Privacy Policy
Effective October 29, 2026
In short: TV Browser is a player. We keep only what is needed to run your account, your subscription and your screens. We do not sell data, show ads or use advertising trackers. Your card details go to Stripe, not to us.
Who we are
TV Browser is operated by CoworkRunner LLC ("we", "us"). For any privacy question, write to support@coworkrunner.com.
What we keep
| What | Why | How long |
|---|---|---|
| Email address and password (the password is stored only as a salted hash, never as text) | Signing in, and contacting you about your account and billing | Until you delete the account |
| Subscription state: Stripe customer and subscription IDs, status, next billing date | Knowing whether your subscription is active | Until you delete the account |
| A record of the emails we sent the account: which kind and when (not the message itself) | Sending each email once, and showing that a notice the law requires was sent | 3 years, or until you delete the account |
| A marker that an email address or a card already had a free trial, stored only as a keyed hash: not the address itself and not the card number (the card is recognized by a fingerprint Stripe provides) | One free trial per person, and preventing abuse | Kept after the account is deleted, so a second trial is not given |
| Sources you add: playlist and program guide addresses, and Xtream login details (server, username and password) if you add them | Showing your channels on every screen signed in to your account | Until you remove the source or delete the account |
| Screens signed in to your account: a random device ID, browser and device type, the browser's user agent string, approximate location at state or region and country level derived from your IP address, and first and last use | Listing your screens, support, and preventing abuse | Up to 365 days after a screen was last used, or until you delete the account |
| Account activity log: sign-up, subscription changes, screen sign-ins, password changes, and actions we take on the account | Support, accounting and security | Up to 2 years, or until you delete the account |
| TV sign-in codes | Signing in on a TV without typing a password | Expire after 10 minutes, deleted within a day |
| Performance numbers from the TV app: a random install ID, app version, TV maker and model, and times for launch, channel change, remote response, freezes and recovery | Making the app faster and more stable. These numbers are not linked to your account | 180 days |
| Rate limiting: a one-way hash of your IP address, never the address itself | Protection against password guessing and floods | Minutes, up to one day |
We do not store your IP address in our database, and we do not record what you watch, which channel, or for how long.
What stays on your device
The player keeps your sign-in key, settings, favorites, last channel and a copy of your channel lists and program guide on the device itself, so everything opens fast. You can erase all of it with Clear all data in Settings, or by signing out and clearing the site's data in your browser.
Your video and your lists
Video plays straight from the provider you chose to your device and never passes through our servers. When a provider blocks a browser from reading a channel list or program guide directly, our server reads only that text file for you and passes it on. We do not keep it, apart from a temporary copy of up to 5 minutes in Cloudflare's cache. Channel logos load from the addresses inside your list, so those servers, like the video servers, see your device's IP address.
When our server reads a list for you, the list's full address passes through it, including your provider username and password if they are part of the address. We do not keep it beyond what the table above lists.
The phone app and your TV at home
The phone app connects to your TV directly over your home network. Remote key presses, text you type for the TV and channel lists you send to it travel encrypted between the two devices, not through us. The camera is used only to read a QR code; the image is not saved or sent. The phone app does not send performance numbers.
Payments
Payments are handled by Stripe. You give your card number and payment details to Stripe directly, and they never reach us. Stripe keeps payment records as the law requires, under Stripe's privacy policy.
Other companies' services we use
- Cloudflare: hosting for the website, the server and the database. Cloudflare processes your IP address to deliver requests and protect the site.
- Stripe: payments and subscriptions.
- Resend: sending the account and subscription emails (welcome, reminder before a charge, failed payment, cancellation). Resend receives your email address and the message to deliver it.
- Google Fonts: the website loads its fonts from Google, so Google receives your browser's IP address. The apps use fonts built into them.
- Facebook: only when you open a video in the Facebook tab does Facebook's player load, and Facebook may collect data under its privacy policy. Likes and comments happen on your phone, in your own Facebook account.
- Updates: the TV app installed directly (not from a store) checks tvbrowser.app once a day for a new version.
- App stores (the App Store, and later Google Play and Amazon) when you download an app from them, under their own terms.
We do not sell personal information or share it for advertising. We disclose information only when the law requires it, or to protect the service and its users from fraud and abuse.
Your rights
- Deletion: the Account page has Delete account. It cancels your subscription right away and erases your account, screens, sources and activity log from our database. Backup copies are erased within one month. Payment records stay with Stripe as the law requires.
- Access, correction and a copy of your data: write to support@coworkrunner.com and we will answer within one month. You can also change your password yourself on the Account page.
- If you live in the European Union, the United Kingdom, or a US state with a privacy law (California, for example), you also have the rights that law gives you, including the right to complain to a data protection authority. Our legal basis for using your data is performing our agreement with you, and for performance and security data, our legitimate interest in keeping the service fast and safe.
Security
All traffic is encrypted (HTTPS). Passwords are stored only as salted hashes. In the apps, your sign-in key is kept in the device's secure storage. No method is perfectly secure; if a security incident affects you, we will tell you as the law requires.
Children
The service is for adults aged 18 and over. We do not knowingly collect data from children under 13. If you learn that a child gave us data, write to us and we will delete it.
International transfers
Data is kept with Cloudflare, Stripe and Resend, who may process it in the United States and other countries under the safeguards they are bound by.
Changes
If we change this policy in a material way, we will tell you by email or on the site before the change takes effect. The date at the top shows when it was last updated.