Privacy Policy

Effective date: August 6, 2026

Applies to: the TslaPlay Android application and this website.

The short version

TslaPlay does not collect, store, transmit, or share any personal data. There is no account to create, no analytics, no advertising, no crash reporting, and no server belonging to us. Everything the app does happens on your phone or travels directly between your phone and a device on your own Wi-Fi hotspot. Your screen and audio never reach us, because there is nowhere for them to go.

Buying the app is the one exception, and it isn't really an exception: that purchase goes through Google Play Billing, which is Google's transaction under Google's own privacy policy, not something TslaPlay itself sees.

What the app does with your screen and audio

When you start a session, TslaPlay captures your phone's screen and the audio your phone is playing, and serves them from a small web server running on your phone. A browser on the same hotspot network — your Tesla's — connects to that server and displays the stream.

This data:

  • is never written to storage. Nothing is recorded or saved to a file.
  • is never sent to us or to any third party. There is no remote server involved. No account, no cloud, no relay.
  • exists only while a session is running, and stops the moment you press Stop.
  • travels only across your own hotspot network — the direct link between your phone and the device you connected.

The app does not require an internet connection to mirror your screen.

Who can see your stream

Being straight with you about this: while a session is running, any device connected to your phone's hotspot can open the same address and see the same stream. The app does not currently password-protect the viewer page.

In practice, your hotspot's own password is what keeps others out. Use a strong one, and only run a session when you intend to.

Permissions, and why each one exists

These are all the permissions the app declares.

android.permission.INTERNET
Runs the small web server on your phone that your car's browser connects to. Despite its name, this does not mean the app sends anything to the internet — it does not.
android.permission.FOREGROUND_SERVICE
Lets a session keep running while you use other apps, with a permanent notification you can stop it from.
android.permission.FOREGROUND_SERVICE_CONNECTED_DEVICE
Declares to Android that the service exists to serve a connected device — your car.
android.permission.FOREGROUND_SERVICE_MEDIA_PROJECTION
Declares that the same service captures the screen.
android.permission.FOREGROUND_SERVICE_MICROPHONE
Declares that it captures audio. See the note below about what "microphone" means here.
android.permission.POST_NOTIFICATIONS
Shows the session notification, which carries a Stop button and the address to type into the car.
android.permission.RECORD_AUDIO
Captures the audio your phone is playing. See the note below.
android.permission.WAKE_LOCK
Stops the phone suspending mid-session. Held only while streaming, released when you stop.
android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS
Lets the app offer you a button to exempt it from battery optimization, so long sessions aren't cut short. It is never requested automatically — only if you tap it.

About the microphone permission

TslaPlay does not record your microphone.

Android provides a specific feature for capturing the audio a device is playing back, and files that feature under the microphone permission. That is the feature TslaPlay uses. The system prompt will say "microphone", and your settings will list the app under Microphone — but the app captures only what your phone is playing, never what a microphone hears.

If you decline this permission, everything else works; you get a silent picture.

About the VPN

TslaPlay uses Android's VpnService API, so you will see a VPN key icon in your status bar while a session is running. This needs explaining, because a VPN icon usually means something quite different.

Tesla's built-in browser refuses to connect to the ordinary private network addresses a phone hotspot hands out. To work at all, TslaPlay has to claim one different local address for itself, and Android only permits that through its VPN system.

No traffic is routed anywhere. The app does not send your network traffic to any server, does not inspect or log it, and does not affect any other app's connections. The mechanism exists solely so your car will agree to talk to your phone.

VpnService doesn't appear as a permission above because it isn't requested that way — it's declared on the app's streaming service itself, alongside the foreground-service permissions.

Data collection: none

To be explicit, TslaPlay does not:

  • collect or transmit personal information
  • contain analytics or telemetry of any kind
  • contain advertising or advertising identifiers
  • use cookies or any tracking technology
  • require or offer an account
  • send crash reports
  • read your contacts, messages, photos, files, or location
  • share anything with third parties, because it collects nothing to share

This website

This site is static — plain pages, served as-is. It sets no cookies, runs no analytics, embeds no third-party scripts, fonts, or trackers, and makes no external requests. Nothing about your visit is recorded by us.

Our web host keeps standard server logs (IP address, page requested, timestamp) as part of normal operation, as essentially every web server does. These are not used for tracking or analysis and are not shared.

Children

TslaPlay is not directed at children and collects no data from anyone, including children.

Changes to this policy

If this policy changes, the effective date above changes with it. Because the app collects nothing, material changes are unlikely — but if the app ever begins to collect anything, this page will say so before that version ships.

Contact

Questions about this policy: support@tslaplay.com

Disclaimer

TslaPlay is not affiliated with, endorsed by, sponsored by, or connected to Tesla, Inc. "Tesla" is a trademark of Tesla, Inc.