AromaOtt keeps only what the player needs: your account, the devices you sign in on, your sign-ins and what you watch, each with the IP address, country and device used. It uses them to run the player (resume points, history, your language) and to protect your account. There are no ads, no advertising or analytics trackers, and your data is never sold.
What is stored with my account?
- Your username, and an email address or note if the operator added them.
- Your password, only as a one-way hash that nobody can read back.
- For two-step sign-in: the authenticator secret, encrypted, and recovery codes, as hashes.
- Your app language and player settings (audio and subtitle language, subtitle size).
- Your subscription: package, dates, and how many devices and streams you may use.
- Playlists you add: name, address or server, username and password, and when they were last checked with the counts found. Kept until you or the operator remove them.
What about my devices?
For each device you sign in on: a random device ID (a cookie in a browser, or the app's install ID), a name and type worked out from the browser or the app's model name, when it was first seen and last used, and its last IP address and country. Hardware IDs such as MAC addresses cannot be read.
A device is removed when you sign out on it, sign out everywhere, remove it, or after it has not been used for a number of days set by the operator (30 by default) and another device needs its place.
What is recorded about what I watch?
- Each playback: which channel, movie or episode, when, for how long, on which device, from which IP address and country.
- Channels and titles you open. Nothing is recorded for every button you press.
- Resume points and watched marks.
The operator's administrators can see this to answer your questions and fix problems. You can see your own devices, with their last IP address, in your account.
How long is it kept?
| Data | Kept |
|---|---|
| Watch history, opened titles, sign-in records | 90 days, then deleted automatically |
| Devices | Until signed out, removed, or idle as above |
| Resume points and watched marks | Until you mark a title not watched, or the account is deleted |
| Account and subscription history | Until the account is deleted |
| TV sign-in codes | A few minutes |
| Web server logs | 14 days |
The privacy page on aromaott.com is the reference: if a period changes, it is updated there first.
What stays on my device only?
- In the web player: My List, last channel, autoplay and content-language filter stay in your browser's storage and are not sent to us.
- In the Android app: a copy of the catalogue, your account details, My List and watch progress, kept in the app's private storage so it opens fast and works offline for what you last saw. It is deleted when you sign out.
- Diagnostics in the app shows host names only, never passwords or full addresses.
What about direct play?
For lines that play on your device, your device connects straight to the provider, so the provider sees your IP address and the player's name. For this, the app receives that line's address, username and password over your signed-in connection. For lines that play through our server, the provider sees our server's address instead.
What is not collected?
No payment details (no payments are taken on aromaott.com), no precise location (only the country, from your IP address, worked out on our own server), and no access to your camera, microphone or GPS.
Which outside services are involved?
A small number: the company hosting our server in France, a network that delivers the site and checks sign-ins for bots, and a subtitle search service that receives only the title you search for, never anything about you. None of them receives your data for its own advertising. The privacy page names each one.
What are my rights?
Our server is in the EU, so the GDPR applies: you can see, correct, delete or export your data, and object to some uses. Some of it you can do yourself in your account: remove devices, sign out everywhere, change language and player settings. For the rest, contact whoever manages your account; the privacy page explains how.