diff --git a/firetv/README.md b/firetv/README.md
index 31be55e..da43fa1 100644
--- a/firetv/README.md
+++ b/firetv/README.md
@@ -1,18 +1,23 @@
-# podcasters (p0dcasters.com) for Fire TV
+# podcasters RSS reader for Fire TV
 
-A small native Android app (`com.p0dcasters.tv`) that puts https://p0dcasters.com on a Fire TV
-and makes it work with a remote. No dependencies beyond the Android SDK.
+A small native Android app (`com.p0dcasters.tv`) for playing podcast episodes from HTTPS RSS
+feeds that the viewer enters. It includes no podcast directory, show artwork or preloaded feeds.
+The feed is fetched only after the viewer chooses Load; audio is played from the publisher's
+HTTPS URL. No dependencies beyond the Android SDK.
 
-- **WebView** on p0dcasters.com. Remote play/pause, fast-forward 30 s and rewind 15 s drive the page's player (`pitMedia`). Results open in the app; `mailto:`/`intent:` links go to the system.
+- **Bundled reader UI** (`app/src/main/assets/reader.html`): a local page with no external scripts,
+  images or catalog requests. Native code downloads the user-selected RSS document and accepts
+  HTTPS audio enclosures only.
 - **Remote navigation** (`app/src/main/assets/tv.js`): Chromium's WebView scrolls on arrow
-  keys instead of moving between links, so every D-pad press runs `pitNav(dir)` in the page:
+  keys instead of moving between controls, so every D-pad press runs `pitNav(dir)` in the page:
   spatial focus to the nearest link/button, scrolling across long gaps, and a large focus
-  ring. The ring is set through `element.style` because strict CSPs (`style-src 'self'`)
-  blocks an injected `<style>`.
+  ring.
 - **Typing**: OK on a text field (or Menu/Search anywhere) opens a native text box, the one
-  thing that reliably raises the Fire TV keyboard and its microphone. The text goes back into
-  the page and a search box submits.
-- **Back** walks WebView history, then exits. Full-screen video and an offline screen are native.
+  thing that reliably raises the Fire TV keyboard and its microphone. Text fills the feed URL;
+  the viewer still presses Load before the app makes a request.
+- **Playback**: remote play/pause, fast-forward 30 s and rewind 15 s control the selected episode.
+- **Back** exits the app. Feed titles are rendered as text, and remote feed links cannot navigate
+  the WebView away from the bundled page.
 - Leanback launcher + banner, touchscreen not required, so the Appstore lists it for Fire TV.
 
 ## Build
@@ -41,11 +46,10 @@ docker run --rm --device /dev/kvm -e OWNER=$(id -u):$(id -g) -v ~/scratch/androi
   -v "$PWD/firetv:/w" -w /w gradle:8.7-jdk17 bash emulator-test.sh
 ```
 
-Boots API 30 Android TV (the base of Fire OS 8), installs the APK, drives it with key
-events (OK -> keyboard -> search, arrows through results, Back, Menu search
-) and writes 1920x1080 screenshots to `store/shots/`.
+Boots API 30 Android TV (the base of Fire OS 8), installs the APK and checks the blank reader,
+native keyboard and HTTP URL rejection. Screenshots go under the ignored `dist/test-artifacts/`.
 
 ## Appstore
 
-Listing copy and the art map are in `store/listing.md`; `store/render.sh` regenerates the
-icons/banner from `store/src/*.svg`.
+Listing copy is in `store/listing.md`; `store/render.sh` regenerates the icons/banner from
+`store/src/*.svg`.
