Wave Player is a local music player. This page describes exactly where your data goes, which for almost everything is: nowhere.
The app reads the audio files you point it at and indexes their metadata (title, artist, album, track number, duration, embedded artwork) into a database on your own device. Playlists, favourites, play history, themes and settings are stored there too. Nothing in that database is uploaded — the app has no account, no sign-in and no server of its own.
On Android the app asks for permission to read audio files (READ_MEDIA_AUDIO on modern versions, the storage permission on older ones) and starts a scan, because that permission is the only way a music player can see your music. It uses Android’s media index rather than crawling your storage, and it never writes to, renames, moves or deletes your files. Denying a permission is never fatal: the app keeps working and simply shows an empty library with an explanation and a way to retry.
Lyrics you import stay on your device. If a lyrics service is configured, the app may ask it for a match by sending only the track’s title, artist, album and duration — never the audio, the file name, the path or anything else about your library. When the service does not have a lyric, it may in turn ask a public lyrics library (lrclib.net) for one and store the answer so the same track is never looked up twice; that request carries the same four fields and nothing that identifies you or your device. Those lookups are optional and can be turned off in Settings; when they are off, or when the device is offline, the app works exactly as before.
The public pages are served over HTTPS and set no cookies, run no analytics and include no advertising or third-party trackers. The private dashboard at /admin is the one exception: after a password is entered it sets a signed, HttpOnly session cookie so the operator stays signed in, and the server keeps that session for twelve hours. Login attempts are rate limited by IP address to slow down guessing.
The installers on this site are static files. Downloading one tells us nothing beyond what any web server records to serve a file, and the app does not phone home after it starts.
If anything here is unclear, or you want a copy of the data described above, write to hello@waveplayer.ir and you will get an answer.
Your library stays on your device. The public pages set no cookies and run no analytics; only this site’s private dashboard uses one, after a password.
hello@waveplayer.ir