No database, no storage. This app has no database. Your credentials are held in browser memory only for the duration of your session and are never written to disk or any persistent store.

Proxy exists only for CORS. Your credentials pass through a minimal proxy server because IPTV servers reject direct browser requests (a security policy called CORS). The proxy forwards the request to your IPTV provider and pipes the response back — it does not extract, log, or store any part of your credentials.

Verify it yourself. Open your browser's DevTools (F12 → Network tab) and watch every request this app makes. You'll see requests only go to your IPTV server (via /api/proxy) and CDN endpoints (via /api/test-proxy) — nothing else.

Fully open source. Every line of code — frontend, proxy, and serverless functions — is public and auditable on GitHub. If you don't trust this hosted version, you can clone the repo and run it yourself.