PRIVACY POLICY

This policy explains what information the NOXSIGN Player application processes, where it stores it and with whom it shares it. The short answer first: the application does not know what you watch and does not send your broadcast credentials to us.

1. Who Is Responsible

1.1. İSKAY BİLİŞİM — İSKAY SOFT is responsible for the processing described in this policy.

1.2. Contact: destek@iskaysoft.com · Medrese Mah. Fevzi Çakmak Cad. Ay Apt. No: 11/A, 40100 Merkez / Kırşehir, Türkiye

2. Core Principles

2.1. No account is required. The application works without an account. If you wish to sync your source settings between your devices you may open an optional account; an account is needed for that purpose only.

2.2. Your broadcast credentials stay on your device. The portal address, user name and password you enter are kept only in your device's local storage. The password is stored encrypted. These details are never sent to us in readable form. If you use an account, your source list is stored on our server only as a package encrypted with a key known solely to your devices; since the key is never sent to us, we cannot read its contents.

2.3. Your viewing history is not held by us. Which channel you opened and where you stopped a film are stored only on your device.

2.4. There is no advertising. The application shows no adverts, does not read the advertising identifier and uses no third-party tracking tools for advertising.

2.5. Streams do not pass through our servers. Video flows directly from your own provider to your device.

3. Data Processed

3.1. Processed for licence verification. The application connects to İskay Soft's server at intervals to ask whether the right of use is still valid. The following are transmitted:

• A pairing key and hardware identifier derived from the device's hardware details
• Device model and operating system version
• Application version
• The IP address the connection originates from (technically unavoidable)

This is processed to identify which device a licence belongs to, to prevent misuse of licences and to provide support. The legal bases are the conclusion and performance of a contract, and legitimate interest.

3.2. Processed for update checks. The application connects to the distribution server to ask whether a newer version exists. The application code, version number, platform and IP address are transmitted.

3.3. Processed if you use an account (optional). When you open an account, your e-mail address, optionally your name, and a one-way verifier digest derived from your password on your device are sent to our server; the password itself never leaves your device. For each device linked to the account we keep the device name, platform, hardware identifier and last-seen time. Your source list is stored as a package encrypted with a data key that exists only on your devices, and travels between your devices in that encrypted form. When pairing devices, only a digest of the one-time pairing code reaches the server; the code itself and the key envelope it protects cannot be opened by the server. The account licence, the number of linked devices and the device limit are also processed with the account. The legal basis is the conclusion and performance of a contract.

3.4. Kept on the device and never sent to us. Source details (address, user name, encrypted password), favourites, viewing history and resume positions, language and display preferences, channel logo and poster cache.

3.5. Device-to-device connection on the same network. When you use "Play on TV", your phone communicates directly with your television over the local network. The information exchanged (the address to open and the commands) does not leave your local network and does not reach us.

4. Children's Data

4.1. The application is not directed at children and does not knowingly collect data from children.

4.2. The application does not apply any control over the content you access. Restricting children's access is the user's responsibility.

5. Sharing

5.1. Your data is never sold, rented or transferred to third parties for advertising or marketing purposes.

5.2. Disclosure may be made to legally authorised public authorities, strictly limited to the scope of a lawful and properly made request.

5.3. Licence verification data is processed on İskay Soft's own servers; no third-party service provider is used for this purpose.

6. Retention Periods

6.1. Licence records are kept for the duration of the licence relationship and thereafter for the applicable limitation periods.

6.2. Connection records are kept for the period required by law and deleted at the end of that period.

6.3. Account data is kept for as long as the account remains open. When you sign out or remove a device from the account, that device's record is deleted; you may request deletion of the whole account at destek@iskaysoft.com.

6.4. Data held on your device is deleted together with the application when you uninstall it. You may delete your viewing history at any time using "Clear history" inside the application.

7. Security

7.1. Licence communication is signed, preventing a counterfeit server from granting access.

7.2. Your source password is stored encrypted on the device and is never displayed on screen.

7.3. Your account password is never sent to the server; the server holds only a further salted hash of the verifier derived on your device. Your source package is end-to-end encrypted; the encryption key exists only on your devices.

7.4. The "Play on TV" command endpoint accepts requests only from local network address ranges; even if the device were exposed to the internet it could not be controlled from outside.

8. Your Rights

8.1. Your rights regarding your personal data and how to exercise them are set out in detail in the Personal Data Protection Information Notice.

8.2. You may send any request to destek@iskaysoft.com.

9. Changes

9.1. This policy may be updated. The current version can always be viewed inside the application.

9.2. In the event of material changes, a separate notice is given within the application.