Privacy Policy
How Duskreel handles your data
This policy describes the Duskreel Android video player and its developer's handling of media, local records, network connections and usage analytics. Duskreel does not require a Duskreel account, include advertising, or provide a developer-operated cloud library for your videos.
1. Videos, subtitles and local records
With your permission, Duskreel reads videos in your device's media library or files and folders you explicitly select. It uses this access for browsing, thumbnails, playback and matching subtitles. You can use the system file picker without granting broad media-library access. Playback history, positions, subtitle preferences and app settings are stored locally; the analytics events we implement do not include video names, file paths, media URLs or subtitle text.
Offline copies and playback caches are stored in the app's local storage. Private-folder videos are copied into app-private storage and protected by an in-app password. They are not uploaded by our analytics implementation. Private videos are not separately encrypted at the application layer; this protection does not defend against root access or a compromised device. Original files are not removed by importing a private copy.
2. Network playback, sharing and casting
When you open a stream or network source, Duskreel connects to the server you choose. That server can receive your network IP address, requested media path and any credentials required for your configured source. Saved NAS passwords are encrypted locally using Android Keystore-backed encryption; they are sent to your chosen server when needed to authenticate, not included in our analytics events.
Sharing or exporting sends your chosen file to the app or destination you select. Google Cast uses Google's Cast services to find and connect to a receiver; the receiver may receive the selected network-video URL and title and fetch the video itself. Those destinations have their own data practices. HTTPS helps protect network traffic. HTTP, RTSP and some local-network protocols may be unencrypted; do not use untrusted networks for sensitive streams or credentials.
3. Usage analytics and the upload gate
Duskreel uses Amplitude to understand usage and diagnose issues such as failed playback or buffering. Before initializing this analytics SDK, the app requests an upload decision from https://us.cleanmanga.com:2338/uploadlog, identifying the product as ttplayer. The request includes a random installation identifier, locale language/country, device brand, Android version, app version, launch count and installation metadata. The server can receive the request's IP address as part of normal network processing even if it does not allow event uploads.
If the gate denies upload or cannot be reached, Amplitude events are not uploaded for that decision. If allowed, events include app interactions, playback milestones, timing/error categories, feature settings and diagnostic information, together with a random installation identifier and app/device metadata. This identifier is pseudonymous, not a name, hardware identifier or login account. It can link events from one installation; calling the events anonymous does not mean no data is collected.
The current SDK configuration disables advertising-ID, city, IP-based analytics tracking and location listening, and does not enable session replay. Network servers still necessarily process a connection's source IP. We do not put passwords, NAS addresses, filenames, full video URLs, search queries, private-media content or subtitle text into the analytics events we implement. Duskreel currently has no user-facing analytics opt-out switch; the upload gate is a service-side control, not user consent.
Amplitude's configured endpoint is in the United States. Its processing is subject to the service agreement and applicable data protection requirements. See Amplitude's privacy information. This policy does not claim that disabling SDK fields removes records already held by the service.
4. Retention and deletion
Raw Amplitude events have a 90-day retention period, measured from receipt by the service. Minimized upload-gate logs are retained for at most 7 days. Automated expiration is not instantaneous. User properties and associated installation records are handled through the deletion-request process.
Local history can be cleared in Duskreel; saved sources and offline/private copies have their own removal actions. Revoking Android permissions stops the corresponding access. Clearing app data or uninstalling removes app-local records and copies, subject to Android's behavior; external originals and files you exported remain. None of these actions alone deletes server-side analytics.
You may contact gsprin999@gmail.com with privacy questions or a deletion request. Do not send videos, passwords or signed media links. We support locating and deleting analytics records using the random installation identifier. Contact us before clearing app data or uninstalling if you need help identifying your installation. We will explain the applicable verification steps and service-provider processing limits; deletion is not automatic when you send an email.
5. Permissions and your choices
Video/storage access supports the media library; selected-folder access supports subtitle matching. Network access supports the sources you choose and the analytics gate. Foreground services and media notifications support user-started background audio and offline saving. Duskreel does not request microphone, contacts, precise-location or all-files-management access. You can review and revoke granted access in Android Settings, or use individual files instead of the full media library.
6. Support, children and changes
If you email us, your email address and the information you choose to include are used to respond. Support correspondence is used to handle your request; you can also ask us to delete that correspondence. Duskreel is not specifically designed for children; its Play target audience will be declared separately. Enabling restrictive SDK tracking options does not by itself establish compliance with children's privacy requirements. Material changes to the effective policy will be posted here with an updated date and additional notice where required.
Developer and privacy contact for Duskreel: gsprin999@gmail.com.