diff --git a/firetv/app/build.gradle b/firetv/app/build.gradle
index 8d88e25..00c07cd 100644
--- a/firetv/app/build.gradle
+++ b/firetv/app/build.gradle
@@ -10,8 +10,8 @@ android {
         applicationId 'com.p0dcasters.tv'
         minSdk 22          // Fire OS 5: every Fire TV still in service
         targetSdk 34
-        versionCode 1
-        versionName '1.0.0'
+        versionCode 2
+        versionName '1.1.0'
     }
 
     // The release key lives in the vault, never in the repo. scripts/build.sh
diff --git a/firetv/app/src/main/AndroidManifest.xml b/firetv/app/src/main/AndroidManifest.xml
index 751f3c3..2fa4e74 100644
--- a/firetv/app/src/main/AndroidManifest.xml
+++ b/firetv/app/src/main/AndroidManifest.xml
@@ -27,9 +27,6 @@
                 <category android:name="android.intent.category.LAUNCHER" />
                 <category android:name="android.intent.category.LEANBACK_LAUNCHER" />
             </intent-filter>
-            <intent-filter>
-                <action android:name="android.intent.action.SEARCH" />
-            </intent-filter>
             <intent-filter>
                 <action android:name="android.intent.action.SEND" />
                 <category android:name="android.intent.category.DEFAULT" />
diff --git a/firetv/app/src/main/assets/offline.html b/firetv/app/src/main/assets/offline.html
deleted file mode 100644
index 4ea42e5..0000000
--- a/firetv/app/src/main/assets/offline.html
+++ /dev/null
@@ -1,24 +0,0 @@
-<!doctype html>
-<html lang="en">
-<head>
-<meta charset="utf-8">
-<meta name="viewport" content="width=device-width, initial-scale=1">
-<title>podcasters is out of reach</title>
-<style>
-  html, body { margin: 0; height: 100%; background: #14140f; color: #f4f1ea;
-    font: 28px/1.4 system-ui, sans-serif; }
-  main { height: 100%; display: flex; flex-direction: column; align-items: center;
-    justify-content: center; text-align: center; padding: 0 10%; box-sizing: border-box; }
-  h1 { color: #e27a55; font-size: 48px; margin: 0 0 16px; }
-  a { margin-top: 32px; padding: 16px 40px; border-radius: 12px; background: #e27a55;
-    color: #14140f; font-weight: 700; text-decoration: none; }
-</style>
-</head>
-<body>
-<main>
-  <h1>podcasters is out of reach</h1>
-  <p>Check this TV's network connection, then press OK to try again.</p>
-  <a href="https://p0dcasters.com/" autofocus>Try again</a>
-</main>
-</body>
-</html>
diff --git a/firetv/app/src/main/assets/reader.html b/firetv/app/src/main/assets/reader.html
new file mode 100644
index 0000000..9356d10
--- /dev/null
+++ b/firetv/app/src/main/assets/reader.html
@@ -0,0 +1,108 @@
+<!doctype html>
+<html lang="en">
+<head>
+<meta charset="utf-8">
+<meta name="viewport" content="width=device-width, initial-scale=1">
+<meta http-equiv="Content-Security-Policy" content="default-src 'none'; base-uri 'none'; form-action 'none'; script-src 'unsafe-inline'; style-src 'unsafe-inline'; media-src https: blob:; connect-src 'none'; img-src 'none'">
+<title>Podcast RSS Reader</title>
+<style>
+  :root { color-scheme: dark; }
+  * { box-sizing: border-box; }
+  html, body { margin: 0; min-height: 100%; background: #14140f; color: #f4f1ea;
+    font: 25px/1.45 system-ui, sans-serif; }
+  main { max-width: 1200px; margin: 0 auto; padding: 52px 68px 80px; }
+  h1 { margin: 0 0 14px; color: #e27a55; font-size: 42px; }
+  p { max-width: 1000px; margin: 0 0 28px; color: #d0cdc5; }
+  form { display: flex; gap: 16px; align-items: stretch; margin: 0 0 26px; }
+  input, button { min-height: 68px; border: 2px solid #807b70; border-radius: 10px;
+    background: #24231e; color: #fff; font: inherit; padding: 12px 18px; }
+  input { flex: 1; min-width: 0; }
+  button { background: #e27a55; border-color: #e27a55; color: #14140f; font-weight: 700; }
+  :focus { outline: 4px solid #e27a55; outline-offset: 4px; }
+  #status { min-height: 1.5em; color: #d0cdc5; }
+  #feed-title { margin: 34px 0 12px; font-size: 30px; }
+  #episodes { display: grid; gap: 12px; }
