Keeping your playlists private

Playlists are more personal than they look. They show what you listen to and watch, and they often contain the keys to your accounts. M3U.Click is built so that your playlists stay with you.

Your playlists never leave your device

• No account and no uploads. The editor runs in your browser and saves everything in your browser’s storage on your device.
• No third-party code in the editor. The editor’s security policy only allows code from M3U.Click itself. No advertising, analytics or other outside scripts can run there.
• Statistics never touch the editor. Our cookieless page-view statistics are limited to information pages, such as this guide.
• Requests carry no trace of M3U.Click. When your device contacts a server in your playlist, the editor tells the browser not to send our address as the referring page.

Our Privacy Policy lists every service your device may contact.

Playlists often contain passwords

Many addresses in playlists include sign-in details, for example:

https://user:secret@media.example.com/stream/42
https://media.example.com/stream/42?token=abc123…

Anyone who has these addresses can use them with your access. Typical sources are your own media server’s “copy stream link” feature and services you subscribe to.

M3U.Click is designed to:

• find user names, passwords and tokens in addresses;
• hide them on screen until you choose to show them;
• warn you before you copy, share or save an unlocked backup of a playlist that contains them, and offer to remove them from the copy you share.

Sharing a playlist safely

1. Remove sign-in details from the copy you share. Your own copy stays unchanged.
2. Share only what you’re allowed to share. Many services don’t allow their addresses to be shared at all.
3. Prefer separate accounts. If family members use your media server, create a user for each of them rather than sharing your own links.
4. Be careful with “secret” links on cloud services: anyone who has the link can usually open the file.

Lock your backups

Backups contain every address in every playlist. Use Lock the backup with a password when you create one. Locked backups are encrypted on your device before they are saved. See backing up your playlists.

What other servers can see

When you play an entry, check a link or show logos, your device connects to those servers directly. Like any website, they see your IP address and basic browser information, and may log the request. M3U.Click doesn’t route anything through its own servers: that would mean your playlists passing through our hands.

Delete everything

In the editor, Settings → Delete all local data removes every playlist and setting M3U.Click stored in this browser. Backup files you saved yourself are not affected.