Armadillo TV: Privacy Policy

DRAFT: under legal review. Not yet in effect.

Last updated: [DATE]

The short version: The Armadillo TV software collects nothing about you. There are no accounts, no analytics, no telemetry, and no tracking in the app. We designed it that way on purpose.

Data that stays on your devices

Everything the app knows lives locally on your PC: your channel database, program guide, recordings, favorites, watch progress, and settings (in %LOCALAPPDATA%). Your provider credentials are encrypted with Windows DPAPI and never leave your machine: the companion server streams to your phone without ever exposing them.

The companion server runs on your own network (your home LAN), not ours. It is not exposed to the internet by the Software unless you switch on remote access yourself, and its access password is stored only as a salted hash on your PC. We never see it.

<!-- DRAFT: attorney to review --> If you turn on remote access we store your hub's random name, its public IP address and port, and certificate expiry, to give it a name and a certificate; nothing else, and no viewing data.

Household members' phone passwords, the list of signed-in devices, guest links and any authenticator-app secrets are stored only on your PC, in the same database as everything else; they never reach us.

Network connections the Software makes

  1. Your content sources: the app talks directly to the playlist/portal you configured. We are not in that path and cannot see it.
  2. License check: a read-only fetch of a small policy file; no personal data. If you enter a license key, the Software verifies it offline, against a public key embedded in the app; the key itself is not sent anywhere for this check. When a Pioneer key is due for renewal, the app sends that key to armadillotv.com to receive its replacement, and nothing else. <!-- DRAFT: attorney to review -->
  3. Purchases: if license keys go on sale, they will be sold through Stripe. We would never see your card number, and Stripe's handling of your payment is governed by Stripe's privacy policy. When a purchase completes, your license key would be emailed to you automatically. <!-- DRAFT: attorney to review -->
  4. Update check: fetches version information; no personal data.
  5. Google Cast: if you use the cast button on the companion page, the page loads Google's Cast SDK from Google's servers, subject to Google's privacy policy. Nothing loads unless you cast.
  6. OpenSubtitles: only if you add your own API key in Settings; subject to OpenSubtitles' terms.

Support requests

The support form on our website is handled by our own server-side function, which emails whatever you typed into it (and the email address you provide, if any) to us to answer your request; it is not used for marketing.

Pioneer keys

<!-- DRAFT: attorney to review --> If you request a Pioneer key on our website, we store your email address with your key's id. We use it to send you the key and to write to you about Armadillo TV. You can ask for it to be deleted at support@armadillotv.com; the key then stops renewing.

Our website

armadillotv.com uses Microsoft Application Insights to count page views. It is configured without cookies and without any identifier that follows you between visits or sites. Each page view records the page address, the referring page (if your browser sends one), your browser and operating system type, your screen size, how long the page took to load, and an approximate location (country/region, sometimes city) that Microsoft derives from your IP address before discarding it. The IP address itself is not stored. Data is processed by Microsoft Azure in the United States and kept for about 30 days. We use it only to see which pages and downloads people reach; nothing is sold or shared. There is no cookie banner because no cookie and no persistent identifier is set on your device. The only thing stored in your browser is a temporary send buffer in session storage, which clears when you close the tab. If you block scripts, the site works exactly the same.

Crash reports

None are sent today. If a future version adds crash reporting it will be opt-in, clearly labeled, and this policy will be updated first.

Sale of data

We have no data to sell, and we would not sell it if we did.

Children

The Software is not directed at children under 13 and we knowingly collect no information from anyone.

Changes

We will update this policy if the Software's behavior changes, and note the change in the release notes.

Contact

Knarrly LLC: support@armadillotv.com.