Privacy Policy — Doom Player for iOS

Last updated: 20 September 2026

The short version. Doom Player plays the video and audio already on your device. It has no accounts. Your files, your watch history, your favourites, your playlists and everything in the private vault stay on your device and are never uploaded. The app is free because it shows ads, and the ad and diagnostics services that involves are named below — all of them.

What Doom Player does not do

No accounts and no sign-in. There is no login and no user record.
No accounts and no sign-in. There is no login and no user record.
Your files are never uploaded. The videos, music and subtitles you play are read on the device and stay there. No advertiser, and no part of this app, sends them anywhere.
Nothing in the private vault ever leaves the device, under any circumstance, including to the services named on this page.
Nothing about you is sold.

What stays on your device

Watch history and resume positions, favourites, playlists, per-file audio and subtitle offsets, thumbnails, downloaded files, and everything inside the private vault. None of it is synchronised anywhere, because there is no account to synchronise with.

The vault's PIN is stored in the iOS Keychain as a salted SHA-256 hash, set so it never leaves the device and cannot be read while the device is locked. Vault files are written with complete file protection, and are excluded from iCloud backup along with your downloads.

What the app sends, and where

Doom Player contacts its own service at api.apks.lol for two things:

A version check, so it can tell you when a newer release exists.
Resolving a link you supplied, when you add one yourself.

Those requests carry the app's identifier, its version and build number, the platform, which storefront the build came from, and a timestamp. None of that identifies you: no device identifier, no advertising identifier, no name, email, or location is attached. As with any internet service, the server receives the network address the request came from, and standard server logs are kept only as long as needed to operate and secure the service.

Advertising

The app is free and is paid for by ads. They are served through CAS.AI, a mediation service that offers each ad request to whichever network bids for it. The networks that can be reached are AppLovin, Bigo, Chartboost, DT Exchange, Google AdMob, InMobi, ironSource, Kidoz, Liftoff Monetize, Mintegral, Ogury, Pangle, Start.io, SuperAwesome, Unity Ads, Yango, YSO Network and CAS's own exchange. Each has its own privacy policy and receives only what it needs to select, show and measure an ad.

What that involves, stated plainly: an advertising identifier, the fact that an ad was shown or tapped, which screen it appeared on, and an approximate location worked out from your network address. The app itself never asks for your location and contains no location code; several of the ad networks derive a coarse one regardless, and this page says so because their own privacy manifests do.

On first launch you are asked two separate questions, in this order:

If you are somewhere a consent form is required — the EEA, the UK, and some US states — that form asks what the ad networks may do. You can reopen it at any time from Settings and change your answer.
iOS then asks whether this app may track you across other companies' apps and websites. Decline and the advertising identifier is not read at all; the ads you see are chosen without it. The app works exactly the same either way.

No ad is ever shown inside the private vault.

Diagnostics

The app uses Firebase Crashlytics and Firebase Analytics, both operated by Google under Google's privacy terms. A crash report describes what the app was doing when it stopped — not your files, not their names, and nothing from the vault. Analytics records which screens are used, so that a screen nobody can get through can be found.

You can switch crash reports off in Settings, and declining the tracking prompt switches analytics collection off on its own.

Notifications

The app creates one notification itself, on your device, when a download you started finishes. It can also receive one from us — about a required update, for example — through Firebase Cloud Messaging. You are asked before either is allowed, and refusing costs you nothing but the message.

Your local network

To send a file to a nearby device, or to play to a television, the app talks directly to that device over your own network. Nothing passes through a server, and no copy is kept anywhere else. iOS asks your permission the first time.

Permissions, and what each one is for

Permission	Used for
Photos (add only)	Saving a frame you captured from a video
Photos (read)	Playing and managing videos already in your library
Media library	Playing audio you already own
Face ID / Touch ID	Unlocking the private vault. iOS performs the check; the app never receives biometric data
Local network	Nearby sharing and playing to a television
Files	Folders you choose to add. Access is limited to the folder you picked

Children

Doom Player is a general-purpose media player and is not directed at children under 13. It does not knowingly collect information from children, and the mediation is configured accordingly.

Changes to this policy

If the app ever begins collecting something it does not collect today, this page will be updated before that version is released.

Contact

Questions about this policy: [email protected]