XTREMI

What Xtremi sends, and to whom

Written on 3 November 2026 from the code of the Android app, version 1.1.0, and of this page. It says what the code does and nothing more.

What Xtremi is

Xtremi plays the IPTV service you already have. It comes with no channels, no content and no account. It does not offer or sell a service, and it has no sign-up.

Who sees what

The app can work in two ways, and the first start asks which one you have.

• With an Xtremi server (you type its address). The app talks to that server, and to nobody else about your viewing. The server receives what the app asks it for: which profile is watching, what you open, search for, rate, mark as seen, add to a list and play, and the device's name (its model, or the name you gave it) with a random number the app made for this installation. Whoever runs the server can see that.
• On its own (you type your provider's address, username and password). The app talks to your IPTV provider directly: it sends that login and a User-Agent (Xtremi/1.1.0 unless you typed another), and asks for the lists, programmes and streams your account has. Your provider can see that, as it can for any player.

Video goes straight from your provider to your device, or through your server if you use one.

Other places the app contacts

• Google Fonts. The app downloads its three typefaces (Big Shoulders Display, Figtree and VT323) from Google the first time they are needed, and keeps them. Google receives the request, as for any download: your IP address and your device's software details.
• TMDB (image.tmdb.org). Posters and backdrops are loaded from TMDB's picture servers when the server or your provider gives their addresses. TMDB receives the request in the same way.
• Other picture addresses. Pictures such as channel logos are fetched from the addresses your server or provider gives, wherever those point.
• YouTube. A trailer opens in the YouTube app or your browser, which is then YouTube's to handle.

The app has no analytics, advertising or crash-reporting code, and sends nothing to its makers. Its only permission is internet access. It allows plain http connections, because home servers and many providers use them.

What stays on your device

• Your profiles' choices, and, when the app works on its own, your marks, ratings and lists.
• The server address you typed, a cache of pictures and of the last lists it showed.
• The provider login, if you typed one or your server handed it over behind the household PIN: in the device's protected storage (the Android Keystore). It is sent only to your provider, and the app never shows it again.

Removing the app removes all of it.

This page

• It is delivered by Cloudflare. Cloudflare receives each visit as any web host does: your IP address, your browser's name and the page or file you asked for.
• The page reads your browser's name only to put your own device first. It stores nothing about you, sets no cookies, runs no script, and loads nothing from anyone else.
• It has no analytics.

Back to the downloads