Privacy Policy

The short version

FoxDL is a media player, file manager and download client that runs on your device. We do not run a service you log in to, and we do not receive, store or index your files, playlists, subscriptions or browsing.

• No account, no sign-up, no password. There is nothing to identify you by.
• Your content stays on your device — or travels directly between your device and a provider you chose.
• Anonymous usage analytics are sent so we can see which features are used. Nothing they contain identifies you.
• The free version shows advertising supplied by Google AdMob and its mediation partners. FoxDL Pro removes it entirely.

1. Who we are and what this covers

This policy is issued by Banba Games (“we”, “us”), the developer of the FoxDL mobile and desktop application, and covers the FoxDL app on iPhone, iPad and Mac together with this website.

It does not cover the third-party services you choose to connect — your IPTV provider, your cloud accounts, your WebDAV server, a website you open in the built-in web browser, or a podcast or radio publisher whose stream you play. Those are governed by their own policies.

For anything in this policy, write to [email protected].

This policy is published in other languages for convenience. This English text is the authoritative version; where a translation differs from it, the English text governs.

2. What stays on your device

The following never reaches us, and there is no mechanism in the app by which it could:

• Your files, folders, downloads and everything you import.
• Your library: favorites, playlists, play counts, playback positions, thumbnails.
• IPTV playlists and Xtream Codes accounts, including the panel address, username and password.
• Cloud and WebDAV credentials and access tokens.
• Browser history, bookmarks, cookies and the pages you open in the built-in web browser.
• Your app lock PIN, vault passcode and recovery code.
• The encryption key for vault files — generated on your device and never leaving it.

Credentials of every kind are stored in the iOS/macOS Keychain, not in the app database and not in any log. Stream URLs that embed a password are kept out of the database entirely and are rebuilt when needed.

Deleting the app removes its container, and with it everything above.

3. Usage analytics

Two separate things carry this name, and they are not connected: analytics inside the app, and analytics on this website. Neither one can see the other.

In the app

To understand which parts of the app are used and where people get stuck, FoxDL sends anonymous usage events through Google Analytics for Firebase. Google acts as our processor for this.

What is sent

• Screen views — which screens are opened, and in what order.
• Feature events — for example that a download started, a playlist was created, or a transfer finished. Whether it succeeded or failed, and a coarse reason if it failed.
• Purchase events — which subscription plan was bought or restored, and whether it succeeded.
• The device model, operating system version, app version, language and country, plus a pseudonymous app-instance identifier generated by Firebase, which sits on top of Apple’s vendor identifier (IDFV).

What is never sent

No event carries content of any kind: no file names, no folder paths, no URLs or host names, no playlist or channel names, no panel usernames, and nothing you have typed. We never call Firebase’s user-identifier API, so events cannot be tied to a person or to an account — because there is no account.

Google retains this event data for a bounded period (currently 14 months) and processes it under its own terms. Google may derive an approximate location from the IP address of the request; we ask for country-level reporting only and never receive a precise location from you.

On this website

This site uses Google Analytics 4, and only if you allow it. Until you press the button on the banner, nothing is requested from Google, no script of theirs runs, and no cookie of theirs exists. Declining is one press of the button beside it, and the answer — either answer — is remembered for a year so you are not asked again.

When it is allowed, Google Analytics records the pages you open on this site, roughly where in the world the request came from, which site or search sent you, and what kind of device and browser you are using. It also records two things we ask it for: which download button was pressed, and on which page, and when somebody switches the site between English and Turkish. Advertising features are switched off, so this data does not become an advertising audience.

Cookies on this website

• foxdl_lang — the language you chose, so / sends you to the right one next time. Set only when you use the language switcher, and needed for the site to work as you asked.
• foxdl_consent — your answer to the analytics question, and which version of the question it answered. Without it we would have to ask on every page.
• _ga and _ga_* — set by Google Analytics, and only after you allow it. They give this browser a random identifier so two visits can be counted as one visitor. Google sets these to expire after two years.

Deleting the cookies for this site removes all of them, and the analytics question will be asked again on your next visit. The site sets nothing else: no advertising cookies, no third-party embeds, no social media pixels, and no fonts or scripts loaded from anybody else.

4. Advertising in the free version

The free version of FoxDL shows advertising supplied by Google AdMob, plus the mediation partners AdMob passes requests to when it does not fill an ad itself: AppLovin, Pangle, Liftoff Monetize, DT Exchange and InMobi. Each of these is an independent controller of the data it receives, and each has its own privacy policy.

What advertising means here — and what it does not

• There are no full-screen ads. That ad unit does not exist in the app: ads appear in place on the page (banner and native), never over what you are doing.
• Rewarded clips are opt-in. A short video only plays after you tap to start it, in order to go past a free allowance.
• Nothing plays over your media. No ad interrupts playback.
• On the Mac there is no advertising at all — no ad SDK is present in that build.

