HL Player Privacy Policy
HL Player is an app that provides local video playback, highlight/tag/playlist management, subtitle generation and translation, backup and restore, and PC subtitle generation assistance. By default, users' original video/audio files and most app data are processed on the user's device or on the PC connected by the user. HL Player does not store users' full video/audio files in Firebase, does not sell personal information, and does not use personal information for personalized advertising through third-party advertising SDKs.
This English version is provided for convenience. In case of any discrepancy between the Korean and English versions, the Korean version shall prevail to the extent permitted by applicable law.Korean original
1. Controller and Contact
Questions about HL Player's processing of personal information, or requests for access, correction, deletion, or suspension of processing, may be submitted using the contacts below.
| Privacy controller | Pangaeha, HL Player operator |
|---|---|
| Privacy inquiries and deletion requests | privacy@hlplayer.app |
| General support | support@hlplayer.app |
HL Player is currently provided through an individual developer account before business registration and without in-app purchases. The Google Play developer name is Pangaeha. If business registration is completed or paid features/advertising are introduced, the controller information, terms, Play Console information, and Play Data Safety responses will be updated together.
2. Personal Information Processed, Purposes, and Retention
| Category | Items processed | Purpose | Retention and deletion |
|---|---|---|---|
| App activity information | App launch, major feature usage, guide display/click events, and similar app interaction events when the user allows anonymous usage statistics in the first-run prompt or Settings. The app is designed not to send local file names, paths, video titles, or subtitle text as event values. The current release disables Google Analytics Advertising ID collection, and Play Store referrer values are used only as campaign-level reference signals. | Service quality improvement, feature usage analysis, and error cause analysis | Collection is off by default, and users may allow, deny, or change it in the first-run prompt or Settings. Retention is subject to Firebase Analytics settings and Google/Firebase retention policies. Users may reset device-side identifiers by deleting the app, deleting app data, or using platform privacy settings. |
| Diagnostic information | Crashlytics crash logs, stack traces, app/device diagnostic information, and redacted non-fatal error context. Release builds filter sensitive local content information such as file names, local paths, video titles, and subtitle text. Non-fatal custom keys are limited to values such as app area, operation, error code, and severity. | App error analysis, stability improvement, and incident response | Subject to Firebase Crashlytics settings and Google/Firebase retention policies. Local debug logs are not automatically collected as release artifacts; only crash/non-fatal reports and Crashlytics logs/custom reasons sent to Crashlytics are filtered and transmitted. |
| Support diagnostics | When the user opens feedback/support, the app may prepare app version, operating system name/version, Android SDK version, manufacturer, model, and app language for a support email or copied report. Android ID, serial number, fingerprint, board, bootloader, hardware, hardware ID, codename, local file names, paths, video titles, and subtitle text are restricted from this diagnostic set. | Helping the user include basic app/device environment information in a support inquiry selected by the user | The app does not upload this automatically. If the user sends the email or copies the content, it is handled according to the user's selected email app, clipboard, email provider, and the HL Player support mailbox policies. |
| Remote app configuration and notices | Requests to https://hlplayer.app/app-config/android.json, config version, cache max age, update notice build numbers, notice title/body/URL, notice display period, feature flags, local cache, and local notice/recommended-update dismissal state |
Providing important notices, forced/recommended update messaging, temporary feature gating, and launch safety controls | The config JSON may be cached on the device according to a 1-72 hour max age, defaulting to 24 hours, and is removed by app data deletion. During the request, Firebase Hosting access logs may record ordinary HTTPS request metadata such as IP address, User-Agent, requested URL, and timestamp. |
| Anonymous authentication and security information | Firebase Anonymous Auth UID, authentication tokens, Firebase App Check tokens, and verification information | Creating PC subtitle generation sessions, protecting Firebase requests, and preventing abuse | The anonymous UID may be reset when app data is deleted or the app is reinstalled. Server-side deletion requests may be sent to privacy@hlplayer.app. |
| PC subtitle generation connection metadata | Session ID, created/updated/expires timestamps, SDP offer/answer, ICE candidates, connection status, progress status, selected model information, audio size, language tag, and batch job count | Establishing WebRTC connections and syncing subtitle generation progress between the mobile app and the user's PC browser/local engine | Sessions usually have a short expiration time of 20 minutes or less and are deleted through Firestore TTL and session cleanup logic. TTL deletion may not run immediately. |
| Request limiting information | Hash-based rate limit counters, time keys, and expiration timestamps created from a Firebase UID or request IP | Preventing abuse of PC subtitle generation link creation and protecting the service | Configured to be deleted after about 3 days through Firestore TTL. The original IP address is not stored in rate limit documents and is used only as a hash input. |
| Model download information | Selected model URL, model ID, model size, SHA-256, and network metadata sent during download requests such as IP address and User-Agent | Downloading user-selected local subtitle models and verifying integrity | Model files are stored on the user's device or PC and may be removed through the app model management screen, PC engine management features, file manager, app data deletion, or app deletion. External storage request logs are subject to each provider's policy. |
