Legal
Nagare Privacy Policy
Last updated: 2026-04-30
This Privacy Policy explains how Nagare (the “App”, “we”, “us”, or “our”) handles information in connection with your use of the Nagare media player application and the website at nagare.live (the “Service”). Nagare is a media player. We do not provide, host, recommend, or resell any streaming content. You connect Nagare to a streaming service of your choice using credentials you obtain independently.
This policy is designed to comply with the General Data Protection Regulation (GDPR) for users in the European Economic Area, the California Consumer Privacy Act (CCPA / CPRA) for users in California, and the Israeli Protection of Privacy Law, 5741-1981 for users in Israel.
1. Data Controller
The data controller responsible for your information under GDPR and the equivalent role under Israeli law is:
bachdut
Contact: privacy@nagare.live
If you are a California resident exercising rights under the CCPA, the same contact applies.
2. Our Privacy Principles
Nagare is built on a privacy-first architecture:
- No accounts. You do not create an account with Nagare.
- No backend that stores your data. Nagare does not run servers that hold your credentials, your viewing history, or your content choices.
- Credentials stay on your device. Your IPTV provider credentials (Xtream Codes username/password/host, or M3U URL) are stored in your device’s secure storage (Apple Keychain on iOS / iPadOS; EncryptedSharedPreferences on Android). They are never transmitted to us.
- No personalized advertising. We do not run ads, and we do not sell or share personal information for advertising purposes.
3. Information We Process
3.1 Information you provide to the App
When you add a provider in Nagare, you enter:
- Your IPTV provider’s host, port, username, and password, or
- An M3U / M3U8 playlist URL
This information is stored exclusively on your device in encrypted secure storage. It is sent only to the server you specified (your IPTV provider) for the purpose of fetching your streams. It is never sent to Nagare.
3.2 Information transmitted to your IPTV provider
When the App requests channels, EPG data, or video streams, it communicates directly with the server whose address you entered. We have no involvement in, and no visibility into, this communication. The privacy practices of your IPTV provider are governed by that provider’s own policy, not this one.
3.3 Information processed by third-party services we use
The App uses the following third-party services for non-personal purposes:
| Service | Purpose | Data sent |
|---|---|---|
| The Movie Database (TMDB) | Fetch movie/series artwork and synopses when your provider’s metadata is missing or low quality | The title and (where available) the year of the movie or series. No user identifier. |
| PostHog (anonymous mode) | Anonymous usage counts (e.g., “how many users opened the app today”) to guide development | Anonymous event counts only. We explicitly disable person profiles ($process_person_profile: false). No IP address linkage, no device IDs that persist across reinstalls. |
We do not use any analytics, advertising, or tracking SDKs beyond the above.
3.4 Information processed by the website (nagare.live)
The website is a static page hosted on Vercel. Vercel may collect standard server logs (IP address, user agent, request path, timestamp) for the purpose of operating the platform and preventing abuse. Vercel acts as a processor under our instructions. See Vercel’s privacy policy for details.
The website does not set tracking cookies, does not run third-party analytics, and does not contain any advertising.
4. Legal Bases for Processing (GDPR)
For users in the European Economic Area, we rely on the following legal bases under Article 6 of the GDPR:
- Performance of a contract (Art. 6(1)(b)) - to provide the App’s core functionality.
- Legitimate interests (Art. 6(1)(f)) - for anonymous, aggregate usage counts that help us improve the App. We have determined that this processing has a minimal impact on your privacy because it does not identify you. You may object at any time by contacting us.
We do not rely on consent for any of the processing described, because we do not process any data that requires it under GDPR. We do not engage in automated decision-making or profiling.
5. Your Rights
5.1 Rights under GDPR (EU/EEA users)
You have the right to:
- Access the personal data we hold about you
- Rectify inaccurate personal data
- Erase your personal data (“right to be forgotten”)
- Restrict processing of your personal data
- Data portability - receive your data in a structured, machine-readable format
- Object to processing based on legitimate interests
- Lodge a complaint with your national supervisory authority
In practice, because we do not store your personal data on our servers, most of these rights are satisfied by you uninstalling the App or removing your provider from the App’s settings, which deletes the credentials from your device’s secure storage.
5.2 Rights under the CCPA / CPRA (California users)
If you are a California resident, you have the right to:
- Know what personal information we collect, use, and disclose
- Delete personal information we have collected from you
- Correct inaccurate personal information
- Opt out of the sale or sharing of your personal information
- Limit the use of sensitive personal information
- Non-discrimination - we will not deny service or charge different prices for exercising your rights
We do not sell or share personal information as those terms are defined under the CCPA.
5.3 Rights under Israeli Privacy Law
If you are an Israeli resident, you have the right under the Protection of Privacy Law, 5741-1981 to inspect personal information we hold about you and to request its correction or deletion. Because we do not maintain a database of personal information about App users on our servers, in practice these rights are satisfied by removing your provider from the App or uninstalling the App.
5.4 How to exercise your rights
Email privacy@nagare.live with your request. We will respond within 30 days (GDPR), 45 days (CCPA), or as required by Israeli law, whichever is applicable to you. We may ask you for information needed to verify your request.
6. Data Retention
- Credentials and App data: retained on your device for as long as you keep the App installed and the provider configured. Removing a provider or uninstalling the App deletes the data immediately.
- Anonymous usage counts (PostHog): retained for up to 12 months in aggregated form.
- Server logs (Vercel, for the website): retained according to Vercel’s standard retention practices.
7. International Data Transfers
Because Nagare does not run a backend that stores user data, the only international transfers are those associated with the third-party services described in Section 3.3 (TMDB, PostHog, Vercel). These providers may process data in the United States or other jurisdictions. Where required by GDPR, transfers from the EEA rely on Standard Contractual Clauses or other lawful transfer mechanisms made available by the respective providers.
8. Children’s Privacy
Nagare is not directed at children under 13 (or under 16 in jurisdictions where that is the applicable age). We do not knowingly collect personal information from children. If you believe a child has provided personal information to us, please contact privacy@nagare.live and we will take appropriate steps.
9. Security
We implement reasonable technical and organizational measures to protect the limited data we process:
- Credentials on-device are stored in the operating system’s secure enclave (Apple Keychain / Android EncryptedSharedPreferences).
- All network communication initiated by the App that we control uses HTTPS where the destination supports it. Communication with your chosen IPTV provider may be HTTP if that is what your provider supports - this is outside our control and is a property of the provider you chose.
- The website is served over HTTPS.
No method of electronic storage or transmission is 100% secure, and we cannot guarantee absolute security.
10. Changes to This Policy
We may update this Privacy Policy to reflect changes to the App, our practices, or applicable law. When we make material changes, we will update the “Last updated” date at the top of this policy and, where appropriate, post a notice in the App or on the website. Continued use of the Service after the updated policy takes effect constitutes acceptance of the changes.
11. Contact
Questions, requests, or complaints about this Privacy Policy or our handling of your information:
Email: privacy@nagare.live
See also: Terms of Use