+  .episode { display: flex; align-items: center; gap: 20px; padding: 16px;
+    border: 1px solid #4a4840; border-radius: 10px; }
+  .episode-title { flex: 1; overflow-wrap: anywhere; }
+  audio { width: 100%; margin-top: 24px; }
+  .empty { color: #9e9b92; }
+</style>
+</head>
+<body>
+<main>
+  <h1>Podcast RSS Reader</h1>
+  <p>Enter an HTTPS podcast RSS feed URL you choose. This app has no podcast catalog, show artwork, or preloaded episodes.</p>
+  <form id="feed-form">
+    <input id="feed-url" name="q" type="url" inputmode="url" autocomplete="url"
+      placeholder="https://example.com/podcast.rss" aria-label="Podcast RSS feed URL" autofocus>
+    <button type="submit">Load feed</button>
+  </form>
+  <p id="status" role="status" aria-live="polite">No feed loaded. Add a feed URL to begin.</p>
+  <h2 id="feed-title"></h2>
+  <section id="episodes" aria-label="Episodes"></section>
+  <audio id="player" controls hidden></audio>
+</main>
+<script>
+  (function () {
+    var form = document.getElementById('feed-form');
+    var input = document.getElementById('feed-url');
+    var status = document.getElementById('status');
+    var title = document.getElementById('feed-title');
+    var episodes = document.getElementById('episodes');
+    var player = document.getElementById('player');
+
+    window.setFeedUrl = function (value) {
+      input.value = value || '';
+      input.focus();
+    };
+
+    window.feedLoaded = function (result) {
+      episodes.textContent = '';
+      title.textContent = '';
+      player.pause();
+      player.removeAttribute('src');
+      player.hidden = true;
+      if (result.error) {
+        status.textContent = result.error;
+        return;
+      }
+      title.textContent = result.title;
+      status.textContent = 'Choose an episode to play.';
+      result.episodes.forEach(function (episode) {
+        var row = document.createElement('div');
+        row.className = 'episode';
+        var name = document.createElement('span');
+        name.className = 'episode-title';
+        name.textContent = episode.title;
+        var play = document.createElement('button');
+        play.type = 'button';
+        play.textContent = 'Play';
+        play.addEventListener('click', function () {
+          player.src = episode.audio;
+          player.hidden = false;
+          player.play();
+          status.textContent = 'Playing: ' + episode.title;
+        });
+        row.appendChild(name);
+        row.appendChild(play);
+        episodes.appendChild(row);
+      });
+    };
+
+    form.addEventListener('submit', function (event) {
+      event.preventDefault();
+      var address = input.value.trim();
+      if (!/^https:\/\//i.test(address)) {
+        status.textContent = 'Enter an HTTPS feed URL.';
+        return;
+      }
+      episodes.textContent = '';
+      title.textContent = '';
+      status.textContent = 'Loading the feed you selected…';
+      window.Podcasters.loadFeed(address);
+    });
+  })();
+</script>
+</body>
+</html>
diff --git a/firetv/app/src/main/assets/tv.js b/firetv/app/src/main/assets/tv.js
index e0770f0..97a375c 100644
--- a/firetv/app/src/main/assets/tv.js
+++ b/firetv/app/src/main/assets/tv.js
@@ -1,4 +1,4 @@
-/* Podcasters (p0dcasters.com) for Fire TV: remote-control navigation for any page in the WebView.
+/* Podcasters RSS reader for Fire TV: remote-control navigation for the bundled reader UI.
  *
  * Chromium's WebView scrolls on arrow keys instead of moving between links, so
  * the activity hands every D-pad press to pitNav() and OK to pitEnter(). Both
@@ -14,9 +14,7 @@
   var TEXT = /^(search|text|email|url|tel|number|password|)$/;
   var field = null; // the text field OK was pressed on, while the keyboard is up
 
-  // The focus ring is set through CSSOM on the element itself: p0dcasters.com (and
-  // many sites) ship style-src 'self', which blocks an injected <style> but not
-  // element.style. A TV needs a ring you can see from the couch.
