New encoder integration, expanded usage statistics, plus security and stability improvements
Panel
✨ Added
-
📱 IRLwhatever one-tap setup and QR codes for SRT, SRTLA, RTMP, and RTMPS
-
📈 Publisher data usage and expanded usage statistics in the panel
🔄 Changed
-
🔐 Sensitive account changes now require identity confirmation again to better protect important settings from unauthorized changes
🐛 Fixed
-
🔒 Improved security and reliability for sign-in, sessions, and linked accounts
-
🐛 RTMP streams and players now handle invalid or incomplete server responses more reliably
Push Targets
🐛 Fixed
-
▶️ New push targets start automatically; recreate/start status and failures are reported more reliably
Relay Server
🔄 Changed
-
📡 SLS and RTMP ingest now perform consistently better
Ingest clustering temporarily disabled, step-up for sensitive actions, masked stream secrets in emails
Panel
🔄 Changed
-
🔐 Step-up authentication also required before GDPR export, OAuth unlink, and account deletion
-
🔒 Stream/play keys and push URL secrets masked in panel notification emails; descriptions stay readable
🐛 Fixed
-
🐛 Login lockout: failed attempts for the same username/email from other IPs no longer lock out the victim's own network
Relay Server
🔄 Changed
-
📡 RTMP/RTMPS and SRT/SRTLA clustering disabled again – too many errors in production; dual primary/fallback write remains
High-availability ingest clusters for RTMP/RTMPS and SRT/SRTLA
Relay Server
✨ Added
-
📡 RTMP/RTMPS: support for high-availability clusters – publish and play stay available across multiple nodes
-
📡 SRT/SRTLA: support for high-availability clusters – stream IDs and ingest hardened across multiple nodes
🔄 Changed
-
🔄 More resilient stream management when individual relay nodes fail
New cookie consent manager, encoder QR deep links, and step-up for sensitive profile changes
Website
🔄 Changed
-
🍪 Cookie banner: switched from Klaro Cookie to CookieConsent v3 (Matomo still opt-in; essential cookies and Cloudflare remain required)
Panel
✨ Added
-
📱 QR code buttons for Moblin and IRL Pro deep links on the dashboard
🔄 Changed
-
🔐 Step-up authentication before email/password changes and before linking OAuth accounts
🐛 Fixed
-
🐛 Profile password state refreshes correctly after the first password is set
-
🐛 IRL Pro/Moblin deep links: SRT latency unified (2000 ms)
Changelog
🔄 Changed
-
🍪 Cookie banner also switched to tarteaucitron
RTMPS playback URLs, Guides hub, more reliable push targets, and RTMP/encoder fixes
Website
✨ Added
-
📚 Guides hub: multiple articles instead of a single guide page
-
❓ FAQ: loyalty section
Panel
✨ Added
-
📺 RTMP streams: RTMPS playback URL in addition to the RTMP play URL (main and extra players)
-
📊 NOALBS snippets for RTMP: OpenRTMP provider and Nginx legacy (key "stream")
🐛 Fixed
-
🐛 IRL Pro deep link: SRT/SRTLA URLs include the stream key again (`streamid`)
-
🐛 RTMP live stats: empty fields without backend data are hidden
Dedicated pull keys for push targets, restricted-account deletes, and more reliable stream deletion
Panel
🔄 Changed
-
🔒 Restricted account: own streams, players and push targets can be deleted again
🐛 Fixed
-
🐛 OAuth linking: pending email confirmation is no longer silently skipped
-
🐛 Remember Me with 2FA: 2FA is required again after cookie-based login
Push Targets
✨ Added
-
🔑 Each push target gets its own ingress pull key (separate from the stream default play key)
🐛 Fixed
-
🐛 Stream deletion: push targets are no longer lost on partial failures
Relay Server
🔄 Changed
-
🔄 Update: RTMP/RTMPS server
-
🔄 Update: SLS/SRT/SRTLA
Improved login, Remember Me, push access, system announcements, and account status
Panel
✨ Added
-
📢 System announcements: info, warning, maintenance and outage notices in the panel (DE/EN)
-
📢 Banners on dashboard, profile, push and usage — dismissible when enabled by the operator
-
