Legal Notice, Terms of Use, and Privacy Policy

Service Provider / Data Controller: Asil Ak (Independent Developer)

Address: Izmir, Turkey

Email: webplayer@akipa.app

Akipa Web Player is a media player and playlist management utility. The platform does not intend to permanently host, store, record, or re-encode media content on its own servers. In accordance with user requests, temporary media transmission may be performed via proxy infrastructure to manage browser restrictions; however, the actual source of the content is third-party servers added or connected by the user.

The foundational principle of the platform is the "Bring Your Own Content" (BYOC) model. Users bear sole responsibility for the legality, copyright compliance, and regulatory adherence of all playlists and streams (M3U, Xtream Codes, etc.) that they add or connect. Akipa does not supervise the copyright status of user-added content and cannot be held liable for such content.

Sample playlists provided by default on the platform are compiled from public, open-source third-party repositories (iptv-org and Free-TV/IPTV). These lists link solely to publicly accessible and unencrypted broadcasts to test system functionality and evaluate playback tools.

Akipa does not control or guarantee the legal status, licensing, continuity, accuracy, or content of these external streams. Content within third-party playlists remains the responsibility of respective project maintainers and broadcasters.

Akipa respects intellectual property rights. Rightsholders who believe that a stream in the default sample lists infringes upon their rights may contact webplayer@akipa.app with the following information:

This notice has been prepared pursuant to Law No. 5846 on Intellectual and Artistic Works, Law No. 5651, and related regulations. For users located in the European Union or the United States, requests complying with statutory notice-and-takedown mechanisms (e.g., EU Digital Services Act, DMCA) are accepted via the above email address.

The platform is provided "as is" and "as available". To the maximum extent permitted by applicable law, Akipa is not liable for the quality, continuity, or legality of third-party streams, nor for direct or indirect damages arising from user-added content and its consumption. This statement does not apply in cases of willful intent or gross negligence, or where liability cannot be restricted by law.

For legal inquiries and copyright notices: webplayer@akipa.app

The Platform is a media player and playlist management utility that enables users to playback playlists and streams they add or link. Akipa does not intend to permanently host, record, or re-encode media content on its own servers; it may perform temporary media transmission via proxy in accordance with user requests. The actual source of content is third-party servers, and external legal statuses are not monitored by Akipa. Sample links to open-source lists are provided solely for testing purposes without guarantees of uptime or legality.

The user acknowledges and agrees that:

The following activities are strictly prohibited:

Akipa reserves the right to restrict or terminate access to the Platform without prior notice upon detection of any violation of these terms or unlawful usage.

The Platform is provided "as is" without express or implied warranties of any kind regarding uninterrupted uptime, defect-free operation, or third-party stream quality.

To the maximum extent permitted by law, Akipa cannot be held liable for legal infringements resulting from user-added content or damages stemming from the use or inability to use the Platform. Mandatory statutory consumer rights remain unaffected.

Users agree to indemnify and hold harmless Akipa against third-party claims or damages resulting from content they add or conduct that breaches these terms.

Platform software, branding, interface designs, and logos belong to Akipa or its licensors. These terms grant you a personal, non-commercial license to use the interface. Third-party content and trademarks remain property of their respective owners.

The procedure for rightsholders to submit takedown notices is detailed in Section 1.5 of the Legal Notice.

You must be at least 18 years old or possess legal guardian consent to use the Platform.

Principles governing personal data processing are set forth in the Privacy Policy.

Akipa may update these terms at any time. Continued use of the Platform after amendments constitutes acceptance of the modified terms.

These terms are governed by Turkish law. The Courts and Execution Offices of Izmir, Turkey have exclusive jurisdiction over disputes, subject to mandatory consumer protection venues.

For inquiries regarding these terms: webplayer@akipa.app

Data Controller: Asil Ak (Independent Developer)

Address: Izmir, Turkey

Email: webplayer@akipa.app

Depending on your interaction with the Platform, the following data may be processed:

Akipa does not operate a central user account system, user database, or central playlist database. The M3U playlists, Xtream server addresses, usernames and passwords you add are primarily kept in your browser storage on your own device (IndexedDB; localStorage for application preferences) and in the application's working memory.

However, because Xtream API requests and media streams are routed through the Akipa proxy infrastructure (see Section 3.3.1), source addresses and any access credentials contained in them may be temporarily processed on the server side for the duration of the respective request. Under the current technical configuration, such information is not intended to be permanently stored, analyzed, or used for profiling on our servers.

You can delete your saved sources at any time from your device via the saved library management area of the application or by clearing your browser's site data.

We recommend entering credentials only for sources you trust and never sharing them with third parties.

