep the recording service alive.
- RECORD_AUDIO — used only when you explicitly start the in-app screen recorder, to capture audio with the recording. Microphone is never accessed for any other reason. Recording is never started automatically.
- READ_EXTERNAL_STORAGE / WRITE_EXTERNAL_STORAGE — reading playlist (
.m3u) and subtitle (.srt) files you select via the system file picker, and saving downloads to a folder you choose. - BIND_VPN_SERVICE — required by Android to set up the per-app VPN tunnel described in section 6.
8Screen Recording & Microphone
The App includes an optional screen-recording feature that lets you capture what you are watching, with audio. This feature is off by default and never starts on its own. The microphone permission is used only while you have explicitly started a recording. The recording is saved to your device storage. We do not receive a copy.
9Acceptable Use
Use the App with content for which you hold a valid licence, subscription, or other lawful right. Do not use the App to access, distribute, or facilitate access to copyrighted material without authorisation. Adult-rated categories are gated behind an in-app parental control PIN that you set; if you share your device with a minor it is your responsibility to enable it.
10Children
The App is not directed to children under 13 and we do not knowingly collect data from children. The in-app parental PIN is provided for guardians who share a device with a minor.
11Your Rights
Depending on your jurisdiction (GDPR, UK GDPR, CCPA, LGPD, and similar laws) you may have the right to access, correct, port, restrict, or delete personal data we hold about you, and to object to certain processing. To exercise any of these rights:
- Email support@xtream-masters.com from the address tied to your account, or include enough information for us to verify your identity.
- For data stored only inside the App on your device, you do not need our help — clearing app storage or uninstalling deletes everything.
We aim to respond within 30 days. You also have the right to lodge a complaint with your local data-protection authority.
12Account Deletion
The App does not require you to create an account on our systems. To delete all device-local data, clear app storage or uninstall the App. To request deletion of any anonymous Crashlytics record associated with your installation, email support@xtream-masters.com with the date of installation. We will action the request within 30 days.
13No Warranty
The App is provided "as is" without warranty of any kind. Xtream-Masters is not responsible for the content, availability, accuracy, legality, or quality of any third-party stream, server, playlist, or VPN service that you choose to use with the App. If a stream goes down, a server gets banned, or a VPN configuration breaks, that matter is between you and the third party concerned.
14Changes
We may update this Player Policy from time to time. The "Last updated" date at the top of this page reflects the most recent change. Material changes will also be announced inside the App. Continued use of the App after a change is taken as acceptance of the updated policy.
Questions or Privacy Requests?
Our team is happy to help with any privacy-related question, access request, or data deletion concerning the Player.
