Last updated: October 2, 2026
1. Who we are
BraboPlayer is a Smart TV app (Roku, LG webOS and Samsung Tizen) that plays M3U and Xtream playlists provided by the users themselves, plus the website braboplayer.com, where users manage their TV playlists and activate their license. This policy explains which data we process, why, and your rights, in accordance with the Brazilian General Data Protection Law (Law No. 13,709/2018 — LGPD).
BraboPlayer does not provide, sell or host any content: channels, movies and series come from the playlists you add yourself.
Privacy contact: contato@braboplayer.com.
2. Data we process
| Data | Source | Purpose |
|---|---|---|
| App-generated device identifier, Device ID and Device Key, TV platform and model, app version, IP address and last access date | TV app | Identify your TV, manage the trial period and license, and show your playlists |
| Playlists you add: M3U URL or Xtream details (server, username and password) and playlist name | You, via the website or the TV | Deliver the playlist to your TV and load its catalog (channels, movies and series), counts and search |
| Playback history ("Continue Watching": title, image, position and duration) and favorites | TV app | Show where to resume and your favorites |
| Partner code and username used in the code login | You, via the TV | Grant the access provided by the partner |
| Name and e-mail entered at checkout, amount, status and payment date | You, via the website | Issue the PIX charge and activate the license |
| Name, e-mail, phone, message and IP address from the contact form | You, via the website | Reply to you and prevent abuse of the form |
We do not collect credit card data, documents, precise location, contacts, microphone or camera. We do not use advertising cookies or tracking tools. The website only stores a session key in your browser to keep you signed in while managing playlists.
3. Legal bases
- Performance of a contract (art. 7, V): app operation, playlists, license, history and favorites.
- Legitimate interest (art. 7, IX): security, fraud and abuse prevention, and access logs.
- Legal obligation (art. 7, II): payment records and requests from authorities.
4. Sharing
- Mercado Pago: processes PIX payments (name, e-mail and amount), under Mercado Pago's privacy policy.
- Your playlist servers: to load the catalog, the TV and our server access the playlist server you provided, using that playlist's details.
- Partners: if you signed in with a partner's code, that partner may see that your device uses their code.
- Hosting provider: where the website, API and database are hosted.
- Authorities: only when required by law or court order.
We do not sell or rent personal data. Website fonts are loaded from Google Fonts, which receives your IP address when you open the pages.
Where data is stored
The website, API and database are hosted on a server operated by Contabo GmbH, located in France (European Union). This international transfer is based on art. 33 of the LGPD, to a country with an adequate level of data protection (European GDPR rules), with the security measures described below.
5. Retention
- Device data, playlists and favorites: while the device is in use, or until you request deletion.
- Playback history: only the 30 most recent items per playlist.
- When a playlist is removed, its history and favorites are deleted immediately.
- IP address: we only keep the latest access of each device and of each contact message; technical server logs are kept briefly, for security only.
- Payments: for the period required by tax and consumer protection laws.
- Contact messages: as long as needed to handle your request; you can ask for deletion at any time.
6. Security
Communications between the TV, the website and the server use HTTPS. Data access is restricted, administrator passwords are stored hashed, and the admin panel limits sign-in attempts. No system is fully invulnerable; if an incident may put you at risk, we will notify you as required by the LGPD.
7. Your rights
At any time you may request: confirmation of processing, access, correction, anonymization, blocking or deletion of unnecessary data, portability, information about sharing, and review of automated decisions (art. 18, LGPD).
E-mail contato@braboplayer.com with your TV's Device ID (shown on the app's Lists screen). You can also remove your playlists at any time on the website (Manage Playlist) or on the TV. You may also file a complaint with the Brazilian Data Protection Authority (ANPD).
8. Children
BraboPlayer is not intended for children and does not knowingly collect data from minors. The content played comes from the user's own playlists, for which the user is responsible.
9. Changes
We may update this policy. The last update date is shown at the top of this page; important changes will be announced on the website or in the app.