Akipa uses a proxy (pass-through) infrastructure that facilitates browser access to media sources provided by the user. This infrastructure is used to technically manage browser restrictions such as CORS (cross-origin access) and Mixed Content (unencrypted HTTP content on an HTTPS page).

Under the current technical configuration, the proxy operates as follows:

The user is responsible for the lawfulness of content accessed via the proxy and for holding the rights required to access it. This section describes the technical operation of the proxy infrastructure; it does not constitute a definitive classification of, or assurance regarding, Akipa's legal status under applicable law (e.g., intermediary service categories under the EU Digital Services Act).

Personal data is processed pursuant to statutory legal bases under KVKK Article 5 and GDPR Article 6 for the following purposes:

Your personal data is never sold or commercially monetized. It is only transferred to the extent necessary for service provision to:

Some of the hosting and infrastructure providers we use (e.g., Vercel) may operate servers outside Turkey and/or the European Economic Area. Technical data processed while using the Platform (e.g., IP address, request information) may therefore be transferred abroad.

With respect to such transfers, the obligations under Article 9 KVKK and Chapter V GDPR (Art. 44 et seq.) are taken into account. You may request information on the transfer mechanism relied upon for a specific transfer and the relevant recipients at webplayer@akipa.app.

To ensure system security, debugging and service continuity (legitimate interests; GDPR Article 6(1)(f), KVKK Art. 5/2-f), our servers may keep limited technical access logs (Server-Log-Dateien). Depending on configuration, these logs may contain information such as date and time of access, client IP address, HTTP status code, and the name (hostname) of the target server connected.

Masking controls are applied so that usernames, passwords, tokens and sensitive URL parameters of stream providers are not written to logs; these controls have been tested on application, system (journald/syslog) and web server (Nginx) logs. Nevertheless, in exceptional cases such as unexpected errors, it cannot be absolutely guaranteed that no sensitive information will appear in logs; if such a case is detected, the relevant record is deleted.

Masked technical access logs are not analyzed except for detecting security incidents and troubleshooting, and are permanently deleted from our servers within at most 7 days.

Where a media source contains embedded text-based subtitles and these are requested, subtitle extraction is performed server-side using FFmpeg. As a result, WebVTT (.vtt) subtitle files may be created and kept in a server-based temporary subtitle cache. During this process, the source address is temporarily processed in server memory.

The cache file name (cache key) is derived from the source URL using a SHA-256 hash. Before hashing, usernames, passwords and sensitive parameters in the URL are masked so that direct access credentials are not included in the cache key. However, the cache key can still be associated with the source server and content identifier; hash values are therefore not described as anonymous data.

Subtitle files are kept in the temporary cache for at most 7 days; when the cache reaches its total capacity limit of 2 GB, the least recently used files (LRU) may be deleted automatically.

Depending on the source, subtitle texts may contain personal data or copyright-protected content. The subtitle cache covers subtitle text only; it does not constitute permanent hosting of video or audio content.

Data is retained only as long as necessary for the processing purpose or required by law, after which it is deleted or destroyed. Under the current technical configuration, the following maximum periods apply:

The Platform uses technical local storage (localStorage/IndexedDB) solely to preserve sessions and preferences. No third-party tracking or advertising cookies are employed. You may clear local storage at any time via your browser settings, which will reset your saved playlists and preferences.

When loading open-source playlists (iptv-org etc.), fonts, or external channel logos, your IP address may be transmitted to respective third-party providers as a technical necessity.

External stream servers and websites accessed through the Platform are governed by their own independent privacy practices. These sources may collect your IP address directly. Akipa is not responsible for data practices of third-party sources. When loading open-source playlists (iptv-org etc.), fonts, or external channel logos, your IP address may be transmitted to respective third-party providers as a technical necessity.

Reasonable technical and administrative measures (encrypted HTTPS connections, secure transmission, access controls) are in place to safeguard data. Whether the connection between the proxy and the source server is encrypted depends on the source server's protocol (see Section 3.3.1). Absolute security over the internet cannot be guaranteed.

Under applicable data protection laws, you possess the right to:

Users residing in the EU/EEA enjoy rights of access, rectification, erasure, restriction of processing, objection, and data portability under GDPR. You may exercise these rights by contacting webplayer@akipa.app or lodging a complaint with your supervisory authority.

The Platform is not directed to individuals under 18 years of age. If you become aware that data belonging to a minor has been collected, please contact us for immediate deletion.

This policy may be amended periodically. Material changes will be announced on the Platform and become effective upon publication.

For questions regarding privacy and personal data: webplayer@akipa.app