Prism — Privacy policy

Last updated: 8 October 2026

Publisher: Leutrim. Privacy and support contact: dev2@leutrim.ch.

This policy describes Prism, the playlist player available for Android and iOS. It also explains the differences when Prism is used in a browser or on a supported TV. Prism does not require you to create a Prism account.

Our privacy approach

Prism keeps your personal library and preferences on your device. The publisher does not operate a Prism advertising-profile or behavioral-analytics service, and no standalone advertising or crash-reporting SDK is configured in the application. Prism does not automatically upload your playlists, favorites or viewing history to a Prism cloud account, and the publisher does not sell that information or use it to build advertising profiles. Platform and bundled-library processing is described below.

This does not mean that nothing is stored or transmitted. Local storage is needed to remember your setup, and network requests are needed to obtain playlists, metadata and streams. Those requests reach the services supplying the content.

What stays on your device

Prism stores the following in local application or browser storage:

Playlist addresses and provider connection details, including usernames, passwords or access tokens when you enter them.
Favorites, watchlists, custom lists, playback queues, saved multiview layouts and Home-screen preferences.
Viewing progress and history used for Continue Watching and resume playback.
Interface settings, playback preferences and optional metadata API credentials.
Downloaded catalog entries, programme-guide information, artwork or metadata caches, where used.

These records are used to provide the features you select. They remain until you remove them, clear the relevant data or the application/browser replaces or evicts a cache. Device backups may retain copies according to your operating system and backup settings. Updating Prism normally preserves your setup.

Local application storage benefits from the device's normal application protections. Prism does not represent that all stored values or exported files are separately encrypted.

Connections to content and metadata services

When you refresh a playlist or play content, Prism connects to the playlist, programme-guide, streaming and image services involved. A remote service can receive your IP address, requested URL or content identifier, request headers and the credentials necessary to access that service. Credentials contained in a URL are part of the request sent to its destination. Redirected requests may reach another service used by that provider.

The current application includes an optional Free IPTV catalog assembled from public listings and broadcaster links. Loading it contacts catalog hosts, including GitHub/GitHub Pages and the public sources described in the Content and Copyright Notice. Playing a listed channel contacts its streaming and related media hosts. Public availability does not establish that a service retains no data.

If you configure the optional movie-information features, title or identifier searches and the applicable API credentials are sent to TMDB or OMDb. These services and their image hosts supply ratings, descriptions, cast or artwork. Prism does not send your complete personal library to them as a cloud backup.

The providers, hosting services and metadata services operate under their own privacy policies and terms. Their logging, advertising, retention and international data handling are outside the publisher's direct control. You can disconnect personal playlists, disable Free IPTV and remove optional metadata credentials to stop the associated features making new requests.

Web versions and optional media relays

The standalone Android and iOS clients contact providers directly for their catalog requests. Browser deployments may use the server belonging to that deployment to relay playlist, metadata or media requests. Such a server receives the request information it forwards, which may include private URLs and credentials. Compatibility playback may create temporary media segments and session records on that server.

The reference Prism server has temporary playback caches; it is not a promise that every deployed server has no logs or retains nothing. Website hosting, reverse proxies and relay operators may also process connection information. Before using a hosted Web/relay service, consult the operator's privacy notice for its identity, hosting location, retention and deletion practices. This policy does not assert that an unidentified hosted service is operated by the Prism publisher.

When you choose to export a configuration or playlist, Prism creates a file and uses the device's save or share facilities. Configuration files can contain provider passwords, access-bearing URLs and other private setup information. Prism's JSON backup format does not encrypt these exports.

You select where the file is saved or to whom it is shared. The receiving app, cloud-storage service or recipient may retain it under their own policies. Do not share credentials or content links unless you have permission. Playlist export saves links and playlist information; it does not download the linked television programmes or movies.

Support and platform services

If you voluntarily email support, the publisher and the email service receive your email address, message and any attachments you send. This information is used to respond to the request, investigate the problem and meet applicable legal obligations. Support correspondence is retained only for as long as needed for those purposes and then deleted, unless a legal obligation requires further retention. Please avoid sending passwords, complete private playlist URLs or unredacted backups. You may request deletion of support correspondence using the contact above, subject to applicable legal requirements.

The Android player bundles Google Cast libraries, although Prism currently disables its Chromecast feature. Google's documentation describes Cast SDK processing of discovery/session events and device/app information for service improvement. Google determines that processing and retention. This policy does not promise that a disabled feature removes every bundled SDK's processing. See Google's Cast data disclosure and Google's Privacy Policy. Provider, SDK and operating-system processing must be considered separately from Prism's local library.

Apple, Google, Samsung, your operating system and their distribution/testing services may process installation, store or diagnostic information under their own policies and your device choices. If you send TestFlight feedback, you intentionally share the selected feedback and diagnostics through Apple's testing service. These platform processes are separate from Prism's local library storage.

Your controls and deletion

Use playlist management to remove personal connections or disable a source. Free IPTV can be disabled.
Use the history and queue controls to remove saved progress or queue entries, and the list controls to edit your favorites and lists.
Use Clear cached data to remove regenerable catalog and rating caches. This action preserves playlists, favorites, history, lists, queue and settings.
Reset settings to defaults resets preferences; it does not erase your personal library.
To erase all local application data, use the operating system's application-data removal facilities where available, or fully delete the application. Offloading an app or restoring a device backup may preserve its data. For Web use, clear the site's browser storage.
Delete exported files and backup copies separately. Removing information from Prism does not delete records held by a provider, recipient, email service or operating-system backup service.

The publisher cannot remotely retrieve or erase library records that exist only on your device. There is no Prism cloud account to delete. Requests concerning a separate provider account should be directed to that provider.

Security and international processing

Prism supports both HTTPS and HTTP content sources. HTTPS protects requests in transit to the destination; HTTP does not. Use HTTPS where your provider supports it, protect your device and backups, and enter credentials only for sources you trust. No security measure guarantees absolute protection.

Third-party services may process requests in countries other than your own. Their privacy notices explain their safeguards. For support correspondence, the publisher relies on the purpose of responding to your request, legitimate interests in supporting and maintaining Prism, and applicable legal obligations; where consent is required, it must be obtained for the relevant processing. This does not establish a legal basis for an independent provider's processing.

Where applicable law gives you rights concerning personal information handled by the publisher, you may request access, correction, deletion, restriction or portability, or object to processing. Consent-based processing can be stopped by withdrawing consent, without affecting prior lawful processing. These rights depend on the applicable law and circumstances. You may raise concerns with the relevant supervisory authority, including the Swiss Federal Data Protection and Information Commissioner or your local authority.

Children and changes

Prism is a general-purpose player, not a service designed to collect children's information or a curated children's catalog. Parents and guardians should supervise the sources and content accessible to children. Provider content, advertisements and age restrictions vary.

This policy may be updated when the application or its practices change. The date above identifies this version. Material new processing should be explained before it begins, with consent where required by law. Privacy questions may be sent to dev2@leutrim.ch.