Privacy
iboMate is a media player, not a content service. That shapes what we hold: the minimum needed to sync playlists to your device, and nothing about what you watch.
What we store
A device record keyed to your MAC address and device key, the playlists you add, and their credentials in encrypted form. That is what the app needs to work — there is no account, no email required and no profile.
What we do not store
We do not host, proxy, log or inspect any stream. iboMate is a player: the content comes from your own provider, directly to your device. We keep no viewing history on our servers.
Playlist credentials
Xtream usernames and passwords are stored encrypted, masked on screen, and only ever transmitted over HTTPS. A PIN-protected playlist stores its PIN hashed — we cannot recover a forgotten PIN, only delete the playlist.
Payments
The first year of activation is free and takes no payment details at all. At renewal, card details are entered on Stripe's secure checkout and never touch this site or our servers.
Bot protection
The sign-in form uses Cloudflare Turnstile to tell browsers from bots. It checks the browser environment, not your identity, and never sees your playlist credentials.
Deleting your data
Removing a playlist deletes its stored credentials. To delete a device record entirely, email [email protected] from any address with the MAC address concerned.
Questions about any of this go to [email protected].