Privacy overview for Surge Player
Effective October 3, 2026. This policy explains the information Surge Player uses to provide accounts, purchases, support, and media-player features.
What Surge Player does
Surge Player is a streaming player and media library experience. Users connect their own supported libraries and services, and the app helps organize playback, profiles, favorites, resume watching, and optional premium integrations.
Information we may collect
- Basic account and billing details if premium access is enabled. If you choose Google sign-in, this can include your verified Google account identifier, email address, display name, and profile image URL.
- An app-generated installation identifier, app version, platform, and optional device label when you activate access or pair a device. The installation identifier is hashed before server storage.
- Anonymous first-party activation events: first app launch, first source connection, first playback qualification, and a daily app session. These records contain a hashed installation identifier, app version, platform, and timestamp. They do not contain account identity, source details, library contents, media titles, or viewing history. Counts represent app installations, not unique people.
- The title, media type, and optional release year when you ask Surge Player to find a trailer. Trailer lookups are cached without your Surge account or installation identifier.
- Device and app diagnostics that you choose to submit for support and troubleshooting.
- Purchase and entitlement records needed to provide access, restore purchases, prevent fraud, and meet legal obligations.
Google sign-in links your Surge Player access across devices. The Google account identifier is hashed before storage. Signing in does not upload the passwords, tokens, or server addresses for your personal IPTV, Plex, Emby, Jellyfin, or other connected media services.
Profiles, favorites, resume positions, home-screen preferences, integration tokens, server addresses, and source credentials remain on your device unless a future optional sync feature clearly asks for permission.
Data transmission and connected sources
Surge Player's account, purchase, and entitlement services use encrypted HTTPS connections. For compatibility, the app can also connect to local or third-party media sources that a user configures with an HTTP address. Traffic sent to an HTTP source is not encrypted by that source, so use HTTPS whenever the connected service supports it.
Optional services such as Trakt communicate directly with that service after you enable and authorize the integration. Depending on the feature, this can include media identifiers, watch history, and playback progress. Those transfers are governed by the connected service's terms and privacy policy; Surge does not copy the service token or viewing history to its own account service.
Account deletion and retention
You can delete your Google-linked Surge Player account from Account & Entitlement settings or through the public account deletion page. Deletion removes your account profile metadata, account sessions, and the link between the account and its entitlement. It does not cancel or refund a store purchase, erase local app data, or affect services you connected independently.
Purchase, entitlement, security, and fraud-prevention records may be retained where necessary to provide paid access, comply with financial or legal obligations, and prevent abuse. Contact privacy@surgeplayer.com with a data request.
What we do not claim
Surge Player does not present itself as the source of third-party media catalogs or streams. Access is driven by user-provided services and supported integrations.
Kids profiles
Kid-designated profiles are intended to stay inside parent-curated home surfaces protected by the household PIN. Parents remain responsible for choosing the content that appears there.
Contact
For privacy questions, use privacy@surgeplayer.com.