Data these partners may receive

To request and measure an ad, the ad SDKs may process your device’s advertising identifier (IDFA, only if you allow it), the IDFV, IP address, device and OS information, coarse location derived from the IP address, and interaction with the ad itself. This may be used for personalised advertising, frequency capping and fraud prevention.

Your choices

• App Tracking Transparency. iOS asks for your permission before the advertising identifier can be used to track you across apps and websites. If you decline, ads are still shown but are non-personalised. You can change your answer at any time in Settings → Privacy & Security → Tracking.
• Consent in the EEA, the UK and Switzerland. Where required, Google’s consent form is presented before personalised advertising is enabled, and your choice is passed on to the partners above. It can be reopened from the app’s privacy settings.
• FoxDL Pro removes advertising entirely, on every device covered by the subscription.

5. Purchases and subscriptions

FoxDL Pro is sold through Apple’s App Store using StoreKit. Apple processes the payment; we never see your card details, your billing address or your Apple Account credentials.

What the app keeps locally is the entitlement itself — which plan is active, when it renews, and a signed expiry used to keep Pro working offline — held in the Keychain. Apple provides us with aggregate sales reports that are not linked to individuals.

Refunds are handled by Apple at reportaproblem.apple.com. We cannot issue them on Apple’s behalf.

6. Services and sources you connect

Several features work by talking directly to somebody else’s server. In each case the request goes from your device to them; it does not pass through us, and we do not receive a copy.

• Your IPTV provider (M3U or Xtream Codes): receives your panel credentials and your viewing requests, exactly as it would from any other client.
• Your cloud accounts (Dropbox, OneDrive, Box, pCloud, Baidu, Aliyun) and your WebDAV server (including Nextcloud and ownCloud): authenticated directly from your device.
• Podcast Index (podcastindex.org) supplies podcast search and feed data; Radio Browser (radio-browser.info) supplies radio station data. Episodes and streams play from the publisher’s or broadcaster’s own address, and all rights remain with them.
• Websites you open in the built-in web browser, and any host you download a file from, see your IP address and request headers as any browser would.

We host no streams, no episodes and no channel lists. Removal requests concerning directory data can go to the relevant database or to [email protected].

7. Permissions the app asks for

• Photos — only when you import from or export to your photo library. FoxDL reads what you pick and nothing else.
• Local network — required so Wi-Fi Transfer can be reached from a web browser on your own network. The server runs only while the app is open and in the foreground.
• Face ID / Touch ID — used locally to unlock the app. Biometric data never leaves the Secure Enclave and is never available to us.
• Notifications — used to tell you that a download finished. They are generated on your device; there is no push server.
• Tracking — see section 4. Declining does not reduce what the app can do.

FoxDL never asks for your location, contacts, calendar, microphone or camera.

8. Children

FoxDL is not directed at children under 13 (or the equivalent minimum age in your country) and we do not knowingly collect data from them. If you believe a child has provided us with personal data, write to [email protected] and we will delete it.

9. Retention and deletion

Everything created inside the app lives in the app’s own container and is removed when you delete the app. Analytics events are retained by Google for a bounded period as described in section 3; advertising partners retain what they receive under their own policies.

Because analytics are not linked to an identity, we cannot look up “your” events to delete them individually. What you can do is reset the advertising identifier in iOS settings; deleting the app stops any further event from being sent.

10. Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict or object to the processing of your personal data, to withdraw consent, and to lodge a complaint with your data protection authority. This includes rights under the GDPR (EEA/UK), the Turkish KVKK and the CCPA/CPRA in California.

We do not sell or share personal data for cross-context behavioural advertising in the CCPA sense beyond what the advertising choices in section 4 control, and we do not build profiles of individuals.

To exercise a right, write to [email protected]. Please tell us which right you are exercising; because we hold no account, we may not be able to match your request to any data we can identify — that is the result of collecting so little.

11. Security

Traffic between the app and any server uses HTTPS wherever the server offers it. Credentials are stored in the Keychain, protected by the device’s own encryption. The Wi-Fi Transfer server is gated by a 6-digit PIN, runs only in the foreground, and grants destructive operations only when you enable them explicitly. Device-to-device transfers use an encrypted peer-to-peer connection.

No system is perfectly secure, but the strongest protection here is structural: there is no central store of your data to breach.

12. International transfers

The processors named above (Google, and the advertising partners in section 4) operate globally and may process data outside your country, including in the United States, under the transfer mechanisms set out in their own policies, such as the EU Standard Contractual Clauses.

13. Changes to this policy

When this policy changes materially — for example if a new processor is added — we update the date at the top of the page and, where the change affects what is collected, ask for your consent again inside the app.

14. Contact

Privacy questions and data requests: [email protected]

Legal notices and copyright matters: [email protected]

Help with the app: [email protected]