Privacy Policy

1. Introduction & Acceptance of Terms

This Privacy Policy shall be read in conjunction with the Terms of Use and forms an integral part of the User Agreement between You ("User", "you", or "your") and Odyssey Workshop / Odyssey Player ("Odyssey Player", "We", "Our", or "Us"), operating via our official website www.odysseyplayer.site and our mobile applications (collectively, the "Services").

This Privacy Policy explains how we collect, process, handle, store, and protect your information when you use our Services. By installing, opening, or using Odyssey Player, you acknowledge that you have read, understood, and agreed to the practices described in this policy. If you do not agree with any part of this Privacy Policy, please discontinue use and remove the application from your device.

2. Information We Collect

The information processed by Odyssey Player depends on how you interact with the application:

2.1 Technical & Device Identifiers

To enable reliable hardware-accelerated video decoding (Media3 / ExoPlayer on Android and AVPlayer on iOS), dynamic aspect ratio adjustments, 8K 120FPS HDR decoding, and soundstage acoustics, standard device technical parameters are processed locally:

• Device make, model, manufacturer, and operating system build version (Android API level / iOS release).
• Screen resolution, display aspect ratio, refresh rate, orientation sensor status, and GPU hardware decoder capabilities.
• Application version, build number, installation package identifier (com.odyssey.player), and crash diagnostic logs.
• Network connectivity status (WiFi/Cellular state) and system language/locale settings.
• Non-sensitive advertising identifiers (such as Google Advertising ID / Apple IDFA) utilized by ad networks for banner delivery to non-subscribed users.

2.2 User Account & Authentication Data

Odyssey Player functions fully in Guest Mode for local video playback and gesture controls without requiring account creation. Account registration (via email 6-digit OTP or Google 1-Tap Sign-In) is required only if you opt to purchase an Odyssey Plus membership or access synchronized cloud features:

• Account Profile: Email address, unique account UUID, display name, and optional avatar initials managed securely via our authentication server.
• Session Persistence: Encrypted JSON Web Tokens (JWT) stored securely in local device storage to preserve your authenticated state across app restarts.
• Selective Logout: When you log out, account tokens, profile details, and user session cache are immediately purged from local storage, while your hardware preferences (theme mode, spatial audio presets, gesture configurations, and UI settings) are preserved.

2.3 Network Streaming & IPTV Data

When using the Network Stream module or importing IPTV M3U/M3U8 playlists:

• Stream URLs (HTTP, HTTPS, HLS, MPEG-DASH, RTSP, RTMP) and IPTV channel list parameters (such as #EXTINF tags, channel logos, and group titles) are parsed and stored locally in your device's sandboxed SQLite database (odyssey_player.db).
• Network stream playback requests are transmitted directly from your device to the target stream server. Odyssey Player does not proxy, monitor, or record your private streaming URLs.

2.4 App Analytics & Crash Diagnostics (Zero-PII)

To monitor application stability and optimize hardware decoding across diverse Android and iOS devices, Odyssey Player incorporates privacy-focused telemetry:

• Crash Logs: Anonymized stack traces, memory state, and CPU architecture parameters when an unhandled exception or ANR (Application Not Responding) event occurs.
• Aggregated Usage Metrics: Non-identifiable feature interactions (such as screen view counts, feature toggle events, and codec initialization parameters).
• Strict Zero-PII Policy: We enforce an absolute Zero-PII (Personally Identifiable Information) rule across all telemetry. No personal video file titles, directory paths, file contents, raw search queries, or user email addresses are ever recorded or sent to analytics.

3. Sensitive Personal Information

Odyssey Player will never request, collect, or store sensitive personal information such as banking PINs, credit or debit card details, biometric master records, government identification numbers (such as SSN or Passport numbers), or health data. Please do not submit sensitive information to our support channels.

4. Local Storage & Offline Media Processing

Odyssey Player requires standard operating system permissions to discover, organize, and play your video files:

• READ_MEDIA_VIDEO / READ_EXTERNAL_STORAGE: Used to index local video files, retrieve duration and resolution metadata, and populate folder hierarchies without accessing unrelated file types.
• Local SQLite Database: Stream history, playback positions, favorites, and offline downloaded video paths are cached locally inside an encrypted sandboxed database (odyssey_player.db).
• External File Explorer & URI Handling: When you tap a video file inside an external file manager or cloud app, Odyssey Player processes the resulting content:// or file:// URI strictly on your device to stream playback directly.
• Local Thumbnail Generation: Preview thumbnails are generated locally by extracting a video frame directly on your device. These preview images are cached inside the app's sandboxed local directory and are never uploaded to any cloud server.

5. Biometric App Lock & Security Overlay

Odyssey Player offers a hardware-backed Biometric App Lock & Security Shield (Fingerprint, Touch ID, or Face ID) to prevent unauthorized access to the application:

• All biometric authentication is handled directly by your device's native operating system security architecture (Android BiometricPrompt / KeyStore or Apple LocalAuthentication / Secure Enclave).
• Zero Biometric Access: Odyssey Player receives only a binary success/failure flag from the operating system. Raw fingerprints, biometric templates, or facial geometry data never leave your device's secure enclave and are never accessible to our application.
• Privacy Overlay: When enabled, Odyssey Player automatically obscures on-screen application content with a security shield whenever the app is backgrounded or switched, preventing unauthorized screenshotting or recents previewing.

