Privacy
What is kept, and where. Last changed 30 September 2026.
In short
What you watch, search for and type in the app is never sent to us. There is no analytics, no advertising, no tracking and no error reporting.
Our server keeps only what the trial and the licence need: an identity each copy of the app makes up for itself, and — if you open one — your Amber account's email address and the names of the devices signed in to it. Everything else stays on your device.
Kept on your device
None of this is sent to us.
| Sign-in details for your service | Kept in the system's own protected store — the credential store on Windows, the keystore on Android — and sent only to your service. |
| Settings, favourites, watch history | Where you left off, your favourites and all your settings sit in the app's own files on the device. |
| The parental control PIN | Kept on the device. It is not an account password, and a forgotten PIN cannot be reset from inside the app. |
| Channel lists and pictures | The lists your service sends, with their posters and logos, are kept so they are not fetched again every time. Settings › Clear Data empties them. |
| Downloads | Written to the folder you chose, not hidden inside the app. |
| Your Amber account's sign-in | A device signed in to your account keeps a token for it in the protected store — not your password. |
Kept on our server
| Each copy of the app | An identity the app makes up for itself (it names nothing about you or the device), when it was first and last seen, the app's version and system, and until when its trial or licence runs. The address your connection came from when a trial began is kept with it, so that a trial cannot be taken again and again from one place. |
| Your Amber account, if you open one | Your email address, your password in a form that cannot be read back, until when your licence runs and its name, and for each device signed in to it: the name it gave itself (such as “Android TV”), its system, and when it was added and last seen. That is what lets one licence cover up to five devices, and lets you take one off. |
| Signing in with a service's code | The code, the app's identity and its version are sent when you sign in and once a day after. For each code we count how many different devices used it each day, as a number only: the mark a device leaves is thrown away at the end of the day, so nothing records which codes your device has used, or ties you to a service. |
| Guarding against guessing | The address your connection comes from is noted with each attempt to sign in, try a code or a key, and deleted within two hours. |
No account name, password or stream address for your service is ever sent to us.
Who else is involved
Cloudflare runs our server and this website, and so handles every connection to them. Cloudflare's own check (Turnstile) runs on the page where an Amber account is opened, to keep automated sign-ups out.
Resend sends the few emails we send — the code that confirms your address, and the code to set a new password — and so receives the address it sends to.
open-epg.com — when your service sends no guide, the app fills it in from the open listings here. The request carries nothing about who you are. It can be switched off in the connection settings.
sporekrani.com — the “Today's Sport” row on the home screen reads the day's events from here. Turn the row off in the interface settings and the request stops with it.
Google Fonts — these web pages load their typefaces from Google, so opening a page tells Google the address your connection comes from. That happens on the website, not in the app.
Buying a licence
When you buy by email, we keep the correspondence and the key we sent, so that the purchase can be looked up and refunded if you ask.
Children
The app is not aimed at children and asks for nobody's age. What can be watched belongs to your service; the parental control settings hide categories behind a PIN kept on the device.
Your data, and how to have it gone
Your Amber account can be deleted on its own page, at amberplayer.com/account: the account, its licence and its devices go at once. Any other question — to see what is kept about a copy of the app, or to have it removed — goes to [email protected]. The app's own identity is shown in the app under Settings, Licence.
Settings › Clear Data removes favourites, watch history and the kept lists and pictures from the device.
Uninstalling the app removes everything it kept on the device.