+  // A TV needs a focus ring that can be seen from the couch.
   var RING = [['outline', '4px solid #e27a55'], ['outline-offset', '3px'],
     ['box-shadow', '0 0 0 8px rgba(5,5,5,.85)']];
   function ring(el, on) {
@@ -148,7 +146,7 @@
     el.dispatchEvent(new Event('input', { bubbles: true }));
     el.dispatchEvent(new Event('change', { bubbles: true }));
     var type = (el.getAttribute('type') || '').toLowerCase();
-    if (el.form && (type === 'search' || el.name === 'q')) {
+    if (el.form && type === 'search') {
       if (el.form.requestSubmit) el.form.requestSubmit(); else el.form.submit();
       return 'submitted';
     }
diff --git a/firetv/app/src/main/java/com/p0dcasters/tv/MainActivity.java b/firetv/app/src/main/java/com/p0dcasters/tv/MainActivity.java
index 74e661e..08d9214 100644
--- a/firetv/app/src/main/java/com/p0dcasters/tv/MainActivity.java
+++ b/firetv/app/src/main/java/com/p0dcasters/tv/MainActivity.java
@@ -3,22 +3,19 @@
 import android.annotation.SuppressLint;
 import android.app.Activity;
 import android.app.AlertDialog;
-import android.app.SearchManager;
-import android.content.ActivityNotFoundException;
 import android.content.Intent;
 import android.net.Uri;
-import android.os.Build;
 import android.os.Bundle;
 import android.text.InputType;
+import android.util.Xml;
 import android.view.KeyEvent;
 import android.view.View;
 import android.view.ViewGroup;
 import android.view.WindowManager;
 import android.view.inputmethod.EditorInfo;
 import android.view.inputmethod.InputMethodManager;
-import android.webkit.CookieManager;
+import android.webkit.JavascriptInterface;
 import android.webkit.WebChromeClient;
-import android.webkit.WebResourceError;
 import android.webkit.WebResourceRequest;
 import android.webkit.WebSettings;
 import android.webkit.WebView;
@@ -26,24 +23,31 @@
 import android.widget.EditText;
 import android.widget.FrameLayout;
 
+import org.json.JSONArray;
 import org.json.JSONObject;
+import org.xmlpull.v1.XmlPullParser;
 
 import java.io.ByteArrayOutputStream;
+import java.io.ByteArrayInputStream;
 import java.io.IOException;
 import java.io.InputStream;
-import java.io.UnsupportedEncodingException;
-import java.net.URLEncoder;
+import java.net.HttpURLConnection;
+import java.net.URL;
+import java.util.Locale;
+import java.util.concurrent.ExecutorService;
+import java.util.concurrent.Executors;
 
 /**
- * Podcasters (p0dcasters.com) on Fire TV: the site itself in a full-screen WebView, made usable
- * with a remote. assets/tv.js does the D-pad navigation inside each page; this
- * class routes keys to it and owns the things only native code can do well:
- * the TV keyboard, Back, full-screen video and the offline screen.
+ * A private RSS reader on Fire TV. The app has no preloaded podcast catalog:
+ * the user supplies a secure feed URL, and this device fetches it directly.
+ * assets/tv.js handles D-pad navigation; this class owns the native keyboard
+ * and the user-requested feed download.
  */
 public class MainActivity extends Activity {
 
-    static final String HOME = "https://p0dcasters.com/";
-    static final String OFFLINE = "file:///android_asset/offline.html";
+    static final String HOME = "file:///android_asset/reader.html";
+    private static final int MAX_FEED_BYTES = 2 * 1024 * 1024;
+    private static final int MAX_EPISODES = 100;
 
     private WebView web;
     private FrameLayout root;
@@ -51,6 +55,9 @@ public class MainActivity extends Activity {
     private WebChromeClient.CustomViewCallback fullscreenDone;
     private String tvJs = "";
     private AlertDialog keyboard;
+    private String pendingFeedUrl;
+    private boolean readerReady;
+    private final ExecutorService feedWorker = Executors.newSingleThreadExecutor();
 
     @SuppressLint("SetJavaScriptEnabled")
     @Override
@@ -76,30 +83,27 @@ protected void onCreate(Bundle state) {
         s.setLoadWithOverviewMode(true);
         s.setUseWideViewPort(true);
         s.setSupportZoom(false);
-        s.setAllowFileAccess(false);
+        s.setAllowFileAccess(true);
+        s.setAllowFileAccessFromFileURLs(false);
+        s.setAllowUniversalAccessFromFileURLs(false);
         s.setAllowContentAccess(false);
-        s.setUserAgentString(s.getUserAgentString() + " podcasters-tv");
         s.setMixedContentMode(WebSettings.MIXED_CONTENT_NEVER_ALLOW);
-        CookieManager.getInstance().setAcceptThirdPartyCookies(web, false);
+        web.addJavascriptInterface(new ReaderBridge(), "Podcasters");
 
         web.setWebViewClient(new Client());
         web.setWebChromeClient(new Chrome());
 
-        if (state != null) web.restoreState(state);
-        if (web.getUrl() == null) handle(getIntent(), true);
+        // Start on the bundled empty reader screen. Restoring a WebView state
+        // could otherwise reopen the old directory from version 1.0.0.
