RUSCUS Buy a licence Panel English

Privacy

This page describes what the Ember application stores, what it deliberately does not store, and how to have your data deleted. It is written from the actual code and database, not from a template.

Last updated 13 October 2026 · RUSCUS YAZILIM A.Ş.

What Ember is

Ember is a media player. It contains no channels, films or series and it sells no subscription to any. Whatever you watch comes from a playlist you or your reseller supplies. We are not the source of that content and we do not host it.

We do not record what you watch

There is no watch history, no viewing profile and no per-title analytics anywhere in the system. This was a deliberate design decision, not an omission. Your reseller cannot see what you watch either, because we never collect it.

What we store

Device record

A device ID issued on first launch (the one on your home screen). Alongside it: platform, app version, device model and its technical specs (system version, memory, screen resolution, video decoding support — used to tune playback to the device), interface language, the country derived from your IP address, the last IP address seen, and the time you were last online. We also store the system’s install identifier — Android ID on Android, identifier for vendor on iPhone and iPad, the system ID on Mac — so that reinstalling the app recognises the same device and its licence is not lost. It is not the advertising identifier. This is what makes a licence belong to a device rather than to a person.

Licence and playlists

Your licence period and where it came from, plus the playlists defined for the device: name, type and address. For Xtream playlists the username is stored and the password is stored encrypted. Note that an M3U link can itself contain a username and password; such a link is stored as you entered it. Your device PIN is stored as a hash, never in plain text.

Health measurements

When a playlist was last refreshed, how many entries it returned, any error it reported, the round-trip latency to our server, and the timestamps of your first and last playback. Timestamps only — never what was played. This exists so a reseller can tell “their internet is down” from “the playlist is broken” without calling you.

App errors and performance

When the app hits an error it sends a short message (at most 200 characters), the screen it happened on, the app version and the country. It also sends timings — how long a playlist or a stream took to open, whether playback stalled, how many frames were dropped — and the player’s error text when a stream fails. On Android it also records the connection type (cable, Wi-Fi or mobile data), the Wi-Fi band, signal strength and link speed, and we keep a shortened form of the IP address (the first three parts) with each measurement. The network name and your location are never read. This lets us and your reseller tell whether stuttering comes from the device, the home Wi-Fi or the stream, and suggest a fix. Before these texts are stored, stream addresses are cut down to the server name and credentials are removed — no channel or title names are kept. Both are deleted after 30 days.

What stays on your device

Watch progress, favourites, downloads and a cached copy of your playlist are kept only on the device, never sent to us. Uninstalling the app removes them.

Advertising

Only if you choose it

Ember can extend your trial when you choose to watch a rewarded advertisement. Advertisements appear only on the setup screen, never during playback, never over content, and are shown only after you tap the button. When that button appears, the advertising SDK starts, asks for consent where the law requires it and prepares an advertisement in advance so it opens without delay. Ember also shows its own promotional messages on the same screen; we record that one was shown, for how long, and whether it was tapped. A completed rewarded advertisement is confirmed to us by Google with your device ID so the reward reaches the right device. Advertising and reward records are deleted after one year.

Google AdMob

Advertisements are served by Google AdMob, which may process your device’s advertising identifier and IP address under Google’s own terms. In the European Economic Area and the United Kingdom you are asked for consent first; on iOS you are additionally asked for tracking permission. Declining either is fine — the app keeps working and advertisements simply become non-personalised.

Purchases and other services

In-app purchases

A licence bought in the app is paid through Google Play or the App Store; we never see card details. The app sends us the store’s purchase token, we verify it with Google or Apple, and we keep the order or transaction ID, the product, the date and the store environment. These records are kept for as long as tax and accounting law requires (up to 10 years), detached from the device if the device is deleted.

Film and series information

To show posters, descriptions and episode names, the app looks up the title (and year or catalogue number) of a film or series at bytv.net, a separate service. Your device ID is not sent, but bytv.net sees the title and your IP address, as any website would.

Services that process data for us

Google AdMob (advertising), Google Play and Apple (purchases), Cloudflare (network) and Hetzner (servers). Each receives only what its job needs. Your playlist provider, chosen by you or your reseller, receives your connections directly from the app; we are not part of that exchange.

Who is responsible, and where the data sits

The company behind Ember

RUSCUS YAZILIM ANONİM ŞİRKETİ (Aliağa / İzmir, Türkiye) publishes Ember Player, runs the service and is responsible for the data described on this page — “controller” under the GDPR, veri sorumlusu under the KVKK. Send any request to hello@ruscus.net. Full registry details are on the contact page.

