What stays on your device
Your sources, favorites, hidden categories and watch history are stored on the device in the app's own storage. Xtream passwords are kept in the system Keychain. None of this is sent to the developer.
iCloud sync
If you turn on iCloud sync in Settings, the same data is mirrored through your private iCloud account so your other devices can read it, together with your Xtream passwords, so a source works on every device without being typed again. Apple stores it; the developer never sees it. Turn the switches off to stop syncing at any time.
Your provider
Every request for categories, artwork and streams goes directly from your device to the provider you configured, exactly as any player would. The provider sees your IP address and what you watch. Read their privacy policy for how they treat that.
Subscriptions
Webstream Premium is sold through the App Store. Apple handles payment and keeps the purchase records; the app only learns whether the subscription is active. Manage or cancel it in your App Store account.
Advertising
Free users see advertising; subscribers see none. On iPhone and iPad the banner between rows comes from Google AdMob, which receives your device's IP address, general device information and an advertising identifier in order to choose and measure an advert. Google's own privacy policy covers what they do with it. Where the law requires it, as in the EEA, you are asked before any of this happens, and you can change your answer at any time under Settings › Ad Choices. On Apple TV and the Mac, and whenever Google has nothing to show, the slot is Webstream's own promotion and no third party is involved. Video advertising before a stream comes from Webstream's ad server, which receives the same kind of technical request any video player makes. On iPhone and iPad the app asks for your permission, through Apple's App Tracking Transparency, before Google may use your device's advertising identifier to personalise and measure adverts. If you decline, the adverts you see are not personalised, and you can change your answer at any time in your device's Settings › Privacy & Security › Tracking. Apple TV and the Mac never ask, because they show no third-party adverts.
Analytics and crash reports
The app contains no analytics. Crash reports reach the developer only through Apple, only if you have opted in to sharing them with app developers in your device's Analytics settings, and never with any personal data.
Parental controls
Each source can have its own PIN. A PIN is stored in this device's Keychain as a salted hash, never as the digits you typed and never in the library file. PINs are deliberately kept out of iCloud, so every device is unlocked separately. Which sources and categories are locked does sync, along with the rest of your library, when you turn iCloud sync on.
Contact
Questions about this policy can be sent to webstream@nyggis.no.
Children
Webstream is not aimed at children and we do not knowingly collect anything from anyone. Because a provider can serve any content at all, the app offers a PIN per subscription and per category so a parent can restrict what is reachable.
Changes to this policy
If a future version of the app collects something different, this page and the copy inside the app will be updated together, and the App Store listing will reflect it. The date above is when this version was published.