FFSky Studio / THRU3D / VR VIDEO PASSTHROUGH SERVER
Privacy Policy
Provider and operator: FFSky Studio (referred to as “we”, “us” or “our” in this policy).
This policy covers Thru3D Media Player for iOS, Apple Vision Pro (visionOS), Meta Quest and PICO (Quest/PICO application ID: com.wapok.thru3d), Thru3D Media Server for Windows, and this website. Features and permissions vary by platform and app version; the descriptions below apply when the corresponding feature is available and used.
Your media is processed on your phone, headset or PC. No FFSky Studio account is required. We do not automatically upload your library or viewing history to our servers, and do not include advertising or behavioral analytics SDKs.
ffskyteam@gmail.com1. Media, settings and local data
Favorites, audio and puzzles: favorites and their references stay locally; the PIN protects the app collection, not original media. Imported audio copies and playlists remain locally until removed; ordinary cache clearing does not delete them. On-device narration processes selected subtitle text without sending it to an online voice service. Photo puzzles retain a local image/optional depth copy and game progress so you can resume; removing a game does not delete its original photo.
The apps read the media you select or authorize, including videos, pictures, audio, subtitles, file names, paths/URIs, sizes, durations and thumbnails, to browse, decode, display and process it. Local AI features process media frames on the device running the feature; we do not receive those frames for model training.
Thru3D saves recent media, playback positions, per-file display preferences and thumbnails locally for history, resume and browsing. You can disable saving history and clear existing history. The Windows server saves selected folders, processing settings, generated media and caches locally.
Local diagnostic logs may include device/runtime details, errors, performance information, media paths and network addresses. PC server request logs may include client IP addresses and requested URLs/media. Logs are not automatically sent to us.
2. Camera, spatial data and permissions
USB storage: supported versions request USB-device or read-only folder authorization to read media and subtitles from allowed drives/partitions. Stop-all-USB releases this app’s access; it is not system unmounting or power-off.
iOS camera: when you enable person mixed reality or VR passthrough, Thru3D uses the rear camera, with your permission, to display your surroundings and combine them with the media being played. Camera frames are processed only on your device, transiently in memory for the live view. Thru3D does not record or save these frames as photos, videos, thumbnails or cache files, or upload or share them with FFSky Studio or third parties. We do not use camera frames for advertising, analytics, identification or AI model training.
Headset passthrough: on Apple Vision Pro, visionOS displays your surroundings through its system compositor; Thru3D does not directly access the device’s raw camera feed. Meta Quest and PICO passthrough likewise uses the platform’s passthrough/compositing service. Using passthrough involves the device’s cameras, but Thru3D does not record, save or upload those camera images.
Spatial input: Thru3D uses head/controller poses, button input and, when enabled and supported, hand joint and gesture data from the headset runtime for viewpoint rendering and interaction. On visionOS, the system also handles standard gaze and gesture interactions without providing the app with raw eye-tracking data. These inputs are processed during use; we do not build biometric profiles or send them to our servers. The app does not request microphone recording, raw eye tracking, contacts or precise location access.
Media and storage: access to videos, images, audio and related files enables browsing and playback. On Apple platforms, system file or photo selection and applicable permissions control access to the media you select or authorize. On supported Android versions, “All files access” enables folder browsing across shared storage. A system file picker can also grant access to selected files.
Network and local network: used to connect to selected media sources and discover local servers. On iOS and visionOS, local network permission is requested when required for these connections or discovery. Android Wi-Fi state and multicast access support local discovery. Internet access supports remote media and optional cloud connections.
You may decline or revoke applicable permissions in device settings, including iOS camera access and applicable local network access on iOS or visionOS, and disable optional features. Turning off the iOS mixed reality or VR passthrough feature stops its use of the live camera view. Declining camera permission prevents those camera-based features; playback that does not use the camera remains available.
3. Network sources and cloud accounts
The Windows server makes the folders you configure, media metadata and streams available to clients that can reach its DLNA/HTTP service. Thru3D connects directly to the DLNA, SMB or other media sources you select. These servers receive your network address and browsing/playback requests, plus authentication information where required. Use a trusted network: local DLNA/HTTP traffic may be unencrypted.
When you save an SMB source, Thru3D stores its server address, share path and supplied username locally. On Quest/PICO, saved passwords are encrypted using Android Keystore. Where available, optional cloud connections, including 115 and Baidu Netdisk, process account labels, login session cookies, file lists and playback URLs. On Quest/PICO, saved cloud sessions are encrypted with Android Keystore on the headset and excluded from Android app backup.
Cloud login is handled by the selected provider. The app sends session credentials and file requests to that provider and connects to its media/CDN servers for playback. The provider receives your IP address and request information under its own policy. This access uses no FFSky Studio-operated cloud relay. Removing a cloud account from Thru3D does not delete the provider’s account or files.
