How OnTiv handles your data

Updated October 11, 2026 · 2 min read

An IPTV player sits close to sensitive things: playlist links that work like passwords, provider logins, and a record of what you watch. Here is a plain account of how OnTiv treats them. For the legal wording, see the Privacy Policy, which is the authoritative document.

What stays on your device

OnTiv saves your day-to-day settings in your browser's local storage, and they stay on your device unless you choose to sync them:

Your dark, light or system theme choice.
Your favorite channels.
The last channel you were watching, so playback can resume next time.
Your saved playlists, so you can reconnect without re-entering them.

Clearing your browser's site data, or using a different browser or device, removes this information. The Windows desktop app also has a backup option in Settings that exports your local data to a file.

What passes through our proxy

Browsers block a web page from fetching most files from other websites (a rule called CORS). To get around that, OnTiv loads playlist links, and makes Xtream Codes requests, through a small server-side proxy. When you load an M3U link or sign in with Xtream Codes, the link or the server address, username and password you entered are sent to that proxy so it can fetch the data for you. The proxy only reaches publicly reachable addresses, and we do not log, store or keep those links or credentials beyond the time needed to complete that one request.

What does not pass through it

When you press play, the video is requested from the address in your playlist. Your provider's server therefore sees your connection just as it would from any other player. OnTiv does not host or relay your streams.

Accounts and payments

You never need an account to use the free player. Sign-in is only needed for Premium and for syncing between devices. Accounts use Firebase Authentication, and premium status is stored in Firebase. Payments are handled by Stripe, so card details never reach OnTiv.

Analytics

OnTiv uses Google Analytics to understand which pages and features are used. See the Privacy Policy for what is collected and how to opt out. The written guides, like this one, may also show ads from Google AdSense; the player itself shows none.

Practical ways to protect yourself

Treat playlist links and Xtream logins as passwords. Do not post them in public, or in screenshots.
Prefer https:// addresses when your provider offers them.
Use a unique password for any provider account and for your OnTiv account.
On a shared computer, use a private window or clear site data when you are done.
Use profiles for children (Premium) so they only see what you allow.
Remember what your provider can see. Your provider knows which streams you request. A VPN changes what address they see; it does not change that they see requests.

Questions about your data

If something here is unclear, or you want to ask about your information, get in touch.

OnTiv is a media player. It doesn't provide, host, sell or recommend any channels, streams or playlists — only load content you have the right to access.