Privacy Policy

Last updated: 26 August 2026.

1. Guiding principle

Your source credentials never reach our servers, in any tier. Whatever you connect TuneLoft to (M3U playlists, Xtream Codes logins, Plex accounts, DLNA and UPnP servers, files on your own network) the details stay on the device you entered them on: your Android TV or Google TV player, your Meta Quest headset, your phone. They are kept in the application's private storage, which the operating system keeps out of reach of other applications. We never upload them, and our database has no table that could hold them.

Linking a Plex account uses Plex's own plex.tv/link flow: your device talks to Plex directly and keeps the resulting token locally. We are not in that path either.

A phone and a player talk to each other over your own local network, never through us. When you push a programme to a player that does not already hold the credentials for that source, they are used for that playback only and are not written to that device.

2. Data collected in the Free tier

None. TuneLoft Free runs without a user account and without any connection to our servers, other than the app updates handled by the store you installed from.

3. Data collected in the Plus tier

A TuneLoft Plus subscription requires an account. We store:

  • your email address, used to sign you in by magic link;
  • a Stripe customer identifier, used to manage the subscription;
  • for each player you sign in on, a name you choose and a device fingerprint, used to count the five players an account covers.

That is the complete list. We do not collect or sync your favorites, your watch history or your resume points, and we build no profile of what you watch. Your source credentials stay on your devices in the Plus tier exactly as they do in the free one.

4. Hosting and jurisdiction

Account data is hosted in the European Union: the database runs in Frankfurt (Neon, eu-central-1) and the API in Paris (Fly.io, cdg). TuneLoft is operated by an Estonian OÜ, under European jurisdiction and subject to the GDPR.

5. Your rights (GDPR)

Under the GDPR you may ask us at any time to:

  • tell you what we hold about you, or send you a copy of it;
  • correct it;
  • delete your account and everything attached to it.

Write to support@tuneloft.tv and we will carry it out. Given the list in section 3, a copy of your data is a short document. Deleting your account removes your email address, your Stripe customer identifier and your registered players. Billing details held by Stripe are managed from the Stripe Customer Portal, reachable from your account page on this site.

6. Cookies and analytics

This site sets no tracking cookies and loads no third-party analytics script. The TuneLoft applications contain no advertising SDK, no third-party tracking SDK and no crash-reporting SDK.

7. Contact

For any question about your data: support@tuneloft.tv.