+        web.loadUrl(HOME);
+        handle(getIntent());
         web.requestFocus();
     }
 
     @Override
     protected void onNewIntent(Intent intent) {
         super.onNewIntent(intent);
-        handle(intent, false);
-    }
-
-    @Override
-    protected void onSaveInstanceState(Bundle out) {
-        super.onSaveInstanceState(out);
-        web.saveState(out);
+        handle(intent);
     }
 
     @Override
@@ -117,27 +121,26 @@ protected void onResume() {
     @Override
     protected void onDestroy() {
         if (keyboard != null) keyboard.dismiss();
+        feedWorker.shutdownNow();
         web.destroy();
         super.onDestroy();
     }
 
-    /** Launch, Alexa/system search and "share to pit.world" all end up here. */
-    private void handle(Intent intent, boolean launching) {
+    /** Shared text may fill the field, but never starts a feed fetch. */
+    private void handle(Intent intent) {
         String q = null;
         if (intent != null) {
-            if (Intent.ACTION_SEARCH.equals(intent.getAction())) q = intent.getStringExtra(SearchManager.QUERY);
-            else if (Intent.ACTION_SEND.equals(intent.getAction())) q = intent.getStringExtra(Intent.EXTRA_TEXT);
+            if (Intent.ACTION_SEND.equals(intent.getAction())) q = intent.getStringExtra(Intent.EXTRA_TEXT);
+        }
+        if (q != null && q.trim().length() > 0) {
+            if (readerReady) setFeedUrl(q.trim());
+            else pendingFeedUrl = q.trim();
         }
-        if (q != null && q.trim().length() > 0) search(q.trim());
-        else if (launching) web.loadUrl(HOME);
     }
 
-    private void search(String q) {
-        try {
-            web.loadUrl(HOME + "search?q=" + URLEncoder.encode(q, "UTF-8"));
-        } catch (UnsupportedEncodingException e) {
-            web.loadUrl(HOME);
-        }
+    private void setFeedUrl(String value) {
+        if (value == null) return;
+        web.evaluateJavascript("window.setFeedUrl(" + JSONObject.quote(value.trim()) + ")", null);
     }
 
     // ---- keys -------------------------------------------------------------
@@ -179,7 +182,7 @@ public boolean dispatchKeyEvent(KeyEvent e) {
             return true;
         }
         if (code == KeyEvent.KEYCODE_MENU || code == KeyEvent.KEYCODE_SEARCH) {
-            if (e.getAction() == KeyEvent.ACTION_UP) openKeyboard("", getString(R.string.search_hint), "search", true);
+            if (e.getAction() == KeyEvent.ACTION_UP) openKeyboard("", getString(R.string.search_hint), "url", true);
             return true;
         }
         return super.dispatchKeyEvent(e);
@@ -232,9 +235,9 @@ public void onReceiveValue(String v) {
     }
 
     /**
-     * A native text box, because it is the one thing guaranteed to bring up the
-     * Fire TV keyboard (and its microphone button). {@code standalone} searches
-     * pit.world directly; otherwise the text goes back into the page's field.
+     * A native text box, because it reliably opens the Fire TV keyboard and
+     * its microphone. Standalone input fills the field; the user still presses
+     * Load before any feed is fetched.
