Credentials are stored only in your browser. Proxy is required to bypass CORS.

M3U must allow CORS or use the Worker’s /proxy?u= endpoint.