Website and pairing privacy.
This page describes the current beta website and its connection to Lounge on your TV.
Updated 9 September 2026. The website and relay are operated for the Lounge TV project. Formal operator and public contact details must be confirmed before a retail release.
Source details go to your TV
When you use phone setup, the phone encrypts source details and management requests before sending them through the relay. The encryption key comes from the TV's QR code and is not sent to the relay.
The relay forwards encrypted messages. It does not store playlist contents, source passwords, library changes or backup files. The TV decrypts the messages and applies authorised requests. Your TV contacts your content provider directly, including when checking a source.
Encryption protects the transfer through the relay. It does not hide information from someone using your unlocked phone or TV. Keep the QR link private and use Disconnect when finished.
Temporary connection data
A relay session lasts up to 20 minutes. It stores hashes of two connection tokens, the expiry time and a transfer-size counter. This metadata is deleted when the session expires or the TV ends it.
Your phone keeps the session identifier, its connection token and the encryption key in the browser tab's session storage. The page removes the QR fragment from the address bar after reading it. Disconnecting removes the saved session. Browser session restoration may retain tab storage, but the relay still enforces expiry.
The website uses Cloudflare to serve pages and relay connections. Requests expose ordinary connection information to that infrastructure, such as the IP address and requested path. Rate limits use the IP address to reduce abuse. This application does not enable request-content logging, advertising or analytics trackers.
Data saved on the TV
Sources, account credentials, profiles, favourites and viewing preferences are stored by the TV app. Credential-bearing records and uploaded playlist files are encrypted in the app's browser storage. The bundled service keeps working copies of uploaded files in memory while Lounge is open. Older unencrypted files are removed after the encrypted migration succeeds. This website does not keep an account database or a cloud library.
Use the TV's reset controls to remove its saved data. Removing a source or resetting the app does not delete backup files you downloaded to another device.
Backups and diagnostics
Backup files are encrypted with the password you choose on the TV. They may include source credentials and personal libraries. Prepared backup transfers are temporary, and downloads remain wherever you save them.
Diagnostics are downloaded only when you request them. The report includes the app version, build identifier, runtime capabilities and summary counts. It excludes source URLs, account names, channel names, viewing history and application logs. Review a report before sharing it through your existing beta support channel.
Your choices
- Use the TV without connecting this website.
- End phone access with Disconnect or the TV's phone-setup controls.
- Remove saved sources and personal data using the TV's settings.
- Delete downloaded backups or reports from the device where you saved them.
Beta limits
This is a factual description of the current implementation. Retail release still requires confirmed operator details, support contacts and the final privacy and distribution review. No payment or purchase information is collected by this website.