🔒 Locked account: notice banner on dashboard and push — explains why streams and push targets cannot be edited
-
📧 Email on account suspension, disable, or reactivation (optional reason and duration)
🔄 Changed
-
🔒 Locked account: streams and push targets dimmed; create, delete, and edit disabled — with a short reason hint
🐛 Fixed
-
🐛 Remember Me: more reliable with parallel browser tabs
-
🐛 Login: security email sent only after 2FA succeeds
-
🐛 OAuth login: email notification settings are respected again
-
🐛 Referral: more reliable referral link creation
Push Targets
🔄 Changed
-
♻️ Reactivation: push targets removed during account suspension are restored
🐛 Fixed
-
🐛 Restricted or locked users can no longer start, stop, or delete push targets
-
🐛 Stream/player deletion blocked while account status is locked
Relay Server
🔄 Changed
-
⏹️ Account suspension: active streams (SLS/SRTLA and RTMP/RTMPS) and push relays are stopped
-
♻️ Reactivation: stream access (SLS or RTMP) is re-enabled when the stream still exists
🐛 Fixed
-
🐛 RTMP: improved stability for connections and status display
Hardened OAuth linking, refined loyalty points, and panel security fixes
Panel
✨ Added
-
🔗 OAuth linking: new Twitch/Kick connections require email confirmation (24 hours)
🐛 Fixed
-
🐛 Email change: confirmation link can no longer be abused while logged in as another account
-
🐛 GDPR deletion: fixed missing data cleanup and incorrect deletion ordering
-
🐛 Account deletion: push targets are reliably cleaned up
-
🐛 Status rollback: streams and push targets become available again correctly after re-activation
-
🐛 OAuth login: sign-in blocked while a link is waiting for email confirmation
-
🐛 OAuth linking: fixed race conditions and login bypass with pending requests
-
🔒 OAuth registration: login identifiers can no longer be blocked by other accounts
Push Targets
🔄 Changed
-
🔒 Custom push URLs: private, reserved, and multicast addresses are rejected
Relay Server
🔄 Changed
-
🔒 Worker validates push target hosts against DNS rebinding (private/reserved IPs)
Improved 2FA convenience, hardened GDPR deletion, and updated legal texts
Website
🔄 Changed
-
📜 Terms of use updated (June 7, 2026, version 1.2)
-
🔒 Privacy policy revised and updated
Panel
✨ Added
-
🔐 2FA setup: copy secret and backup codes, and download backup codes as a file
🔄 Changed
-
🔐 Login with 2FA: “Remember me” now applies after two-factor verification
-
🗑️ GDPR deletion: confirmation only for the logged-in account
-
📡 Push targets: improved layout and display on small screens
🐛 Fixed
-
🐛 2FA: backup codes consisting of digits only are accepted again at login
-
🐛 Push targets: custom RTMP targets with v1/v2 mode are saved correctly
Clearer communication and restrictions for suspended or disabled panel accounts
Panel
✨ Added
-
🔒 Suspended or disabled accounts: email on status change, in-panel notice, and no new streams, players, or push targets
🔄 Changed
-
🔒 When your account is suspended or disabled, active streams and push targets are stopped
-
♻️ After re-activation you can stream as usual again
Hardened GDPR account deletion and improved mobile UI
Panel
✨ Added
-
🎫 Support tickets: new categories Account & Access, Privacy & Data, Security, Abuse, and Feedback
Support Portal
🔄 Changed
-
📱 Reworked mobile layout and responsive theme
Loyalty & referral system in the user panel
Panel
✨ Added
-
🏆 Loyalty & level system: points, level progress, transaction log, and level-up notification
-
🔗 Personal referral link via l.irl.com.de including click and registration stats
Usage view, GDPR access/deletion, secure email change verification, and push target rework
Panel
✨ Added
-
📈 Added usage view in the user panel with history and statistics
-
📋 GDPR self-disclosure in profile: view stored data, JSON export (Art. 15/20), and optional request to the IRL.com.de team
-
🗑️ GDPR deletion request: email link confirmation, 14-day grace period, then permanent account deletion
