WWPlayer / Legal
隐私政策
本政策说明 WWPlayer 在本地播放、连接用户指定的媒体来源及提供在线元数据功能时，如何处理相关数据。
重点摘要
- WWPlayer 不出售个人数据，不接入广告追踪或行为分析 SDK。
- 服务器地址、登录凭据、应用设置和本地媒体索引主要保存在您的 Windows 设备上。
- 使用在线功能时，应用会向您选择的服务器、第三方服务或 WWPlayer 元数据服务发送完成该功能所必需的数据。
- WWPlayer 元数据服务不会接收您的媒体文件、服务器密码、访问令牌或 OneDrive、Trakt 凭据。
- 诊断日志保存在本地，不会自动上传；只有您主动提供时我们才会收到。
1. 适用范围与处理原则
本政策适用于 WWPlayer Windows 桌面应用及由 WWPlayer 运营、供应用访问的元数据服务。您自行添加的 Emby、Jellyfin、飞牛影视、WebDAV、OpenList、SMB、OneDrive 或其他服务由相应提供方独立运营，其数据处理同时受各自隐私政策约束。
我们遵循功能所需、范围明确和最少必要的原则处理数据。除本政策说明的服务运行、安全防护和用户主动联系场景外，我们不会将应用中的账号或媒体数据提供给开发者。
2. 本地保存的数据
根据您使用的功能，WWPlayer 可能在 Windows 标准应用数据目录中保存：
- 媒体来源与账号配置：来源类型、服务器地址、用户名、密码、访问令牌、所选线路及 OneDrive、WebDAV、OpenList 等连接配置。
- 应用偏好：界面、播放、字幕、弹幕、快捷键、网络代理、窗口和功能开关设置。
- 媒体与观看数据：本地媒体索引、匹配关系、播放进度、收藏状态、片单及用于展示的媒体信息。
- 缓存与诊断：图片、元数据、缩略图、临时字幕、播放缓存和本地日志。
- 应用身份：随机生成的安装标识，以及由 Windows 安全存储保护的元数据服务密钥。
本地配置可能包含敏感凭据。请仅在受信任的设备和 Windows 账户中使用 WWPlayer，并妥善保管导出的配置文件及备份密码。
3. 网络请求与第三方服务
WWPlayer 仅在相应功能被使用或启用时发起网络请求。请求接收方、主要用途和可能发送的数据如下：
上述服务通常会接收到建立互联网连接所必需的网络信息，例如 IP 地址、请求时间和客户端网络标头，并可能依其自身政策处理这些信息。
4. WWPlayer 元数据服务
应用通过 data.517778.xyz 获取公开媒体元数据、海报与背景图、评分、外部 ID、流媒体可用性和在线字幕。该服务可能向 TMDB、TVDB、Fanart.tv、OMDb、TheAudioDB、MusicBrainz、Cover Art Archive、OpenSubtitles 或 SubHD 请求公开信息。
身份与安全记录
首次连接时，应用会提交随机安装标识、安装公钥和应用版本。服务端保存的是经密钥哈希处理的安装标识及 IP 地址哈希，并按分钟汇总请求类型、结果和数量，用于客户端鉴权、速率限制、故障排查和防止滥用。请求活动汇总最长保留 90 天。
查询与缓存
元数据查询可能包含搜索词、媒体标题、年份、季集信息或 TMDB、IMDb、TVDB 等公开 ID。为提高响应速度和控制上游请求量，通用元数据结果最长缓存 90 天，字幕搜索结果最长缓存 7 天；在线字幕文件本身不会保存在网关缓存中。缓存按查询键共享，不用于建立用户观看档案。
基础设施提供方仍可能为保障网络安全和可用性而短期处理常规连接日志。WWPlayer 不使用这些记录投放广告或进行跨服务行为画像。
5. 存储、备份与安全
设置、账号配置和索引数据保存在本地应用数据目录，可重新生成的缓存和日志保存在本地缓存目录。不同安装方式下的具体路径由 Windows 管理。
当您主动启用 WebDAV 配置备份时，备份内容会在设备端使用您设置的备份密码加密后，再上传到您指定的 WebDAV 服务。该 WebDAV 服务的地址和登录凭据保存在本地；备份密码不会发送给 WWPlayer 元数据服务。若遗失备份密码，我们无法恢复备份内容。
我们采取访问控制、传输加密、标识哈希和系统安全存储等合理措施保护所处理的数据，但任何本地设备、网络传输或第三方服务都无法保证绝对安全。
6. 日志与问题反馈
WWPlayer 会在本地生成运行日志，用于排查播放失败、网络错误和应用异常。日志不会自动上传。日志可能包含服务器域名或地址、媒体请求状态、组件版本及错误信息；敏感令牌会尽可能从诊断输出中移除，但您在主动提交日志前仍应检查并遮盖不希望分享的信息。
7. 购买与应用授权
Microsoft Store 负责 WWPlayer 的下载、购买、支付和应用授权。WWPlayer 可能读取设备上的 Store 授权结果，以判断功能是否可用，但不会接收或保存您的完整支付资料。相关数据由 Microsoft 依其隐私政策处理。
8. 保留与删除
本地数据通常会保留到您在应用内删除来源、断开账号、清理缓存，或通过 Windows 卸载并清除应用数据。删除服务器或媒体来源不会代替对应服务端的数据删除；如需删除 Emby、Jellyfin、Trakt、OneDrive 或其他第三方账户数据，请使用相应服务提供的功能。
元数据服务的缓存按前述期限自动清理。安装鉴权记录会在服务运行、安全审计和防滥用所需期间保留。您可以通过下方联系渠道申请停用或删除与安装标识关联的服务端记录。
9. 您的选择与权利
