klipa

Privacy Policy

How Klipa handles local data and network access.

Effective date: 2026-06-02

Klipa is a free IPTV player — no ads, no account, no tracking of what you watch.

Overview

Klipa is a local-first media player for user-supplied playlists and stream URLs. The app is designed to keep playlist management on the device wherever practical.

Data Stored On Device

The app stores the following information locally:

  • imported playlist sources
  • parsed channel metadata
  • favorite channels
  • appearance settings
  • playback settings
  • user-supplied request headers attached to playlist sources

This information is stored in the app's local database and settings files on the device. The app does not require an account to use these features.

Network Access

The app may make direct network requests when you:

  • import a playlist from a remote URL
  • import an Xtream-style source
  • play a channel stream
  • load channel-logo artwork referenced by playlist metadata

These requests are sent directly from your device to the URL or host involved in that action. The channel stream itself is not proxied by Klipa. The optional TV-pairing and programme-guide features use Klipa's server as described below.

TV Pairing

TV pairing is optional. When you choose a playlist on your phone and enter the code shown on the TV, the app sends the selected source to klipa.tv over HTTPS so the TV can import it. For an M3U source, this payload can include the playlist URL and custom request headers. For an Xtream source, it includes the server URL, username, and password.

The pairing payload is held only in server memory. It is deleted when the TV claims it, or no later than 60 seconds after the phone sends it if it is not claimed. An unused pairing code expires after five minutes. Payload contents are not written to the application log or database.

Programme Guide (EPG)

Showing “what’s on now” is an optional feature that is turned off by default. When you enable it, the app sends the EPG (programme-guide) URL associated with your playlist to Klipa’s server at klipa.tv, which fetches the guide on your behalf and caches the resulting schedule so the app can look up programme titles quickly.

For Xtream-style playlists, that EPG URL contains your IPTV username and password in its query string. Enabling the feature therefore transmits those credentials to klipa.tv, where the URL is stored so the cached guide can be refreshed. The URL travels in the request body rather than the path, so it is not written to the web-server access log, but it is persisted in the EPG cache database.

You can turn the feature off again at any time in the app’s settings. The app shows this disclosure and asks you to confirm the first time you enable it.

Web Tools On klipa.tv

The website at klipa.tv hosts free tools — for example, an M3U playlist tester and an EPG validator — that fetch URLs you paste into them and report the result. When you submit a URL or Xtream credentials to one of these tools, the request is handled by Klipa's own server, which then makes an outbound HTTPS request to the URL you supplied.

Specifically:

  • Outbound requests identify themselves with the user agent Klipa-Tools/1.0 (+https://klipa.tv/tools/) so that providers can recognize and, if they choose, block the traffic.
  • The URL, credentials, and any other input you paste into a tool are not written to any log or database. The server records only that a tool request happened (timestamp, source IP, result code) — the same shape of log the rest of the site emits.
  • Tool requests are rate-limited per source IP. The credential checker is more tightly limited than the URL-only tools.
  • The server refuses to fetch URLs that resolve to private, loopback, link-local, or cloud-metadata IP ranges.

Web Analytics

klipa.tv does not embed Google Analytics, Meta Pixel, or any third-party analytics SDK. There is no JavaScript tracker on any page.

Aggregate page-view counts are derived server-side from the web server's access logs and rolled up daily into per-page, per-referrer-domain, per-country totals. Country is derived from the IP using an offline lookup database; the IP itself is not persisted in the rollup. This is used to understand which articles are read and which "Get Klipa" links are clicked, and for nothing else.

Click-through to the app stores is measured by a small redirect endpoint at klipa.tv/r/<store> that 302s to the real store URL. The redirect itself appears in the access log; no other tracking is attached.

Data Sharing

The app does not sell your personal data.

The app does not operate an account system, analytics backend, advertising SDK, or subscription backend in the current build.

Because the app fetches user-supplied playlists, streams, and artwork directly, the third-party hosts referenced by those sources may receive normal request information from your device, such as your IP address and user agent, as part of the network connection.

Data Collected By The App Operator

Apart from source details that you explicitly send through optional TV pairing or EPG, as described above, the app operator does not intentionally collect:

  • account data
  • payment data
  • precise location data
  • analytics events
  • cloud-synced watch history
  • cloud-stored playlist libraries

If this changes in a future release, this policy should be updated before the changed behavior is published.

User Responsibility

You are responsible for the playlists, credentials, channels, and stream sources you choose to import into the app, and for ensuring your use of them is lawful in your jurisdiction.

The app is a player tool. It does not provide IPTV service, sell subscriptions, or include built-in channel access.

Data Retention And Deletion

Locally stored playlist and settings data remains on the device until you remove the relevant playlist sources, clear app data, or uninstall the app.

TV-pairing payloads follow the short in-memory limits described above. An EPG source URL and its cached schedule remain in the EPG database so the guide can be refreshed. Turning EPG off stops the app from using that feature but does not remotely delete the server copy. To request deletion of an EPG source URL, email hello@klipa.tv with the URL you want removed.

Children

This app is not specifically directed to children.

Changes To This Policy

If the app's data practices change, this policy should be updated and the public URL refreshed before the updated release is submitted.

Contact

Support contact: hello@klipa.tv