Privacy Policy

1. Data Controller

The data controller for personal data is the publisher of the Nyx Player application, identified in the legal notices.

2. Data Collected

The following data is collected through use of the Application:

• Email address — for account creation and management
• Interface preferences — language, homepage, display mode, DNS, playback settings
• Watchlist — movies and series saved by the user
• Playback progress — playback position, audio/subtitle preferences per content
• Live TV Bookmarks — saved favorite channels
• Hidden categories — content categories hidden by the user
• App usage data — app version, platform, and last login date (collected once per login for internal usage statistics only)

Nyx Player does not collect any browsing data, cookies, advertising data, or biometric data.

3. Legal Basis

• Consent — the user accepts the Terms upon registration
• Contract performance — data is necessary for service operation (sync, preferences)

4. Purpose of Processing

Data is used exclusively for:

• User account management (authentication, security)
• Cross-device data synchronization
• Proper functioning of the Application (preferences, progress)

No data is used for commercial, advertising, or profiling purposes.

5. Data Storage

Data is stored in two ways:

• Locally — in a SQLite database on the user's device (primary source)
• In the cloud — on Supabase servers (PostgreSQL hosted by AWS, EU region) for synchronization

The local database is the source of truth. The cloud serves as backup and sync.

6. Technical Sub-processors

The following technical providers participate in data processing:

• Supabase Inc. — authentication and cloud storage of user data
• Vercel Inc. — website hosting (legal pages, auth redirects) and anonymous web analytics
• Resend Inc. — transactional email delivery (confirmation, password reset)
• Ko-fi Labs Limited — voluntary donation platform (payment page hosting)
• Stripe Inc. — payment processing for donations (credit card, Apple Pay, Google Pay)

These providers act as sub-processors and are bound by confidentiality and security obligations.

7. Data Retention

• Account data — retained as long as the account is active
• Deletion — all data is deleted upon account deletion (cloud and local)
• Local data — deleted upon logout or uninstallation

8. Your Rights (GDPR)

Under the General Data Protection Regulation (GDPR), you have the following rights:

• Right of access — obtain a copy of your personal data
• Right to rectification — correct inaccurate data
• Right to erasure — request deletion of your account and all associated data
• Right to portability — receive your data in a structured format
• Right to object — object to the processing of your data
• Right to withdraw consent — withdraw your consent at any time

To exercise these rights, contact us at: contact@nyxplayer.app

You can also delete your account directly from the Application (Settings → Account → Delete my account).

9. Cookies & Website Analytics

Nyx Player is a desktop application. No cookies are used.

The nyxplayer.app website uses Vercel Web Analytics to collect anonymous, aggregated statistics (page views, country of origin, browser type). This service does not use cookies, does not collect personal data, and does not track visitors across websites. Visitor identification is based on a temporary hash that expires after 24 hours.

10. Data Transfers

Data may be transferred outside the European Union through technical sub-processors (Supabase, Vercel, Resend, Stripe — US-based companies; Ko-fi — UK-based). These transfers are governed by the European Commission's standard contractual clauses.

11. Security

The following security measures are in place:

• Secure authentication via JWT (Supabase Auth)
• Row Level Security (RLS) policies on all cloud tables
• IPTV credential encryption via the OS Keychain
• HTTPS-only communications

12. Contact

For any questions regarding the protection of your personal data, contact: contact@nyxplayer.app

In case of an unsatisfactory response, you may file a complaint with the CNIL (French Data Protection Authority).