Best IPTV Player

Privacy Policy

Effective date: 24 September 2026

1. Who we are

Best IPTV Player is developed and published by Abdulbaki Erbaş (Best Yazılım, Turkey), who is the data controller. Contact: iletisim@bestyazilim.com.

This policy covers the iPhone, iPad, Apple TV, Android phone, tablet and Android TV versions of the app and this website.

2. How the app works

Best IPTV Player is a player; it does not offer any content, channel lists or streams. Everything you watch comes from the source you add (an Xtream Codes account, an M3U URL, an optional XMLTV URL). Stream requests go directly from your device to your service’s servers; we do not see this traffic and do not act as an intermediary. Whatever your service collects about you is governed by that service’s own privacy policy.

You can use the app without creating an account.

3. If you use the app without an account

We do not collect any personal data. Your playlists, favorites, watch history, playback positions and settings stay on your device only. Playlist passwords are kept in the device’s secure storage (the Keychain on Apple devices, encrypted storage on Android). The diagnostic log kept on the device masks credentials and only reaches us if you share it with us for support.

4. If you create a Best IPTV account

Accounts run on Google Firebase (Sign in with Apple, Sign in with Google, or email and password). The following is stored under your account:

  • Identity: your email address, your account ID and, if the sign-in provider supplies it, your name — to recognize your account.
  • Playlists: name, URL, username and your service’s password — to bring your playlists to your other devices.
  • Preferences: your favorites, the channels and groups you have hidden or locked, your watch progress, My list and your settings — for syncing.
  • Device records: device name, type, model, app version, when it was last seen and which devices have Premium enabled — to manage the 5-device allowance.
  • Subscription record: store (Apple or Google), product, expiry date and the store’s transaction ID — to verify Premium. We never see your card details.
  • Sign-in codes: the short codes created for signing in on a TV with your phone are valid for at most 10 minutes.

About playlist passwords: For syncing to work, these passwords are stored on the server. Security rules ensure that only your account can access them, but they are not end-to-end encrypted. If you don’t want this, use the app without an account.

5. What we do not collect

We do not collect location, contacts, photos, microphone or camera data. We do not collect usage analytics or crash reports. There are no ads; the advertising identifier is not read and we do not track you. We do not sell your data.

For AirPlay and Chromecast, the app looks for devices on your local network; this search happens on your device and the results are not sent to us.

Data is processed only to make the app work: sign-in, syncing, Premium and the device allowance, and preventing abuse. Under the Turkish Personal Data Protection Law (KVKK) and the GDPR, the legal basis is providing the account service (performance of a contract) and our legitimate interest in security.

7. Where data is stored and who it is shared with

Account data is stored in Google Cloud Firestore, in the European Union region; Google processes data on our behalf (Firebase privacy information). Payments are taken by Apple and Google and are governed by their privacy policies. Apart from these, we do not share your data with anyone.

8. Retention and deletion

We keep your data for as long as your account exists. You can delete your account in the app (Settings → Account → Delete account) or by writing to iletisim@bestyazilim.com; we fulfill email requests within 30 days. Google removes deleted data from its backups within 180 days. Uninstalling the app deletes the data on the device; to remove the data in your account, you need to delete the account. Details: Delete account.

You can write to us to exercise your rights of access, rectification, erasure, objection and portability under the Turkish Personal Data Protection Law (KVKK) and the GDPR.

9. Children

Because the app can play unrestricted content from the sources users add, it is intended for adults and does not knowingly collect data from children. If you become aware that a child has sent us data, write to us and we will delete it.

10. Website

This website (bestiptv.bestyazilim.com) is hosted on Cloudflare and measures visitor numbers with Cloudflare Web Analytics. This measurement does not use cookies, stores nothing on your device, collects no personal data and does not track you across sites; we only see aggregate figures such as page views, referring sites, countries and browser types. The site has no ads and no other tracking tools.

11. Changes

If we change this policy, we will update this page and its effective date; we will announce significant changes in the app.