Trust
Security & privacy
TabTV is a player, not a data business. Here is exactly what stays on your device, what we can and can't see, and how to wipe everything — stated honestly, with no over-claiming.
Local-first by default
Your playlists, channels, favorites, and watch history live in your browser (IndexedDB). With no account, nothing is ever uploaded — the player runs entirely on your device.
No ads, no trackers, no data sales
We don't run ad networks and we don't sell data. Product analytics is cookieless until you consent, with autocapture and session recording switched off, so input values and URLs are never scraped. You can opt out at any time.
Your stream URLs aren't logged for analytics
Playback goes straight from your provider to you whenever possible. When a relay is required (a provider serving plain HTTP to a secure page, or missing CORS), it only passes bytes through — we don't persist your credentialed stream URLs in analytics, and never sell or share them.
Encrypted cloud sync (encrypted at rest)
Optional sync encrypts a small slice — your playlist URLs plus continue-watching and history — with AES-GCM in your browser before upload. The server only ever stores ciphertext, and the key is derived from a secret kept in our host's secret store, never in the database, so a database leak alone reveals nothing readable. Your channel lists are never uploaded.
Player only — bring your own source
TabTV hosts and provides no channels or content. It's software, like a web browser or a video player; you supply your own legal M3U / Xtream provider.
Export or delete everything, anytime
Clear all local data from Settings in one click. If you signed in, you can permanently delete your synced data and account from the account menu — a hard delete, not a soft flag.
What we can and can't see
- Without an account
- Nothing leaves your device. At most we receive anonymous, aggregate product events (only if analytics is enabled). Your links never reach us.
- With an account (sync on)
- We store ciphertext of your playlist URLs and watch history, plus your email if you joined the waitlist. We do not store your channel lists or what you watch.
- We never
- Sell your data, run ad trackers, record your sessions, or log your stream credentials for analytics.
Honest about the limits: account sync is encryption at rest, notzero-knowledge. Because we hold the key-deriving secret, we could in principle derive your key. We don't — but we won't pretend it's technically impossible. We'd rather under-claim and keep your trust than over-promise and lose it.
For the formal version, see our Privacy Policy. Questions? Email hello@tabtv.app.