Duskreel 隐私政策
本政策说明 Duskreel 安卓视频播放器及其开发者如何处理媒体、本地记录、网络连接与使用统计。Duskreel 无需注册 Duskreel 账号，没有广告，也不提供由开发者运营的视频云端库。
1. 视频、字幕与本地记录
经你授权，应用读取设备视频库，或你明确选择的文件和文件夹，用于浏览、缩略图、播放及匹配字幕。不授予完整视频库权限时，也可使用系统文件选择器。观看历史、进度、字幕偏好和设置保存在本机；我们实现的统计事件不包含视频名称、路径、媒体链接或字幕文本。
离线副本和播放缓存保存在应用本地存储。私密文件夹将视频复制到应用内部存储并以应用内密码限制访问，不通过我们的统计实现上传。私密视频没有额外的应用层文件加密，不能抵御 root 或设备被入侵。导入私密副本不会删除原文件。
2. 网络播放、分享与投屏
打开串流或网络源时，应用连接你选择的服务器；该服务器会收到网络 IP、请求路径和该网络源需要的认证信息。保存的 NAS 密码使用 Android Keystore 支持的加密存储，需要认证时发给你指定的服务器，不进入统计事件。
分享或导出会将所选文件交给你选择的应用或目标。Google Cast 使用 Google 投屏服务发现和连接接收设备，接收设备可能收到网络视频链接和标题并自行获取视频。各目标的隐私规则独立适用。建议使用 HTTPS；HTTP、RTSP 和部分局域网协议可能不加密，请勿在不可信网络上传输敏感媒体或凭据。
3. 使用统计与上传开关
应用使用 Amplitude 分析功能使用、播放失败、缓冲等情况。统计 SDK 初始化前，会向 https://us.cleanmanga.com:2338/uploadlog 请求开关判断，产品标识为 ttplayer。请求包含随机安装标识、系统语言/地区、设备品牌、Android 和应用版本、启动次数及安装信息。即使服务端不允许上传事件，正常网络连接仍会让该服务器接触请求来源 IP。
服务端拒绝或请求失败时，不按该次判断上传 Amplitude 事件；允许时，上传功能交互、播放节点、耗时/错误类别、功能设置和诊断信息，以及随机安装标识和设备/应用元数据。随机标识是化名标识，不是姓名、硬件标识或登录账号；它能够关联同一次安装的事件，因此“匿名统计”不等于没有数据收集。
当前 SDK 配置禁用广告标识、城市、基于 IP 的统计定位及位置监听，不启用屏幕回放；接收服务器仍需处理网络来源 IP。我们实现的统计事件不包含密码、NAS 地址、文件名、完整视频链接、搜索词、私密媒体或字幕文本。应用当前没有由用户操作的统计关闭开关；服务端开关不等于用户同意。
Amplitude 当前使用美国端点，处理依据服务协议及适用的数据保护要求。可查看 Amplitude 隐私说明。禁用 SDK 字段不会自动删除服务端此前已经收到的数据。
4. 保留与删除
Amplitude 原始事件保留 90 天，从服务收到事件时计算；最小化的上传开关日志最多保留 7 天。自动到期清理并非即时完成，用户属性及关联安装记录通过删除申请流程处理。
观看历史可以在应用中清空；网络源、离线与私密副本使用各自的删除入口。撤回系统授权会停止相应访问；清除应用数据或卸载会按 Android 行为删除应用本地记录和副本，但不删除外部原文件和已导出文件。上述本地操作不会自动删除服务端统计。
你可通过 gsprin999@gmail.com 咨询或提出删除申请，不要发送视频、密码或带签名的视频链接。我们支持按随机安装标识定位并删除统计记录。如果需要协助识别安装，请在清除应用数据或卸载前联系我们；我们会说明必要的核验步骤及服务商处理限制。发送邮件不会立即自动删除数据。
5. 权限与选择
视频/存储权限用于媒体库，所选文件夹授权用于匹配字幕；网络用于播放你选择的来源及统计开关；前台服务和媒体通知用于用户主动开启的后台音频和离线保存。应用不申请麦克风、通讯录、精确定位或管理所有文件权限。你可在 Android 设置中查看和撤回权限，也可只选择单个文件。
6. 支持、儿童与更新
你主动发来的邮件地址及内容用于答复，你也可以申请删除相关支持邮件。Duskreel 并非专门面向儿童的产品，Play 目标年龄另行申报；限制 SDK 统计字段本身不代表满足所有儿童隐私要求。正式政策发生重要变化时会更新本页日期，并在需要时另行通知。
Duskreel 开发者及隐私联系邮箱：gsprin999@gmail.com。