Effective date: July 21, 2026 | Last updated: October 12, 2026
Effective date: July 21, 2026 | Last updated: October 12, 2026 | Version: 2.3
StellarSTB Inc. (“StellarSTB Inc.,” “we,” “us,” or “our”) respects your privacy. StellarSTB Inc. is a company registered in Canada and operates the Stellar media player application and related services.
This Privacy Policy explains how we collect, use, disclose, and protect information when you use:
Please read this policy carefully. By using the Service, you agree to the practices described here. If you do not agree, do not use the Service.
Stellar is a media player, not a content provider. We do not supply, host, stream, or sell live TV channels, movies, series, or playlists. You connect the app to sources you choose (for example Stalker portal, M3U playlist URL, or Xtream Codes credentials).
Because of that design, the following distinctions matter for your privacy:
| Category | What it means |
|---|---|
| Your device | Profiles, playlists, favorites, watch progress, search history, and IPTV login details are stored on your TV/device, not in a Stellar “cloud library” of what you watch. |
| Our servers | We process information needed to license the app, operate support, improve reliability, and (if you use it) optional features such as subtitles. We do not operate a server-side catalog of your viewing history tied to titles or channels. |
| Your IPTV provider | When you play media, your device communicates directly with servers operated by your chosen provider. Their privacy practices apply to that traffic. We are not responsible for third-party providers. |
| Website vs app | Account registration, payment, and some support interactions happen on our website. TV app activation pairs your device to your account using a device identifier and Firebase-backed services described below. |
We collect information in four ways: (A) information you provide, (B) device and licensing data, (C) data stored locally on your device, and (D) automatic technical and usage data.
Website account and subscription
When you create an account, purchase a software license, or contact support through our website, we may collect:
Device activation and pairing
To link your TV to your license, you may use a pairing code shown in the Stellar app or website. We process pairing and activation events to associate your device with your account.
Optional OpenSubtitles sign-in
If you choose to sign in to OpenSubtitles inside the app, you enter a username and password in the app. Those credentials are transmitted once to our backend, which proxies authentication to OpenSubtitles. Our backend stores the resulting session token server-side so your OpenSubtitles API key and long-lived tokens are not embedded in the app. We do not use OpenSubtitles credentials for any purpose other than providing subtitle search and download through the app.
IPTV source credentials (stored on your device)
When you add a Stalker portal, M3U URL, or Xtream server login, that information is saved locally on your device (see Section 2.3). You provide it to the app; it is used only to connect to your chosen source. We do not upload your IPTV portal passwords, playlist URLs, or Xtream credentials to StellarSTB Inc. servers for storage or analytics.
When you activate or verify your device, the Stellar app calls our backend (Google Firebase Cloud Functions and related services). We may process:
android_tv, fire_os, lg_webos, or samsung_tizen)We use this information to:
We may also store a MAC address locally on the device where the operating system makes it available, primarily for Stalker portal authentication flows you initiate. MAC address is not included in the standard device verification payload sent to our activation API unless separately required for a feature you use.
The following is stored on your TV or device to provide app functionality. Clearing app data, deleting a profile, or using in-app “User Data & Privacy” controls removes the relevant local data as described in the app.
| Data type | Purpose |
|---|---|
| User profiles (name, avatar) | Multi-user experience on shared TVs |
| IPTV credentials (portal URL, MAC, M3U URL, Xtream username/password) | Connect to sources you configure — encrypted at rest on supported platforms (for example EncryptedSharedPreferences on Android TV) |
| Cached catalog metadata (categories, channel lists, EPG-related data from your provider) | Faster browsing; originates from your provider |
| Watch history & resume progress (“Continue Watching”) | Local convenience; stored in on-device database |
| Favorites | Local lists of channels or titles you mark |
| Search history | Recent search terms on the device |
| Player & app settings (subtitles, PIN, hidden categories, home row preferences) | Personalization |
| Terms acceptance record | Version and timestamp of Terms you accepted on first launch |
We do not operate a Stellar cloud service that stores your playlists, favorites, or watch history across devices unless a future feature explicitly tells you otherwise and updates this policy.
You can clear much of this data under Settings → User Data & Privacy without deleting your IPTV login, or clear all usage data per profile as described in the app.
Analytics (Firebase Analytics / Google Analytics)
We collect aggregated usage and diagnostic events to understand how the app is used and to improve stability. Examples include:
We configure analytics to avoid sending sensitive parameters such as passwords, tokens, playlist URLs, MAC addresses, or content titles.
Crash and error reporting (Firebase Crashlytics)
If the app crashes or encounters certain playback errors, we may receive crash logs and limited diagnostic context (for example app version, platform, error code, content section). Crash reports help us fix defects. They are not intended to include your IPTV credentials or media URLs.
Approximate location (weather widget only)
If you use the weather feature, the app determines approximate location (city-level) to show local weather:
We use location only for weather display, not to track what you watch. On Android TV, the app does not request GPS or network location permissions. On Samsung, LG, and other TV platforms, behavior may differ where the operating system provides location.
Security and integrity
We use Firebase App Check (including Play Integrity on Android TV where supported) to reduce abuse of our backend APIs.
To avoid confusion:
Local watch history (Section 2.3) exists on your device for Continue Watching and is under your control.
We use information for the following purposes:
| Purpose | Examples |
|---|---|
| Provide the Service | Device activation, license verification, profile and playback features, subtitles proxy |
| Process transactions | Software license purchases via Stripe on the website |
| Improve and secure the Service | Analytics, crash reporting, fraud/abuse prevention, performance tuning |
| Communicate with you | Support responses, service notices, license or security messages |
| Comply with law | Legal obligations under Canadian law and applicable foreign requirements, enforcement of our Terms, protection of rights and safety |
We do not use your IPTV credentials or local watch history for targeted advertising.