-
✉️ Email changes require confirmation via link sent to the new address — the old email stays active until confirmed
🔄 Changed
-
🔐 Email change: no longer applied immediately without verifying the new address
-
📦 Additional Players section on the dashboard collapsed by default — expandable on click
Push Targets
🔄 Changed
-
🔧 Internally reworked and optimized push targets
Changelog
✨ Added
-
📑 Dedicated changelog section for push targets
Pre-selection of streaming platforms in the push target system
Panel
✨ Added
-
📡 Push target system: Pre-selection of streaming platforms (Twitch, Kick, YouTube) and user-defined targets
🔄 Changed
-
QR-code generator for 2FA setup local instead of external
Push target system (Alpha Version): Streams can now be forwarded directly to external platforms
Push Targets
✨ Added
-
📡 Push target system: Forward streams to external platforms (Twitch, YouTube, custom RTMP)
-
▶️ Start/stop control for push targets directly in the dashboard
-
📊 Real-time status display for running push jobs (live, idle, error)
-
📧 Email notifications for push target events (created, started, stopped, deleted)
mobile optimizations and minor bugfixes
Website
🐛 Fixed
-
🐛 Various minor bugfixes and optimizations in the frontend
-
📱 Improved mobile display and usability on small screens
Multiple backend fixes and general optimizations.
Relay Server
🔄 Changed
-
Optimizations in the relay server for more stable connections and faster response times
Mobile menu and user status system added
Panel
✨ Added
-
📱 Hamburger menu for mobile devices with slide-in animation
-
👤 Account status system
-
⚠️ Visual warnings for restricted accounts in dashboard
-
🚫 Login block for banned accounts with error page
Profile pictures: All images are now stored and loaded on our own servers. Your data stays with us!
Panel
✨ Added
-
✨ Profile pictures are now 100% privacy compliant: All images are hosted on our own servers, load faster and without tracking!
mails are now sent correctly
Panel
🐛 Fixed
-
🐛 mails are now sent correctly
Bugfixes for 2FA and new account deletion feature
Panel
✨ Added
-
🗑️ Account deletion feature in profile (GDPR compliant)
-
📧 Email notification on account deletion
-
⚠️ Double confirmation required for account deletion (browser dialog + type DELETE)
🔄 Changed
-
🎨 Profile page: Added security settings button
🐛 Fixed
-
🐛 2FA code is now properly sanitized (numbers only)
-
🐛 2FA verification: Fixed code length validation (6 or 8 characters)
-
🐛 2FA setup: Implemented code sanitization for correct verification
-
✅ 2FA is now fully functional
Changelog
✨ Added
-
📋 Component-based structure for better clarity (Website, Panel, Relay Server, Changelog)
-
🎨 Visual separation between different components with colored sections
🔄 Changed
-
📱 Responsive design optimized for component view
Comprehensive security update with 2FA, login tracking and extended email notifications
Panel
✨ Added
-
🔐 Two-factor authentication (2FA) with TOTP support (Google Authenticator, Authy, etc.) - NOT YET FUNCTIONAL
-
🔑 Backup codes for 2FA - NOT YET FUNCTIONAL
-
📧 Email notifications for login activities (configurable)
-
📧 Email notifications for new device detected
-
📧 Email notifications for stream created/deleted (configurable)
-
📧 Email notifications for 2FA enabled/disabled
-
📜 Login history with IP address, device and provider
-
🖥️ Trusted devices management (automatic detection)
-
⚙️ Security settings page in user profile
-
🔒 2FA verification on every login (if enabled)
🔄 Changed
-
⚙️ System now runs on PHP 8.5 (previously PHP 8.4)
-
🔄 Login flow extended with 2FA check and device tracking
-
🔄 OAuth callbacks (Twitch/Kick) extended with security features
-
🔄 All email notifications are now configurable in user security settings
🐛 Fixed
-
🐛 Security mails are now sent correctly on 2FA enable/disable
First public beta version of IRL.com.de