| Subtitle translation SDK and model information | Device information, app information, performance metrics, error codes, feature events, model download events, and source/target language settings processed by Google ML Kit Translate SDK. Subtitle text to be translated and translation results are designed to be processed on the device. | On-device subtitle translation, translation model download, and performance/error diagnostics | Translation models are stored on the device and may be removed through app features or app data deletion. ML Kit SDK diagnostics and usage analytics data are subject to Google's policies. |
| Notification and background processing information | Playback, media processing, model download, subtitle generation, compact video generation progress status, and Android notification permission/channel settings | Showing task progress and ensuring stable background playback and long-running processing | Processed on the device by default. Users can control this through Android notification settings, stopping tasks in the app, deleting app data, or deleting the app. |
| Local media and generated data | Video/audio/subtitle files selected or authorized by the user, thumbnails, highlights, tags, playlists, multiview presets, subtitle generation results, compact videos, trash items, and search/sort/view settings | Local video playback, organization, highlight management, subtitle display/generation, compact video generation, trash/restore, and preserving user settings | Stored on the user's device by default. Users may remove data through in-app deletion, emptying trash, resetting settings, deleting app data, using a file manager, or deleting the app. Original video files created or owned by the user are not deleted merely by resetting app data. |
| Profile and backup/restore data | Profile name, profile color, app language, per-profile settings, achievement state, backup storage location, and backup package (.hlbk) contents such as video metadata, highlights, tags, playlists, multiview presets, and settings |
Profile switching, preserving app language/settings, backup creation, restore, and moving data between devices | Stored by default on the user's device or in a user-designated storage location. Users may directly delete backup files or delete related data through the app's backup/restore and reset features. |
| Sharing and export data | Highlights, subtitles, compact videos, backup files, and metadata required for share link processing when the user chooses sharing or export. Share links may include file name, part of a file hash, file size/length, tag name/color, highlight time, title, description, repeat settings, and, if a file hash is unavailable, part of the original path. | Sharing, exporting, or opening in another app or browser as selected by the user | After a share link or export file is created, it may be processed according to the user's selected storage location, receiving app, browser, Firebase Hosting access logs, or external service policies. Users should review the target and contents before sharing. |
3. Local Video, Audio, Subtitles, AI, and Translation Processing
- HL Player does not upload or store users' full original video/audio files in Firebase.
- Playback, organization, highlights, and local subtitle generation data processed on a mobile device are handled on the device by default.
- When using PC subtitle generation, audio selected by the user may be sent through a WebRTC connection to the user's PC browser or local PC engine for processing.
- The PC engine operates as a
127.0.0.1local API on the user's PC and processes selected audio and models on the user's PC. - Users may save or delete subtitle generation results. HL Player does not use users' video, audio, or subtitle content for model training.
- When Google ML Kit Translate is used for subtitle translation, the text to be translated and the translation results are processed on the device. However, the ML Kit SDK may communicate with Google servers to process model updates, bug fixes, hardware accelerator compatibility information, performance metrics, and usage metrics.
4. Third-Party Provision and Processing Delegation
HL Player does not sell personal information. The following external services are used as necessary for service provision, security, analytics, error response, model download, and PC connection.
| Provider | Role | Items processed | Retention and management standards |
|---|---|---|---|
| Google / Firebase | Analytics, Crashlytics, Anonymous Auth, App Check, Firestore, Cloud Functions, Hosting, STUN | App activity, crash/diagnostics, anonymous UID, App Check verification information, PC session metadata, WebRTC network metadata, remote app config requests, Firebase Hosting access logs, and share link URL/path metadata | Subject to Firebase settings, Firestore TTL, session cleanup logic, Firebase privacy and security standards, and the Google Privacy Policy. |
| Google ML Kit | On-device subtitle translation, translation model download, SDK diagnostics, and usage analytics | Device information, app information, performance metrics, error codes, feature events, model download events, and source/target language settings. Translation input text and output results are processed on the device. | Translation models are stored on the device. SDK diagnostics and usage analytics data are subject to Google ML Kit terms and privacy standards. |
| Hugging Face | Downloading user-selected whisper.cpp model files | Model download request URL, IP address, User-Agent, and other network metadata | Model files are stored on the user's device or PC, and request logs are subject to the Hugging Face Privacy Policy. |
| GitHub | Providing download paths for models, open-source components, or release files when used | Download request URL, IP address, User-Agent, and other network metadata | Downloaded files are stored on the user's device or PC, and request logs are subject to the GitHub Privacy Statement. |
| Google Play | App distribution, updates, and payment processing if payment features are enabled | Account, installation, payment, and refund information directly processed by the Play Store. HL Player currently does not accept in-app payments. | Subject to the Google Privacy Policy, Google Play policies, and the user's Google account settings. |
| User-selected sharing destination | Sharing, exporting, and opening in another app | User-selected highlights, subtitles, compact videos, backup files, and share link metadata | After sharing, the receiving app, storage location, or external service policies apply. |
5. Overseas Transfer and Overseas Processing
Some external services used by HL Player may process data on infrastructure outside Korea. Firestore/Cloud Functions for PC subtitle generation sessions currently use the asia-northeast3 region.