We do not sell, rent, or trade your personal information.
We may share information in these limited circumstances:
Service providers (processors) who help us operate the Service, under contractual obligations to protect data, including:
| Provider | Role |
|---|---|
| Google Firebase (Auth, Firestore, Cloud Functions, Analytics, Crashlytics, App Check) | Backend, analytics, crash reporting |
| Stripe | Payment processing on the website |
| Open-Meteo | Weather forecast from coordinates |
| StellarSTB backend (IP geolocation) | Approximate city/coordinates from public IP at device verify (weather) |
| Third-party IP lookup (e.g. ip-api.com) | Fallback only — approximate location for weather when backend geo unavailable |
| OpenSubtitles (via our backend proxy) | Subtitle search/download when you use that feature |
Your IPTV and media providers
When you use the player, your device sends requests directly to servers you configure. Those operators receive whatever identifiers, URLs, and credentials you supply (for example portal MAC, stream URLs). Their policies govern that processing.
Legal and business transfers
We may disclose information if required by law, court order, or governmental request (including under Canadian privacy and consumer protection law), or to protect rights, safety, and security. If we are involved in a merger, acquisition, or asset sale, information may transfer subject to this policy.
Our website uses cookies and similar technologies to:
You can control cookies through your browser settings. Disabling cookies may limit some website features.
The Stellar TV apps do not use browser cookies. They use on-device storage (for example SharedPreferences, DataStore, Room database, or platform-equivalent encrypted storage) as described in Section 2.3.
| Data | Retention |
|---|---|
| Website account & billing records | As long as your account is active and as required for Canadian tax, accounting, and legal obligations |
| Device / license records | While your device remains registered and for a reasonable period thereafter for fraud prevention and support |
| Analytics | According to Google Analytics / Firebase default retention settings (configurable in our analytics console) |
| Crash logs | According to Firebase Crashlytics retention settings |
| Local app data | Until you delete profiles, clear User Data buckets, or uninstall the app |
| OpenSubtitles session (server-side) | Until you sign out in the app or we invalidate the session |
We delete or anonymize information when it is no longer needed for the purposes above, unless law requires longer retention.
We implement technical and organizational measures designed to protect information, including:
No method of transmission or storage is 100% secure. You are responsible for safeguarding devices on your network and for the legality of sources you add to the app.
Android TV backup: On Android TV, the Stellar app sets allowBackup=false so Android cloud backup does not copy app data by default.
Depending on where you live, you may have rights to access, correct, delete, restrict, or export personal information, and to object to or withdraw consent for certain processing.
In the Stellar app
Website account and server-side device data
Analytics
You may limit ad personalization on your Google account; our analytics are used for product improvement, not third-party ad sales in the app.
Marketing
Opt out of promotional emails using unsubscribe links or by contacting us.
Canadian residents (PIPEDA and applicable provincial law)
StellarSTB Inc. is subject to Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and, where applicable, provincial privacy laws (such as Quebec’s Act respecting the protection of personal information in the private sector). You may have the right to access the personal information we hold about you, request correction, withdraw consent where processing is consent-based, and challenge our compliance with the Office of the Privacy Commissioner of Canada (or your provincial commissioner, where applicable).
California residents (CCPA/CPRA)
If you are a California resident, you may have additional rights to know, delete, and opt out of “sale” or “sharing” of personal information. We do not sell personal information as defined by California law.
EEA / UK (GDPR)
If you are in the European Economic Area or United Kingdom, our lawful bases include contract (providing the Service), legitimate interests (security, analytics, improvement), and consent where required (for example optional features). You may lodge a complaint with your local supervisory authority.
To exercise rights, email support@stellarstb.com. We may verify your identity before responding. Canadian privacy inquiries may also reference PIPEDA in your subject line.
The Service is not directed to children under 13 (or the minimum age in your jurisdiction, including applicable Canadian provincial requirements). We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will take appropriate steps to delete it.
Parental controls and PIN features in the app help restrict access on your device; they are not a substitute for parental supervision of content sources you configure.
StellarSTB Inc. is incorporated and operated from Canada. We use service providers (including Google Firebase and Stripe) that may process personal information in Canada, the United States, and other countries where they maintain infrastructure. Those countries may have different data protection laws than your own.
When personal information is transferred outside Canada, we take steps designed to ensure it receives a comparable level of protection, including contractual safeguards with service providers and compliance with PIPEDA’s cross-border data requirements. Where required under GDPR or other laws, we rely on appropriate mechanisms such as standard contractual clauses or equivalent safeguards.
Our website or app may reference third-party websites (for example your IPTV provider, OpenSubtitles, Google Play, or the Amazon Appstore). We are not responsible for their privacy practices. Review their policies before providing information to them.
We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top and post the new version at https://stellarstb.com/privacy-policy.html.
If changes are material, we may provide additional notice (for example in the app or by email). Continued use after the effective date constitutes acceptance of the updated policy, unless applicable law requires otherwise.
When we update the policy, we may prompt you to accept updated Terms or privacy notices in the app where required.
StellarSTB Inc.
(A Canadian corporation)
Email: support@stellarstb.com
Website: https://stellarstb.com
For privacy-specific requests, use the subject line “Privacy Request” and include the email associated with your account (if any) and the platform you use (Android TV, Fire TV, Samsung TV, LG TV, web, etc.). For deletion, prefer delete-account.html.