- 不连接在线账号或不使用相应功能，即可避免向该服务发送数据。
- 在应用内删除服务器、媒体来源，断开 Trakt 或 OneDrive，并清理图片、元数据和播放缓存。
- 通过 Windows 应用设置管理或清除 WWPlayer 的本地数据。
- 联系我们查询、更正或删除 WWPlayer 元数据服务中的安装鉴权记录，但法律、安全或技术上必须保留的记录除外。
10. 政策变更与联系我们
当数据处理方式、产品功能或适用要求发生实质变化时，我们会更新本政策和页面顶部日期。重大变更会在合理范围内通过应用更新说明或社区渠道提示。
请通过 WWPlayer 社区联系开发者，并在消息中注明“隐私请求”。请勿在公开群组中发送密码、访问令牌或完整日志。
打开 WWPlayer Telegram 社区English version
WWPlayer Privacy Policy
Effective and last updated: September 11, 2026
This policy explains how the WWPlayer Windows desktop application and the WWPlayer-operated metadata service process data when you play local media, connect media sources, and use online metadata features.
Summary
- WWPlayer does not sell personal data and does not include advertising trackers or behavioral analytics SDKs.
- Server addresses, credentials, settings, and local media indexes are primarily stored on your Windows device.
- When you use an online feature, the app sends only the data needed for that feature to your selected server, the relevant third party, or the WWPlayer metadata service.
- The WWPlayer metadata service does not receive your media files, media-server passwords or tokens, or your OneDrive or Trakt credentials.
- Diagnostic logs remain local unless you choose to share them.
1. Scope and principles
This policy covers the WWPlayer Windows desktop app and the WWPlayer-operated metadata service used by the app. Media sources and accounts that you add, including Emby, Jellyfin, FN Media, WebDAV, OpenList, SMB, OneDrive, and other services, are independently operated and are also governed by their providers' policies.
We process data only for defined product, service-security, and support purposes. We do not provide account or media data from the app to the developer except as described in this policy or when you voluntarily contact us.
2. Data stored on your device
Depending on the features you use, WWPlayer may store media-source types and addresses; usernames, passwords, access tokens, and selected routes; OneDrive, WebDAV, and OpenList connection settings; interface and playback preferences; local media indexes and matches; watch progress, favorites, and playlists; artwork, metadata, thumbnails, temporary subtitles, playback cache, and diagnostic logs. The app also creates a random installation identifier and a metadata-service key protected by Windows secure storage.
