Privacy Policy
Last updated: September 6, 2026
Overview
RandomPlayer is a video player app that connects to your personal network storage. We are committed to protecting your privacy. This policy explains what information the app accesses and how it's handled.
Information Collection and Use
What We Access
Network Credentials
- • Server addresses, usernames, and passwords you enter to connect to your SMB/CIFS, NFS, and WebDAV shares
- • Stored locally in your device's secure Keychain
- • Never transmitted to us or any third party
Video Files
- • RandomPlayer accesses video files on your network shares that you explicitly connect to
- • Videos may be cached locally on your device for playback performance, encrypted at rest with AES
- • With Pro, videos you choose to copy to an external drive are stored on that drive, encrypted (see Data Storage below)
- • Your video files are never uploaded or shared externally
Usage Data
- • Watch history and playback position (stored locally)
- • Playlist preferences and tag filters (stored locally)
- • App settings and preferences (stored locally)
iCloud Sync
If you enable iCloud, RandomPlayer may sync the following across your devices:
- • Saved share profiles (server addresses, not passwords), including any SMB over QUIC server certificate you confirmed for that profile
- • Network credentials (via iCloud Keychain)
- • Wrapped drive-library key grants for your other devices (the private key that unwraps them never leaves each device)
- • Playlist information
- • Watch history
This data is stored in your private iCloud account and is not accessible to us.
Information We Do NOT Collect
- • We do not collect personal information
- • We do not use analytics or tracking services
- • We do not display advertisements
- • We do not sell or share any data with third parties
- • We do not have access to your network credentials or video files
Data Storage
All data remains on your device or in your personal iCloud account:
| Data | Storage Location |
|---|---|
| Network credentials | Device Keychain + iCloud Keychain (encrypted, synced) |
| Share profiles | Device + iCloud (optional) |
| Watch history | Device + iCloud (optional) |
| Cached videos | Device local storage (AES encrypted) |
| Cache encryption key | iCloud Keychain (device Keychain fallback) |
| Videos on an external drive (Pro) | The drive (encrypted; readable only in RandomPlayer) |
| Drive-library private key | Device Keychain only (never synchronised) |
| Wrapped drive-library key grants | On the drive (creator device) + your private iCloud database when iCloud sync is on |
| Confirmed SMB over QUIC server certificate | Device, in the share profile + iCloud (optional, with the profile) |
| App preferences | Device local storage |
External drive library
With Pro, you can copy videos from a share to an external drive and play them on your own iPhone, iPad, or Mac. Every video written to the drive is encrypted, with a fresh nonce for each file. Each of your devices holds its own private key in its device Keychain; that key is never synchronised. The key that unlocks the drive library is wrapped separately for each of your devices, and when iCloud sync is on those wrapped grants travel through your private CloudKit database so your other devices can open the library. The files on the drive are not readable by other apps or computers, and playback needs one of your devices signed in to the same Apple Account.
Data Retention
- • Cached videos can be deleted anytime through the app's settings
- • Videos on an external drive stay on that drive until you remove them in the app; ejecting the drive in the app leaves them in place
- • Uninstalling the app removes all local data
- • iCloud data can be managed through your device's iCloud settings
Network Access
RandomPlayer requires network access to connect to your SMB/CIFS, NFS, and WebDAV shares. The app:
- • Only connects to servers you explicitly configure
- • Plain SMB and NFS connections operate within your local network or over a VPN you configure
- • SMB over QUIC and WebDAV connections may reach internet-accessible servers, over TLS 1.3 and HTTPS respectively
- • Does not make connections to external servers beyond those you configure (except Apple's iCloud if enabled)
Server certificates for SMB over QUIC
When you use Get from Server on an SMB over QUIC profile, the app receives the certificate chain the server presents and shows you the server's own (leaf) certificate and its fingerprint. Only that leaf certificate is stored, and only after you confirm it. It is kept in the share profile on your device and, when iCloud sync is on, travels with that profile through your private CloudKit database. The app trusts only the certificate you confirmed for that server.
Children's Privacy
RandomPlayer does not knowingly collect information from children under 13. The app connects only to user-configured network shares and does not collect personal information.
Security
- • Network credentials are stored using Apple's Keychain Services with hardware encryption
- • All cached media files are encrypted at rest using AES with keys stored in iCloud Keychain
- • Videos on an external drive are encrypted with a fresh nonce per file; each device's private key stays in its own Keychain and is never synchronised
- • All network communication with your SMB, NFS, and WebDAV shares uses the authentication you configure. WebDAV connections support HTTPS encryption
- • iCloud data is protected by your Apple ID and Apple's security measures
Your Rights
You can:
- • Delete cached videos at any time in Settings
- • Remove saved share profiles and credentials
- • Disable iCloud sync in your device settings
- • Delete all app data by uninstalling the app
Changes to This Policy
We may update this privacy policy from time to time. Changes will be reflected in the "Last Updated" date above. Continued use of the app constitutes acceptance of the updated policy.
Contact
If you have questions about this privacy policy, please contact:
support@randomplayer.app