| Provider | Processing country or region | Transfer method | Items and purpose | Retention period or criteria |
|---|---|---|---|---|
| Google / Firebase | Countries or regions where Google/Firebase infrastructure is located. PC session Firestore/Functions use asia-northeast3. |
Firebase SDK, HTTPS/TLS, WebRTC/STUN requests | App activity, diagnostic information, anonymous UID, App Check information, PC session metadata, remote app config request metadata, and network metadata | Subject to Firebase settings, session TTL, service cleanup logic, Firebase privacy and security standards, and the Google Privacy Policy. |
| Google ML Kit | Countries or regions where Google infrastructure is located | ML Kit SDK communications and model download requests | Device information, app information, performance metrics, error codes, feature events, model download events, and source/target language settings | Subject to Google ML Kit terms and privacy standards and the Google Privacy Policy. |
| Hugging Face | Countries or regions where each provider's infrastructure is located | HTTPS download requests selected by the user | whisper.cpp model file download request URL, IP address, User-Agent, and other network metadata | Subject to log and retention policies in the Hugging Face Privacy Policy. |
| GitHub | Countries or regions where GitHub infrastructure is located | HTTPS download requests selected by the user | Model, open-source, or release file download request URL, IP address, User-Agent, and other network metadata | Subject to log and retention policies in the GitHub Privacy Statement. |
| Google Play | Countries or regions where Google infrastructure is located | Google Play app distribution and payment systems | Installation, update, and payment/refund information if payment features are enabled | Subject to Google Play policies and the user's Google account settings. |
6. User Rights and How to Exercise Them
Users may submit requests for access, correction, deletion, or suspension of processing to privacy@hlplayer.app. Local data may be deleted directly through app features, the device file manager, app data deletion, or app deletion. If server-side deletion of Firebase anonymous UID or PC session-related data is needed, users may request it through the same contact. HL Player does not provide email or social login accounts, and the Firebase anonymous UID is used as a technical identifier for PC subtitle generation and security purposes.
7. Destruction Procedures and Methods
- Server data whose processing purpose has been achieved or retention period has expired is deleted according to Firebase TTL, service cleanup logic, or operator deletion procedures.
- Local video, subtitle, backup, model files, and per-profile app data are stored on the user's device or PC and may be deleted directly by the user.
- Electronic server data managed by the operator is deleted in a manner that makes recovery difficult, and external service logs are subject to each provider's retention and deletion policies.
8. Security Measures
- Remote communications use HTTPS/TLS, Firebase SDK secure channels, and encrypted WebRTC connections.
- Firebase App Check is used to protect callable function requests.
- Firestore security rules limit PC session access subjects and expiration times.
- Downloaded models are verified using SHA-256 and file size information in the manifest.
- Crash/non-fatal reports, logs, and custom reasons sent to Crashlytics are filtered so that local file names, local paths, video titles, and subtitle text are not included. Local debug logs themselves are not separately collected as release artifacts.
- The PC engine is designed to bind only to the local address
127.0.0.1, and protocol/browser policy values registered during installation can be cleaned up by the uninstaller.
9. Automatic Collection Tools and Online Behavioral Information
The HL Player app currently does not provide personalized advertising through third-party advertising SDKs. If the user allows anonymous usage statistics, Firebase Analytics may use SDK identifiers such as app instance identifiers for app usage statistics. This collection can be turned off at any time in app Settings. The current release disables Google Analytics Advertising ID collection, and Play Store referrer values are used only as campaign-level reference signals. The PC subtitle generation web page may use browser local storage such as localStorage and IndexedDB for session processing, model cache, and preserving user selections. Users may delete this data in their browser settings.
10. Children's Privacy
HL Player is not primarily directed to children under the age of 14. If processing of personal information of a child under 14 is confirmed, or if a legal representative submits a deletion request, necessary measures will be taken.
11. Automated Decisions
HL Player does not perform fully automated decisions that have a significant effect on users' rights or obligations. Subtitle generation and analysis assistance features are tools that process user-selected content and suggest results, and users should verify the accuracy of those results.
12. Changes to This Privacy Policy
This Policy may be revised due to changes in laws, services, SDKs used, or data processing methods. Important changes will be announced through the app or official web page.
13. Remedies for Rights Infringement
If users need counseling or dispute resolution related to privacy infringement, they may use relevant institutions such as the Korean Privacy Portal, the Personal Information Infringement Report Center, or the Personal Information Dispute Mediation Committee.
This Policy applies to the HL Player app, the PC subtitle generation web page, and the PC engine distribution page.