Your data is stored in Germany

Every record described above lives on a server in Germany, inside the European Union, rented from Hetzner Online GmbH. Our own staff reach it from Türkiye to run and support the service; nobody else does. Traffic to the site and the API passes through Cloudflare, which sees connection data but not the contents of your playlists.

Why we are allowed to hold it

Under the GDPR the legal bases are: performance of a contract for the device record, licence, playlists and purchases — without them the app cannot do its job; legal obligation for purchase records kept for tax and accounting; legitimate interests for health measurements, failed-content reports, error and performance records, film information lookups and abuse prevention, kept deliberately narrow, which is why there is no watch history; and consent for advertising, asked before any advertisement is requested and withdrawable at any time.

Your rights, wherever you live

Everyone, not just the EU

We apply one standard to every user: you may ask what we hold about your device, have it corrected, have it deleted, have a copy of it, object to a use of it, or withdraw consent you gave for advertisements. We do not charge for this and we do not treat you differently for asking. The sections below add what specific laws require on top.

European Economic Area & United Kingdom

Under the GDPR and the UK GDPR you have the rights of access, rectification, erasure, restriction, portability and objection, and the right to withdraw consent at any time without affecting what was lawful before. You may also complain to your national data protection authority — in the UK, the Information Commissioner’s Office — without contacting us first, although we would rather you did.

Türkiye — KVKK

Under Law No. 6698 (KVKK) Article 11 you may learn whether your personal data is processed, request information about it, learn its purpose, know the third parties it is disclosed to, have it corrected or deleted, have those corrections notified onward, object to a result produced solely by automated analysis, and claim compensation for damage caused by unlawful processing. Applications are answered within 30 days at no charge; if you are not satisfied you may complain to the Kişisel Verileri Koruma Kurulu.

California

Under the CCPA/CPRA you may request to know, delete or correct the personal information we hold, and you may opt out of its sale or sharing. We do not sell personal information. The rewarded advertisements served by Google AdMob may be personalised, which the CPRA can treat as “sharing”; you opt out by declining personalised ads when asked, by turning on your device’s “opt out of ads personalisation” or “limit ad tracking” setting, or by never tapping the advertisement button. Rewarded advertisements extend your trial; that is the only incentive involved. You will not be discriminated against for exercising any of this.

Other countries

Brazil (LGPD), Switzerland (FADP), Canada (PIPEDA), Australia and other jurisdictions grant comparable rights over access, correction, deletion and complaint. We honour them on the same terms as the rights above rather than keeping one policy per country. Where a law requires a local representative or a specific procedure we do not yet have, say so in your request and we will tell you plainly how we can handle it.

How to make a request

Write to hello@ruscus.net with the device identifier shown on the app’s home screen — it is how records are found, since we hold no name or account for a device. We answer within 30 days. If we cannot identify your device from what you send, we will ask once rather than collect more data about you to prove who you are.

The rest

Who can see it

If a reseller set up your device, they can see its record, its licence, its playlists, its health measurements and its failed-content reports, and can attach a private note to it. We can see the same. Beyond the services listed above under “Purchases and other services”, nobody else does: we do not sell or rent this data, and the only third-party SDK in the app is Google’s advertising SDK — there is no analytics or tracking SDK.

How long we keep it

The device record, licence and playlists live as long as the device is registered. Health measurements are overwritten as new ones arrive. Failed-content reports: 30 days. Error, performance and device event records: 30 days. Advertising and reward records: one year. Purchase records: as long as tax and accounting law requires (up to 10 years).

Deleting your data

Ask your reseller to delete the device, or write to us at hello@ruscus.net with the device ID shown on the app’s home screen — step by step on the data deletion page. Deleting the device removes its record, playlists, measurements, reports and advertising records; purchase records are kept, detached from the device, as the law requires. It also ends any licence attached to it, so ask only when you mean it.

Children

Ember is not directed at children and we do not knowingly collect data from them. The app has an adult-content lock, off by default, which a parent can turn on and protect with a PIN. We do not knowingly collect data from anyone under 13, or under 16 in countries where that is the age of consent for data processing. If you believe a child’s device is registered with us, write to us and we will delete it.

Contact

Questions about this page or about your data: hello@ruscus.net. We answer data requests within 30 days. Our registered name, address and registry numbers are on the contact page.