ALPAPLAYER
EN

Privacy Policy

Last updated: 30 October 2026 · Türkçe · 한국어

This policy explains which data the Alpa Player app (Android, Android TV, Samsung TV, LG TV, Windows, iPhone and iPad) and the alpaplayer.com website process. Data controller: Alpa Player (a non-profit project run by Alpa Yazılım), Mardin, Türkiye, e-mail: info@alpayazilim.com.

1. Personal use

When you add your own source (a playlist, a video link or a server account), this information is stored only on your device, encrypted in the device's secure storage, and is not sent to Alpa Yazılım. Your favourites, watch history and settings also stay on your device. The content you watch comes directly from the source you added to your device; it does not pass through our servers and is not recorded.

Remote list and device pairing: when you open the "Device ID" / "MAC" screen or press "Refresh lists" on the home screen, the app asks our server whether a list has been assigned to you remotely (by an institution panel or via alpaplayer.com). For this it sends a device ID generated by the app, the device model, the app version and the IP address of the connection. The device ID is not your hardware identifier: on phones it is generated randomly; on Samsung TVs (DUID) and LG TVs (LGUDID) the TV's identifier is read on the TV and converted with a one-way hash (SHA-256), so only the hash leaves the TV and the original identifier cannot be recovered from it. This data is used only for pairing, security and abuse prevention; it is not used for advertising or marketing and is not shared with third parties (except where required by law).

2. Institution use

When you sign in with an account or a device ID provided by your institution, the Alpa Player server processes: the institution code, the student / staff number and the name defined by your institution, the device ID described above, the device model, the last sign-in and last-seen times, and the IP address (for security and to validate short-lived playback links). This data is used only to provide the service, keep accounts secure and let your institution manage it; it is not used for advertising or tracking and is never sold.

3. Uploading a list via alpaplayer.com

If you upload a list to a device on alpaplayer.com, we record the uploader's IP address, the date and time, the device ID and the uploaded list / account details (encrypted), together with the version of the responsibility statement you accepted. These records are kept for at most 2 years to prevent abuse and to respond to requests from competent authorities.

4. Institution panel applications

The institution name, contact name, e-mail and phone given in the panel application form are processed only to review the application, open the panel and contact you. Alpa Player is free of charge; no payment is taken and no card or bank details are requested.

5. Legal retention records (operation and device records)

As a hosting provider, and as required by Law No. 5651 and related Turkish legislation, the following is recorded for operations carried out on the panel and alpaplayer.com: the time of the operation, institution / panel name, the user who performed it, IP address, browser information, MAC address, device ID / key, the assigned list link (URL) and access details (stored encrypted).

These records are kept for 2 years even if the related device, list, user or account is deleted or closed, and are deleted or destroyed when that period ends. Only a person authorised by Alpa Yazılım and, upon a legal request, competent authorities (courts, public prosecutors, the Information and Communication Technologies Authority, etc.) can access them; they are not used for advertising or marketing and are not shared with third parties except where legally required. They are outside the scope of deletion requests (see Data deletion).

6. Third-party services

If you do not use these services, no request is sent to them. The app contains no advertising, analytics or tracking SDKs.

7. Retention, destruction and security

Data on our servers is transmitted over encrypted connections (HTTPS); source addresses and account details are stored encrypted with AES-256. Security logs (blocked attempts, shared links) are deleted automatically after at most 90 days. App download records (the IP address, browser / device details, date and time and version of each download) are kept for at most 2 years to count downloads and prevent abuse. Legal retention records (section 5) are kept for 2 years. Institution data is kept while the institution account is open and afterwards for as long as legally required. Personal data whose retention period has expired is deleted, destroyed or anonymised in periodic destruction runs (at least every six months) in accordance with the Turkish Regulation on the Deletion, Destruction or Anonymisation of Personal Data.

8. Children

Alpa Player is intended for general use. Institution accounts of users under 13 are created under the responsibility of the institution (school) and with the knowledge of a parent.

9. Your rights, applications and contact

Under Article 11 of the Turkish Personal Data Protection Law (KVKK, No. 6698) you may ask whether your data is processed, request information, learn the purpose and recipients, request correction, deletion or destruction, object to results of purely automated analysis and claim compensation for unlawful processing. Applications are concluded free of charge within 30 days at the latest. If you find the reply insufficient you may complain to the Personal Data Protection Board (kvkk.gov.tr) within 30 days of learning the reply and in any case within 60 days of the application. Users in the European Union / European Economic Area also keep, to the extent applicable, the rights of access, rectification, erasure, restriction, objection and portability, and may complain to their national data protection authority.

To exercise these rights or to ask for deletion, see Data deletion or write to info@alpayazilim.com with your device ID. Data that must be kept by law (section 5) cannot be deleted before the retention period ends. To report unlawful content, see the Terms of Use or write to the same address.