Privacy Policy
Effective date: August 6, 2026
Applies to: the TslaPlay Android application and this website.
The short version
TslaPlay does not collect, store, transmit, or share any personal data. There is no account to create, no analytics, no advertising, no crash reporting, and no server belonging to us. Everything the app does happens on your phone or travels directly between your phone and a device on your own Wi-Fi hotspot. Your screen and audio never reach us, because there is nowhere for them to go.
Buying the app is the one exception, and it isn't really an exception: that purchase goes through Google Play Billing, which is Google's transaction under Google's own privacy policy, not something TslaPlay itself sees.
What the app does with your screen and audio
When you start a session, TslaPlay captures your phone's screen and the audio your phone is playing, and serves them from a small web server running on your phone. A browser on the same hotspot network — your Tesla's — connects to that server and displays the stream.
This data:
- is never written to storage. Nothing is recorded or saved to a file.
- is never sent to us or to any third party. There is no remote server involved. No account, no cloud, no relay.
- exists only while a session is running, and stops the moment you press Stop.
- travels only across your own hotspot network — the direct link between your phone and the device you connected.
The app does not require an internet connection to mirror your screen.
Who can see your stream
Being straight with you about this: while a session is running, any device connected to your phone's hotspot can open the same address and see the same stream. The app does not currently password-protect the viewer page.
In practice, your hotspot's own password is what keeps others out. Use a strong one, and only run a session when you intend to.
Permissions, and why each one exists
These are all the permissions the app declares.
android.permission.INTERNET- Runs the small web server on your phone that your car's browser connects to. Despite its name, this does not mean the app sends anything to the internet — it does not.
android.permission.FOREGROUND_SERVICE- Lets a session keep running while you use other apps, with a permanent notification you can stop it from.
android.permission.FOREGROUND_SERVICE_CONNECTED_DEVICE- Declares to Android that the service exists to serve a connected device — your car.
android.permission.FOREGROUND_SERVICE_MEDIA_PROJECTION- Declares that the same service captures the screen.
android.permission.FOREGROUND_SERVICE_MICROPHONE- Declares that it captures audio. See the note below about what "microphone" means here.
android.permission.POST_NOTIFICATIONS- Shows the session notification, which carries a Stop button and the address to type into the car.
android.permission.RECORD_AUDIO- Captures the audio your phone is playing. See the note below.
android.permission.WAKE_LOCK- Stops the phone suspending mid-session. Held only while streaming, released when you stop.
android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS- Lets the app offer you a button to exempt it from battery optimization, so long sessions aren't cut short. It is never requested automatically — only if you tap it.
About the microphone permission
TslaPlay does not record your microphone.
Android provides a specific feature for capturing the audio a device is playing back, and files that feature under the microphone permission. That is the feature TslaPlay uses. The system prompt will say "microphone", and your settings will list the app under Microphone — but the app captures only what your phone is playing, never what a microphone hears.
If you decline this permission, everything else works; you get a silent picture.
About the VPN
TslaPlay uses Android's VpnService API, so you will
see a VPN key icon in your status bar while a
session is running. This needs explaining, because a VPN icon
usually means something quite different.
Tesla's built-in browser refuses to connect to the ordinary private network addresses a phone hotspot hands out. To work at all, TslaPlay has to claim one different local address for itself, and Android only permits that through its VPN system.
No traffic is routed anywhere. The app does not send your network traffic to any server, does not inspect or log it, and does not affect any other app's connections. The mechanism exists solely so your car will agree to talk to your phone.
VpnService doesn't appear as a permission above
because it isn't requested that way — it's declared on the app's
streaming service itself, alongside the foreground-service
permissions.
Data collection: none
To be explicit, TslaPlay does not:
- collect or transmit personal information
- contain analytics or telemetry of any kind
- contain advertising or advertising identifiers
- use cookies or any tracking technology
- require or offer an account
- send crash reports
- read your contacts, messages, photos, files, or location
- share anything with third parties, because it collects nothing to share
This website
This site is static — plain pages, served as-is. It sets no cookies, runs no analytics, embeds no third-party scripts, fonts, or trackers, and makes no external requests. Nothing about your visit is recorded by us.
Our web host keeps standard server logs (IP address, page requested, timestamp) as part of normal operation, as essentially every web server does. These are not used for tracking or analysis and are not shared.
Children
TslaPlay is not directed at children and collects no data from anyone, including children.
Changes to this policy
If this policy changes, the effective date above changes with it. Because the app collects nothing, material changes are unlikely — but if the app ever begins to collect anything, this page will say so before that version ships.
Contact
Questions about this policy: support@tslaplay.com
Disclaimer
TslaPlay is not affiliated with, endorsed by, sponsored by, or connected to Tesla, Inc. "Tesla" is a trademark of Tesla, Inc.