Local configuration may contain sensitive credentials. Use WWPlayer only on a trusted device and Windows account, and protect exported configuration files and backup passwords.
3. Network requests and third parties
- Your media sources: WWPlayer sends the address, required credentials, library and playback requests, watch progress, and favorite actions directly to the source you selected.
- WWPlayer metadata service: receives hashed installation and network identifiers, app version, request category, search terms, media titles or public IDs, and subtitle search criteria for authentication, abuse prevention, and delivery of metadata, artwork, ratings, availability, and subtitles.
- Trakt: receives authorization tokens, account information, lists, watch states, ratings, and playback progress only after you connect and use Trakt.
- Microsoft: handles OneDrive authorization and cloud-drive data, and Microsoft Store purchase and license status. WWPlayer does not directly process your Microsoft password or payment-card details.
- User-configured endpoints: custom danmaku, subtitle, icon-library, and module providers receive the endpoint, authentication data, titles, public IDs, or search parameters needed for the request.
These services normally receive connection information such as IP address, request time, and network headers, and may process it under their own policies.
4. WWPlayer metadata service
The app uses data.517778.xyz to retrieve public media metadata, artwork, ratings, external IDs, streaming availability, and online subtitles. The service may query TMDB, TVDB, Fanart.tv, OMDb, TheAudioDB, MusicBrainz, Cover Art Archive, OpenSubtitles, or SubHD.
At enrollment, the app sends a random installation ID, a public key, and its app version. The service stores keyed hashes of the installation ID and IP address and minute-level aggregates of request category, outcome, and count for authentication, rate limiting, troubleshooting, and abuse prevention. Request-activity aggregates are retained for up to 90 days.
Queries may include search terms, titles, years, season or episode numbers, and public IDs such as TMDB, IMDb, or TVDB IDs. General metadata results may be cached for up to 90 days and subtitle search results for up to 7 days. Subtitle file bytes are not stored in the gateway cache. Shared query caches are not used to build a user viewing profile. Infrastructure providers may temporarily process ordinary connection logs for security and availability.
5. Storage, backups, and security
Settings, account configuration, and indexes are stored in the app's local data directory. Regenerable caches and logs are stored in its local cache directory. Windows determines the exact paths for each installation type.
If you enable WebDAV configuration backup, the backup is encrypted on your device with the backup password you provide before it is uploaded to your chosen WebDAV service. The WebDAV endpoint and login credentials remain in local settings, and the backup password is not sent to the WWPlayer metadata service. We cannot recover an encrypted backup if you lose its password.
We use reasonable safeguards including access controls, transport encryption, keyed identifier hashing, and operating-system secure storage, but no device, transmission, or third-party service can be guaranteed completely secure.
6. Logs and support
WWPlayer creates local logs to diagnose playback, network, and application errors. Logs are not uploaded automatically. They may contain server domains or addresses, request status, component versions, and error details. Sensitive tokens are removed from diagnostic output where practical, but you should still review and redact logs before sharing them.
7. Purchases and licensing
Microsoft Store handles app delivery, purchases, payment, and licensing. WWPlayer may read the Store license result available on your device to determine feature access, but it does not receive or retain your full payment information.
8. Retention and deletion
Local data generally remains until you remove a source, disconnect an account, clear caches, or uninstall the app and clear its Windows app data. Removing a source in WWPlayer does not delete data held by that provider.
Metadata caches expire under the periods described above. Installation authentication records are retained as needed to operate and secure the service. You may contact us to request deactivation or deletion of server-side records associated with an installation identifier.
9. Your choices and rights
You can avoid sending data to an online service by not connecting that account or using that feature. You can remove sources, disconnect Trakt or OneDrive, clear caches, and manage or clear local data through Windows. You may contact us to request access, correction, or deletion of WWPlayer metadata-service authentication records, subject to records that must be retained for legal, security, or technical reasons.
10. Changes and contact
We will update this policy and the date above when processing practices, product features, or applicable requirements materially change. Significant changes may also be announced through release notes or community channels.
Contact the developer through the WWPlayer community and include “Privacy Request” in your message. Do not post passwords, access tokens, or complete logs in a public group.
Open the WWPlayer Telegram community