The short version. Using Theia needs no account. Only Premium buyers get one, to manage their license. Your provider logins, playlists and viewing history stay on your PC. Streams go directly from your provider to you. Theia sends no crash reports and no usage statistics today: the switches are there, and off, until there is something behind them. The waitlist keeps your email only to tell you when Theia is ready.
This policy covers the Theia app for Windows and the website at theiaplayer.com. If anything here is unclear, email privacy@theiaplayer.com.
Who is responsible
Theia is made by [OWNER LEGAL NAME OR COMPANY], referred to here as “we”. Contact: privacy@theiaplayer.com. [POSTAL ADDRESS, IF REQUIRED]
What stays on your PC
These things are stored only on your computer and are never sent to us:
- Your sources: playlist links, Xtream server addresses, usernames and passwords. Passwords are encrypted with Windows data protection (DPAPI).
- Channel lists, guide data, posters and other data downloaded from your sources.
- Favorites, watch history, resume points, searches and settings.
- Log files, stored in your Windows user folder. They leave your PC only if you attach them to a problem report.
Network connections the app makes
- Your sources. Theia connects directly to the providers and servers you add. We never see those streams, addresses or logins.
- Update check. Theia asks theiaplayer.com whether a newer version exists. The request includes the app version. Like any web request it reveals your IP address to our host, Cloudflare. We don’t store it.
- Sports schedule. If the sports schedule feature is on, Theia downloads public schedules from a third-party sports data service (currently ESPN’s public scoreboard). Your IP address is visible to that service. You can turn this off in Settings.
- Your own routing server. If you set up WireGuard or proxy routing, Theia’s connections pass through the server you choose.
- License check. If you use a Premium license key, Theia occasionally downloads a public list of revoked keys. Nothing about you is sent.
Crash reports and usage statistics
Nothing is sent today. Settings > Privacy has switches for Crash reports and Anonymous usage statistics. Neither sends anything: no crash reporting service is connected, and no statistics are uploaded. Errors stay in the log files on your PC.
What the switches will send once they work. A crash or unexpected error will send the Theia and Windows version, processor type, graphics card and driver, display settings, a random ID created when Theia was installed, and technical details of the error (the code location and recent app events). For crashes inside Theia’s video engine, that may include a snapshot of Theia’s memory at the time of the crash. Before anything is sent, Theia removes sign-ins, server and playlist addresses, provider and channel names and IP addresses from the report text. Usage statistics will be a daily count of which features were used and whether playback worked. They carry no ID and we will keep no IP addresses, so they can’t be linked to you.
What we never collect. Your sign-ins or passwords, playlist or server addresses, provider names, channel names, what you watch or search for, or your license details.
Why, and our legal basis. To find and fix bugs and decide what to improve.
- EU/EEA and Switzerland: we ask first and only send with your consent (GDPR Art. 6(1)(a)). You can withdraw it at any time in Settings > Privacy.
- United Kingdom: crash reports are on by default because they’re used to detect and fix technical faults, and usage statistics because they’re aggregate statistics used to improve Theia (PECR Schedule A1). Our legal basis is legitimate interests (UK GDPR Art. 6(1)(f)), and you can object at any time by turning them off.
- Everywhere else: on by default. Turn them off at any time in Settings > Privacy.
Who receives it, and for how long. Nobody, because nothing is sent. Before the first release that sends anything, this page will name the processor, where the data is stored and how long it is kept, and the release notes will point at it.
Problem reports
When you choose Report a problem, Theia builds the report and shows it to you. It contains app and system details, recent log lines with logins, addresses and channel names removed, and your email if you add one. Theia cannot send it yet. You save or copy the report and email it to support@theiaplayer.com, so nothing leaves your PC unless you send it. Before sending from the app is switched on, this page will say where reports are stored and for how long. Support emails are kept for [2 YEARS] so we can follow up on repeat problems.
The waitlist
If you join the waitlist, we keep your email address, the platforms you picked and, if you answered, what you use to watch today. We use your email only to tell you when Theia is available and about major releases, and your answers only to decide what to build next. The legal basis is your consent. Form data is stored by [Tally (EU) or Cloudflare D1, whichever is in use]. We delete waitlist details 6 months after the launch email unless you ask to hear more. Unsubscribe any time, or email privacy@theiaplayer.com to have your details deleted.
Purchases
[TO COMPLETE BEFORE PREMIUM GOES ON SALE: name the checkout provider and where license data is stored.] Premium is bought on theiaplayer.com. Payment is handled by our checkout provider, and we never receive your card details. We receive your email address, a license ID, the purchase date and your country for tax purposes.
Your license page. Buying Premium gets you a license page. You sign in with a one-time link sent to your email, so there is no password. It stores your email address, your license key, and a list of the PCs using it (a random ID for each PC, a name you can change, and when it was last seen). You can remove a PC there. We keep this data for as long as you have the license, and delete it on request. The free version of Theia never needs an account.
If Theia is ever sold through an app store, that store is the seller for those purchases and handles payment itself.
The website
theiaplayer.com carries no advertising and no tracking, and most pages set no cookies. The license page is the exception:
- Signing in sets a cookie. It holds a random token and nothing about you, and signing out clears it.
- The sign-in form loads Cloudflare Turnstile from challenges.cloudflare.com, to check you are not a robot. Turnstile sees your IP address and may set its own cookie. It is run by Cloudflare, Inc.
We may use Cloudflare Web Analytics, which counts page views without cookies and without identifying visitors. Fonts are served from our own site, so no font service sees your visit.
Security
Connections to our services use HTTPS. Provider passwords on your PC are encrypted by Windows. Problem reports are scrubbed before they leave your PC.
Your rights
You can ask to see, correct or delete personal data we hold about you, and you can withdraw consent at any time. Email privacy@theiaplayer.com. We reply within one month. You can also complain to your data protection authority (in the UK, the ICO).
California and other US states. Categories: the device and app details in a problem report you send us, and email addresses you give us. Purpose: fixing and improving Theia and telling you about it. Retention: as above. We don’t sell or share personal information.
International transfers
We are based in the United States. Where data moves between countries, it is protected by the processors’ standard contractual clauses.
Children
Theia is not directed at children under 13, and we don’t knowingly collect their data.
Changes
If this policy changes, the new version will be posted here with a new date. Significant changes will also be mentioned in the app’s release notes.