Privacy Policy
Last updated: September 30, 2026
Overview
Zplayer ("the app") plays your own music files from your own WebDAV server on iPhone, iPad and Mac, with the smallest possible footprint outside your devices. The app has no user accounts, no analytics, no advertising and no telemetry of any kind.
What data we collect
None.
We do not run any server that receives information from the app. We do not create accounts, we do not assign device identifiers, we do not embed analytics and we do not track usage.
What stays on your device
The app stores the following locally, in its own storage:
- An index of your music library (artists, albums, tracks, tags, durations) read from your WebDAV server.
- Cached cover art, metadata, lyrics and dynamic range (DR14) measurements.
- Audio files you have played, kept in the app's cache so they can play again without downloading. The system may clear this cache on its own when storage runs low.
- A log of what you played and when, used for the Week, Month and Year views in Stats. It never leaves the device.
- Pending Last.fm scrobbles, only if you have signed in to Last.fm, until they are sent.
- App settings, including whether Demo Mode is on, and the last playback state.
These files live in the app's sandbox and are removed when you delete the app.
What syncs through your iCloud account
If you are signed in to iCloud, the app uses two Apple services to keep your devices in sync. This data stays in your own private iCloud storage: neither we nor any third party can read it.
| Service | What it stores |
|---|---|
| iCloud Keychain | Your WebDAV server address, username and password. The optional API keys you enter (Last.fm, Discogs, fanart.tv) and, if you sign in to Last.fm, your Last.fm session key. |
| CloudKit (private database) | Favorites, play counts, ratings, last-played dates, your playlists and the playback queue, so you can continue on another device. Also a small record the app uses to check that iCloud is reachable. |
These records are stored under your Apple Account in the private database of the
iCloud.com.zplayer.player container. They are not shared, not aggregated and
not visible to us. You can delete them at any time in Settings › [your name] ›
iCloud › Manage Account Storage › Zplayer on iPhone or iPad, or in System
Settings › [your name] › iCloud on Mac.
What the app contacts
The app connects to the following, and only when the corresponding feature is used. Apart from what each row lists, these requests reveal nothing but your IP address, as any internet request does.
| Service | When | What for |
|---|---|---|
| Your WebDAV server | When you browse, play or scan your library | Listing folders, reading tags and artwork, streaming audio. The app also writes to it when you choose to: tags when you apply metadata to an album, and the pressing details you identify, saved as a small file next to the album. |
musicbrainz.org | Album and artist pages | Release details and credits |
coverartarchive.org | Missing cover art | Album front covers |
wikipedia.org | Album and artist pages | Summary text and artist photos |
lrclib.net | When you open the lyrics | Song lyrics |
api.discogs.com | Only if you enter Discogs credentials | Cover art and the details used to identify pressings |
webservice.fanart.tv | Only if you enter a fanart.tv key | Artist images |
ws.audioscrobbler.com (Last.fm) | Only if you enter a Last.fm key, or sign in to Last.fm | Cover art and tags. If you sign in, your username and password are sent to Last.fm once to obtain a session, and the tracks you play (artist, title, album and time) are sent to your Last.fm profile as scrobbles. |
Requests to these services contain only what is needed to look something up, such as an artist and album name. The API keys are yours: you enter them in Settings and they are sent only to the matching service.
Other apps you use
When you tap the corresponding button, Zplayer can hand an album or an image to other apps installed on your device: Dr. Doctor (to analyse or compare dynamic range) and OBI Scanner (to identify a pressing from its artwork). So that they can read the files, the app passes them your WebDAV server address, the folder, and your username and password. The exception is Dr. Doctor on Mac, which keeps its own copy of the password and asks for it the first time. DrTagger on iPhone and iPad receives only the album's folder. These hand-offs stay on your device.
Permissions
The app requests:
- Local network access: to reach a WebDAV server on your home network, such as a NAS at
192.168.x.x.
The app does not access your camera, microphone, photos, contacts, location, calendar, Health data or notifications, and it does not use Apple Music or any DRM-protected streaming service.
Deleting your data
- Artwork and DR caches: clear them in Settings.
- Everything on the device, including cached audio and your settings: delete the app.
- iCloud data: delete it from your iCloud storage settings, as described above.
- Last.fm scrobbles: they live in your Last.fm account, under Last.fm's own policy.
There is no server-side data under our control to delete.
Children
The app is not directed to children under 13 and does not collect information from anyone.
Changes to this policy
If this policy changes, the updated version will be posted at this address with a new date. Changes take effect when published.
Contact
Questions about privacy? Write to support@priet.us.