Repository navigation
Privacy and security
- Your provider logins. The web editor only ever sees server names, never usernames, passwords or stream links.
- Everything you set up: playlists, groups, favorites, settings. There are no TiviBro accounts or servers.
- Logs. They mask usernames and passwords, and only leave the TV if you copy them out yourself.
- Off every time TiviBro starts. You switch it on under Settings > Edit on a computer (or the first-run screen).
- Reachable only on your home network, protected by a random password shown on the TV.
- Locks for a minute after five wrong passwords.
- Every request needs the session it got from the password; nothing is open without it.
- Off until you switch it on under Settings > Phone app.
- A phone pairs only with the code shown on the TV, for 10 minutes. The code never crosses the network, and five wrong codes end it.
- Each phone gets its own key. Everything it sends is signed with it, can't be replayed, and the TV signs its answers back.
- Remove a phone in Settings > Phone app and its key stops working at once.
- The Android app only talks to your TVs on your home network. It sends nothing to us or anyone else, and has no analytics.
- Logins (a shared provider link, a password typed on the phone) and backups travel between the phone and the TV encrypted with the phone's key, not just signed.
- Backups made by the app stay on the phone, encrypted with a key in Android's secure key storage, and are left out of Android's own cloud backups. A copy you save as a file is encrypted with the passphrase you pick.
- Always locked with a passphrase you choose, using PBKDF2-SHA256 (200,000 rounds) and AES-256-GCM.
- The TV makes the backup and the helper locks it before it reaches the browser, so the file on your computer is unreadable without the passphrase.
- The passphrase is never stored or sent to the app. Nobody can recover a forgotten one, so keep it in a password manager.
TiviBro talks to:
- Your provider, and guide sources you add.
- The public guide sources (epg.pw and iptv-epg.org, and i.mjh.nz for Pluto TV channels), to fill in channels your provider has no guide for. On by default; switch it off per playlist under Settings > Playlists and guide > (your playlist) > Public guide fill-in. They see a request from your network for a country's guide, nothing from your playlist.
- GitHub (api.github.com), to check for updates.
- tivibro.app, for the daily install count below, the logo library when you turn it on, and problem reports only when you choose to send one.
- Cloudflare's speed test, only when you run Speed test.
- Your own computer when the web editor is on, and phones you paired when the phone app connection is on.
No ads, no accounts, no tracking IDs.
Once a day TiviBro tells tivibro.app which version it is and which webOS the TV has, so we know how many TVs run each version. Nothing else: no address is kept (each network is counted once a day with a hash that is forgotten after two days), no ID, nothing about your channels or playlists. The install script says whether it installed or updated, and which version. Switch it off in Settings > Updates and about > Count this TV in the install numbers, or run the install script with TIVIBRO_NO_COUNT=1. Only the totals are kept, on tivibro.app's Cloudflare server.
tivibro.app uses Google Analytics only if you choose Allow on its banner (change it any time with Cookie settings at the bottom of the page). IP addresses are anonymized and ad features are off. See tivibro.app/privacy.