Overview
Prism has no accounts, no sign-in, no analytics, no advertising, and no tracking. It contains no analytics, attribution, crash-reporting, or advertising SDK of any kind, and it does not ask for tracking permission because it does not track.
We operate no user accounts and no user database. There is nothing on our side that could identify you.
What stays on your device
Your playlists, curated lists, favorites, recently played channels, validation results, guide URLs, preferred language, and settings are stored locally — in the app’s Application Support folder and in your device’s own preferences.
None of it is uploaded to us. We never see your library, what you watch, or when you watch it.
Connections Prism makes
- Playlist catalogs: public M3U files from sources such as iptv-org and Free-TV are downloaded so their channels can be listed. Those hosts see an ordinary file request.
- Streams: when you play a channel, your device connects directly to that channel’s own media host. We do not proxy, mirror, log, or record playback. That host can see the request in its own logs.
- Programme guides: XMLTV files are downloaded from the guide feeds you or Prism have configured, then parsed on your device.
- Channel artwork: logos are loaded from the URLs published in the playlist, through a bounded image loader that refuses private-network and credential-bearing addresses.
- The Prism scanner gateway: playlist downloads and stream probes performed during discovery go through our bounded gateway (prism-scanner-gateway.12thmanfishing.workers.dev). It fetches the target and returns the result. It does not receive your library, your identity, or any credentials.
- GitHub: the public GitHub search and repository APIs are queried during discovery, unauthenticated.
- Reddit: queried only if you supply your own approved installed-app client ID. Prism embeds no Reddit secret and has no anonymous-scraping fallback. Leave it unset and Reddit is never contacted.
- Ollama: contacted only if you turn it on and give it an address, which is normally localhost on your own machine.
Unencrypted media
A large share of free-to-air streams are still published over plain HTTP, so Prism allows HTTP media. Traffic to those channels is not encrypted in transit, and anyone on the network path — including your network operator — can see which stream you requested. That is a property of the public IPTV ecosystem, not something Prism adds, but you should know it before you watch on a network you do not trust.
Permissions
Prism requests no location, contacts, photos, microphone, camera, or notification access. On iPhone and iPad, iOS may ask for local network permission only if you point Smart Curate at an Ollama server on your own network; decline it and everything else keeps working.
Content Prism does not control
Prism hosts no video. Its bundled discovery is limited to public, free-to-air, and FAST catalogs, but those catalogs are maintained by third parties and can change without notice, and any playlist you import yourself is entirely your own. Rights and availability vary by region. Prism does not filter, moderate, rate, or verify what a third-party stream contains.
Changes
If this policy changes, the effective date above changes with it, and a material change will be surfaced in the app.
Contact
Questions about privacy: support@shutterscoutapp.com.