Privacy Policy

In short

• No account, no uploads. Your playlists, settings and backups stay on your device. We never receive them.
• Very little reaches us. Our web host processes the technical data every website needs to deliver pages. If you email us, we receive your email.
• No advertising or tracking today. We don’t use advertising, tracking cookies or third-party scripts in the editor. Any change will be announced here before it starts.
• Cookieless statistics on content pages only. When we switch it on, Cloudflare Web Analytics counts page views on our information pages, without cookies. Never in the editor.
• You choose what your device connects to. When you import from a link, play or check an entry, or show logos, your device contacts those servers directly, and they can see your IP address.

Who is responsible

The controller of personal data processed through M3U.Click is Tibrcode Software Development, [PENDING: registered-address], Abu Dhabi, United Arab Emirates. Contact: support@tibrcode.com. ⚖️ Our lawyer is reviewing whether we need representatives in the European Union or the United Kingdom.

What stays on your device

The editor saves your work in your browser’s storage on your device:

• your playlists, their entries and groups, your edit history and your settings (in a browser database called IndexedDB, and in the browser’s private file storage for larger files);
• an offline copy of the website, so the editor opens without a connection (in the browser’s cache storage);
• a few small preferences, such as your theme and language (in the browser’s local storage). The Cookie Policy lists each one.

This data never leaves your device unless you export, share or back it up yourself, and we have no way to read it. You can delete all of it with Settings → Delete all local data in the editor, or by clearing this site’s data in your browser.

Backup files you create are saved wherever you choose. If you set a backup password, it is used only on your device to encrypt the file and is never stored or sent anywhere.

What we, or providers working for us, process

When you visit the website

Our website is hosted by Vercel Inc. Like any web host, Vercel receives the technical data that a browser sends with every request: your IP address, the page requested, the time, and your browser’s user-agent string. Vercel uses it to deliver the pages and to protect its network. We do not use it to identify visitors, we don’t combine it with other data, and we don’t keep separate server logs of our own. See Vercel’s privacy policy.

Statistics (content pages only; not active yet)

We plan to use Cloudflare Web Analytics on our information pages: the home page, guides and legal pages. It is never loaded in the editor at /app/. It does not use cookies or local storage and does not fingerprint visitors. It gives us aggregated page-view counts. Cloudflare keeps the statistics for six months. Ad blockers may block it, which is fine with us. See Cloudflare’s privacy policy.

We will never send playlist names, links or any other playlist content to an analytics service.

When you email us

If you write to support@tibrcode.com, we receive your email address, your message and anything you attach. We use it only to answer you and to handle your request. Please don’t send us playlists or passwords.

Copyright notices and counter-notices

If you send a copyright notice or counter-notice, we keep it as a record of what we did. Under the US Digital Millennium Copyright Act, a counter-notice is forwarded to the person who sent the original notice, including the contact details in it. We may send copies of notices to the Lumen research database with personal contact details removed. ⚖️ Details are in our Copyright & Takedown policy.

Every third party your device may contact

Who	When	Why	What they receive
Vercel (serves m3u.click)	Every visit	Hosting the website and editor	Technical request data, including your IP address
Cloudflare (static.cloudflareinsights.com, cloudflareinsights.com)	On content pages, once switched on; never in the editor	Cookieless page-view statistics	Page address, referring page, browser details and your IP address, used to produce aggregated statistics
Servers named in your playlists	Only when you use a feature that contacts them: import from a link, play or preview an entry, run a link check, or show logos	To get the playlist, stream or image you asked for	Your IP address and a normal browser request. The editor tells browsers not to send our address as the referring page
GitHub	Only if you follow our GitHub Sponsors link, when it is shown	Donations	Whatever you share with GitHub there

Not active yet. We will update this policy before any of these start:

• Google AdSense and Google’s consent message, on content pages only (never in the editor view that shows your playlist entries). Ads will ask for your consent where the law requires it.
• Publishers in our library, once it launches: their servers will deliver podcast feeds, station streams and artwork directly to your device.
• Hugging Face, if you choose to download an optional on-device AI model. Only the model file is downloaded; your playlists are never sent.
• Your own cloud storage, such as GitHub Gist or Dropbox, if you choose to save a playlist there.

We host all fonts ourselves. M3U.Click does not load fonts or scripts from Google or other font services.

Legal bases ⚖️

Where the EU or UK General Data Protection Regulation applies, we rely on:

• legitimate interests (Article 6(1)(f)) to deliver and protect the website and to produce aggregated statistics;
• legitimate interests, or steps you ask us to take, to answer your messages;
• legal obligations (Article 6(1)(c)) to keep records of copyright notices and our responses, where the law requires it.

Storing your own playlists on your device, at your request, is part of the service you ask for. ⚖️

International transfers ⚖️

Tibrcode is based in the United Arab Emirates. Vercel and Cloudflare may process technical data in the United States and other countries. We rely on the safeguards in their data protection terms. ⚖️

How long data is kept

• Your playlists: on your device, until you delete them.
• Hosting data: processed by Vercel under its own policies; we keep no copies.
• Statistics: aggregated, kept by Cloudflare for six months.
• Emails: as long as we need them to handle your request. Copyright notices and our responses are kept as a record of the actions we took. ⚖️

Your rights

Depending on where you live, you may have the right to ask for access to your personal data, to correct or delete it, to restrict or object to its use, and to receive it in a portable format. You can also complain to your data protection authority. People in the UAE have rights under Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data. ⚖️

Because your playlists never reach us, requests usually concern emails you sent us. Write to support@tibrcode.com; we may need to confirm your identity first.

Children

M3U.Click is not designed for children, and we do not knowingly collect personal data from them. If you believe a child has sent us personal data, contact us and we will delete it.

Security

The website is served only over HTTPS. The editor runs with a strict security policy that allows no third-party scripts. You can protect backup files with a password. To report a security problem, see our Security policy.

Changes to this policy

We will update this policy before we start using any new service that processes personal data, and whenever our practices change. The date at the top shows the latest version.

Contact

Privacy questions: support@tibrcode.com.