6. Spatial Audio & Native DSP Engine

Odyssey Player features a native 7.1 Spatial Audio and Binaural Soundstage DSP Engine:

• All audio processing, room acoustic convolution (Studio, Cinema, Concert Hall, Stadium), 3D vector soundstage rendering, and channel toggling (Center, Subwoofer, Surround, Rear) are computed 100% on your device's native digital signal processor.
• Audio streams from your local or network media are never recorded, analyzed for speech data, or transmitted to remote servers.

7. Subscriptions & Zero-Trust Billing Security

Odyssey Player offers optional premium subscriptions under the Odyssey Plus tier (Weekly $1.99 USD with 3-day trial; Monthly $4.99 USD with 7-day trial).

• Zero-Trust Architecture: Persistent entitlements are unlocked strictly via server-side verification (/api/billing/verify-purchase) against the Google Play Developer API v3 using authenticated user session tokens (JWTs). Client-side purchase auto-acknowledgment is revoked to prevent entitlement spoofing.
• Guest Purchasing Restrictions: Guest users cannot purchase or verify memberships. Users must sign in with an account before triggering Google Play Billing checkout to ensure entitlements are securely tied to their authenticated account UUID.
• Lifecycle Management: Subscription status updates (renewals, cancellations, grace periods, auto-renew toggles) are processed automatically via Google Cloud Pub/Sub Real-Time Developer Notifications (RTDN).

8. Advertisements & AdMob Policy

To support free availability of core player features, Odyssey Player integrates with Google AdMob to display advertisements for non-subscribed users.

• 100% Ad-Free for Odyssey Plus: Active Odyssey Plus subscribers automatically enjoy a completely ad-free experience without banner, interstitial, or rewarded video interruptions.
• Banner & Rewarded Video Ads: Non-subscribed users may encounter banner advertisements on library screens or opt into rewarded video ads (e.g. to preview stream playback). Rewarded ads are strictly user-initiated.
• Third-Party Ad Identifiers: Google AdMob may process your device Advertising ID, IP address, and standard non-personal app telemetry to deliver contextually relevant advertisements.
• Opt-Out & Controls: You can reset or opt out of personalized ad tracking directly within your device settings:
  • Android: Settings → Google → Ads → Reset/Delete Advertising ID
  • iOS: Settings → Privacy & Security → Tracking

9. Cookies, Caching & Server Logs

When visiting our official website at www.odysseyplayer.site, standard HTTP cookies and server log files (such as IP addresses, browser user agents, referring URLs, and timestamps) may be processed to monitor site uptime and prevent security abuse.

Within the mobile application, playback timestamps, watch history, and generated video thumbnails are cached locally. You can wipe all cached media thumbnails and history logs at any time by tapping Clear Cache in Settings.

10. Information Sharing & Third Parties

We do not sell, rent, lease, or trade your personal information. We share data only with trusted infrastructure providers necessary to operate the application:

11. International Data Transfers

Account authentication tokens and subscription verification records are processed on secure cloud infrastructure located in high-security data centers (including AWS and Google Cloud regions). We enforce standard contractual clauses, TLS 1.3 transit encryption, and AES-256 at-rest database encryption.

12. Data Retention & Permanent Deletion

• Local Storage & SQLite Databases: Stored locally on your device under your complete control. Uninstalling the application or clearing app data immediately purges all local databases and cached media.
• Account & Data Deletion: You have the right to request permanent deletion of your account, authentication record, and subscription records at any time. Upon receiving a deletion request via email or in-app support, your personal account records are permanently purged from our cloud databases within thirty (30) days.

13. User Rights & Regulatory Disclosures

Under applicable data protection laws (including GDPR, CCPA/CPRA, and global privacy standards), you possess the following rights:

• Right of Access: Right to confirm processing of personal data and request an export of your account profile.
• Right to Rectification: Right to correct inaccurate profile or account details.
• Right to Erasure ("Right to be Forgotten"): Right to request permanent deletion of your account records.
• Right to Restrict or Object: Right to disable ad tracking or manage device permission grants at any time.
• Right to Data Portability: Right to receive your personal information in a structured, machine-readable format.

14. Children's Privacy Policy

Odyssey Player is not directed toward children under the age of thirteen (13). We do not knowingly collect personal information from children. If a parent or guardian discovers that a child has provided us with personal details without parental consent, please contact us at privacy@odysseyplayer.site and we will promptly remove the account and data.

15. Security Safeguards & Limited Liability

We apply strict administrative, physical, and technical safeguards—including TLS encryption, database row-level access control policies prohibiting direct client database mutations, and biometric enclave checks—to protect your information.

While we enforce zero-trust security standards, no method of electronic transmission or wireless storage is 100% immune from security vulnerabilities.

16. Grievance Redressal & Support Contact

If you have any questions, concerns, or privacy requests regarding this Privacy Policy, please contact our dedicated team:

17. Updates to This Policy

We may update this Privacy Policy periodically to reflect enhancements in Odyssey Player or modifications to applicable legal frameworks. The latest version will always be published on our official website at https://www.odysseyplayer.site/privacy-policy with the updated effective date.