eKoPlayer

Legal

Official downloads and authenticity

Last updated 20 August 2026. PolarCurve LLC, Sheridan, Wyoming, United States.

This page exists so that anyone — a customer, a store reviewer, a rights holder, a hosting provider — can establish in one minute what we actually publish. Anything not listed here is not ours, whatever it is called.

1. Where eKoPlayer is published

We publish through no other channel. We do not distribute through file lockers, forums, Telegram, third-party APK sites or resellers, and we have never authorised anyone to do so.

2. How to check you have our build

Two independent checks. The second is the one that cannot be faked.

The file

SHA-256   fd0c38d45d4b061f48dab41d7310f6b98723c1eb3e3a31daf4cbac84a89c6517

Check it with shasum -a 256 ekoplayer.apk. This changes with every release.

For a few hours after a release our CDN may still serve the previous build from the plain address, in which case this number will not match it. That is a cache, not a tampered file, and the link above bypasses it. The certificate below is the check that never goes stale — prefer it.

The signature

Every build we publish is signed by PolarCurve LLC, certificate SHA-256 beginning D0:61:EC:42. Android verifies this itself and refuses to install an update signed by anyone else. A repackaged copy cannot carry this signature without our private key, which exists on one machine and has never been transmitted.

If a build asks for your provider username and password in order to "activate", it is not ours. eKoPlayer never sends your provider credentials anywhere — see the privacy policy, which lists every field we hold.

3. What eKoPlayer is, for anyone assessing a complaint

We operate no content servers, host no media, publish no playlists, index no sources and run no directory of providers. The privacy policy lists the complete set of what our database holds: a device identifier, a licence record, and — on a purchase — the email address it was bought with. There is nothing else, which is why we can say this precisely rather than generally.

4. Reporting a counterfeit or an impostor

If you find a build, listing, site or Downloader code claiming to be eKoPlayer that is not on the list in section 1, please tell us: security@ekoplayer.com. Include where you found it and, if you can, the SHA-256 of the file. We would rather hear about ten that turn out to be ours than none.

5. Reporting a security problem

security@ekoplayer.com, also published at /.well-known/security.txt. We will acknowledge within 5 business days. We do not pay bounties and we will not threaten you for telling us.

6. Rights holders

The rights holders page sets out what we can and cannot do, our designated agent, and the counter-notice process. It states our real capabilities rather than implying more: we can end a licence and remove material we publish, and we cannot see or block what any user plays, because that information does not exist on any system of ours.