Software downloads and PC model/runtime downloads contact your selected host, such as GitHub, Hugging Face, a configured mirror or NVIDIA. The host receives ordinary network request information, such as IP address and requested resource. External sites and services apply their own privacy terms.
If you enable LAN WebDAV sharing in Thru3D, devices on your local network with the generated sharing password can browse and stream connected cloud files through your headset. This is optional and uses HTTP without transport encryption. Share the password only with trusted users; turn sharing off to stop access or reset its password to revoke existing credentials.
For other media-server connections, the app also processes server labels/addresses, account IDs, usernames and API keys or access tokens where required. Saved server profiles and credentials are stored locally; on Quest/PICO they are encrypted on the headset using Android Keystore. They are used only to authenticate with and browse/play from the server you select; cover images may be cached locally.
4. Apple, Meta Quest, PICO and third-party services
Apple, Meta and PICO independently operate their stores, accounts, device services and runtimes. They may process purchase, device and diagnostic data under their own policies. Apple also handles visionOS system passthrough and standard system interactions. We do not request your Apple Account, Meta or PICO password or import your friends list. Platform-side data processing is separate from the local processing described here.
You can manage platform privacy, diagnostic and account options using the relevant platform’s settings. See the privacy policies of Apple, Meta, PICO, and Google / Gmail. For cloud accounts, consult the policy shown by your chosen provider during login.
5. Website and support
This website reads your browser language and stores only your language preference in browser local storage (ptserver-language). Its pages do not embed advertising or analytics trackers. You can clear site data to remove the preference. The web host may process IP addresses, request times, browser/request information and access/security logs to deliver and protect the site; retention depends on the host’s configuration and policy.
If you email ffskyteam@gmail.com, we receive your email address, message and any attachments you choose to send. We use these only to respond to your request or provide support. Correspondence is processed through our email provider. Please do not send passwords, session cookies or unnecessary private media.
6. Retention and deleting your data
Removing favorite/recent records does not delete original media. Removing music from a playlist removes a reference; deleting imported audio removes the app copy. Deleting a puzzle hides its saved entry for undo; local image/depth copies may remain in app storage. Clearing app storage or deleting the app removes these local copies. Original files must be managed separately.
Thru3D: use the app’s available history and cache controls to disable or clear history and remove thumbnails. On Quest/PICO, thumbnails can be cleared through Settings → Video → Clear cache. Remove saved cloud accounts and network servers from their management screens. On Android, clearing app storage in device settings or uninstalling removes local app data. On iOS and visionOS, use Delete App to remove the app and its local app-container data; offloading an iOS app keeps its documents and data. Source media, exported files and platform backups must be deleted separately. Revoke cloud sessions with the provider to invalidate them there. Live camera frames are not retained and do not form part of playback history or thumbnails.
Windows server: stop the server to stop sharing, or remove a shared folder from its configuration to stop exposing that folder. When no longer needed, delete saved application configuration, logs and caches, and remove generated output separately. Local files remain until cleared, replaced or deleted.
Support: we retain correspondence only as needed to resolve your request, handle related issues or meet legal obligations, then delete or anonymize it. You can request deletion at any time. We do not hold a central copy of your local library or viewing history.
To request access, correction or deletion of personal data held by us, email ffskyteam@gmail.com with the subject “Privacy data deletion request”, the product name and enough information to identify your previous contact. We may request minimal verification and will respond within the period required by applicable law. We will explain any legally required retention. For data held independently by Apple, Meta, PICO or a cloud provider, contact that provider or use its privacy controls.
7. Use, security and your rights
We do not sell personal information or share it for cross-service targeted advertising. We use information to provide requested functions, respond to support requests and protect the service. Necessary information may be processed by the email, hosting and platform providers described above, or disclosed when legally required.
Where a legal basis is required, processing relies on performing the service you request, legitimate interests in secure support, legal obligations or your consent for optional processing where required. Depending on applicable law, you may have rights to access, correct, delete, restrict or object to processing, obtain a portable copy, withdraw consent or complain to a data protection authority. Contact the email above to exercise applicable rights. Withdrawing consent does not affect prior lawful processing.
We use app-private storage and the credential protections described above. Security also depends on your device, servers and network; no storage or transmission method is completely secure. Service providers may process data outside your region under their own policies and applicable legal safeguards.
8. Children’s privacy
We do not knowingly solicit or collect personal information from children or create advertising profiles about them. If a child has sent us personal information through support, a parent or guardian may contact us to request its deletion. Follow applicable age requirements, store ratings and platform parental controls when using these products or third-party services.
9. Changes and contact
When features or data practices change, we will update this page and its date, and provide additional notice or obtain consent where required. All three language versions describe the same products and practices. For privacy questions or requests, contact FFSky Studio at ffskyteam@gmail.com.