      */
     private void openKeyboard(String value, String hint, String type, final boolean standalone) {
         if (keyboard != null && keyboard.isShowing()) return;
@@ -250,7 +253,8 @@ private void openKeyboard(String value, String hint, String type, final boolean
         else if ("password".equals(type)) input |= InputType.TYPE_TEXT_VARIATION_PASSWORD;
         else if ("number".equals(type) || "tel".equals(type)) input = InputType.TYPE_CLASS_NUMBER;
         box.setInputType(input);
-        box.setImeOptions(EditorInfo.IME_ACTION_SEARCH | EditorInfo.IME_FLAG_NO_EXTRACT_UI);
+        int action = "url".equals(type) ? EditorInfo.IME_ACTION_DONE : EditorInfo.IME_ACTION_SEARCH;
+        box.setImeOptions(action | EditorInfo.IME_FLAG_NO_EXTRACT_UI);
 
         int pad = (int) (24 * getResources().getDisplayMetrics().density);
         FrameLayout wrap = new FrameLayout(this);
@@ -261,9 +265,11 @@ private void openKeyboard(String value, String hint, String type, final boolean
             @Override
             public void run() {
                 String text = box.getText().toString();
+                InputMethodManager imm = (InputMethodManager) getSystemService(INPUT_METHOD_SERVICE);
+                if (imm != null) imm.hideSoftInputFromWindow(box.getWindowToken(), 0);
                 if (keyboard != null) keyboard.dismiss();
                 if (standalone) {
-                    if (text.trim().length() > 0) search(text.trim());
+                    if (text.trim().length() > 0) setFeedUrl(text.trim());
                 } else {
                     web.evaluateJavascript(tvJs + "\n;pitFill(" + JSONObject.quote(text) + ")", null);
                 }
@@ -313,22 +319,9 @@ public boolean shouldOverrideUrlLoading(WebView view, WebResourceRequest req) {
             return route(req.getUrl().toString());
         }
 
-        /** The web stays in the app; mailto:, market:, intent: and the like go to the system. */
+        /** Keep the JavaScript bridge on the bundled reader page only. */
         private boolean route(String url) {
-            Uri u = Uri.parse(url);
-            String scheme = u.getScheme() == null ? "" : u.getScheme().toLowerCase(java.util.Locale.ROOT);
-            if (scheme.equals("https") || scheme.equals("http")) return false;
-            try {
-                Intent i = scheme.equals("intent") ? Intent.parseUri(url, Intent.URI_INTENT_SCHEME)
-                        : new Intent(Intent.ACTION_VIEW, u);
-                i.addCategory(Intent.CATEGORY_BROWSABLE);
-                i.setComponent(null);
-                i.setSelector(null);
-                startActivity(i);
-            } catch (Exception ignored) {
-                // Nothing on a TV handles it; staying put beats an error page.
-            }
-            return true;
+            return !HOME.equals(url);
         }
 
         @Override
@@ -339,22 +332,195 @@ public void onPageCommitVisible(WebView view, String url) {
         @Override
         public void onPageFinished(WebView view, String url) {
             view.evaluateJavascript(tvJs, null);
+            readerReady = true;
+            if (pendingFeedUrl != null) {
+                String value = pendingFeedUrl;
+                pendingFeedUrl = null;
+                setFeedUrl(value);
+            }
         }
 
-        @Override
-        public void onReceivedError(WebView view, WebResourceRequest req, WebResourceError err) {
-            if (req.isForMainFrame()) offline();
+    }
+
+    /** Called by reader.html after the user presses Load. */
+    private class ReaderBridge {
+        @JavascriptInterface
+        public void loadFeed(final String address) {
+            feedWorker.execute(new Runnable() {
+                @Override
+                public void run() {
+                    JSONObject result;
+                    try {
+                        result = fetchFeed(address);
+                    } catch (Exception ignored) {
+                        result = new JSONObject();
+                        try {
+                            result.put("error", "Couldn't load that feed. Check the HTTPS URL and try again.");
+                        } catch (Exception ignoredJson) {}
+                    }
+                    final String json = result.toString();
+                    runOnUiThread(new Runnable() {
+                        @Override
+                        public void run() {
+                            if (!isFinishing() && web != null) {
+                                web.evaluateJavascript("window.feedLoaded(" + json + ")", null);
+                            }
+                        }
+                    });
+                }
+            });
         }
+    }
 
-        @Override
-        @SuppressWarnings("deprecation")
-        public void onReceivedError(WebView view, int code, String description, String failingUrl) {
-            if (Build.VERSION.SDK_INT < Build.VERSION_CODES.M) offline();
+    private JSONObject fetchFeed(String address) throws Exception {
+        URL url = checkedFeedUrl(address);
+        byte[] xml = null;
+
+        for (int redirect = 0; redirect <= 5; redirect++) {
+            HttpURLConnection connection = (HttpURLConnection) url.openConnection();
+            connection.setConnectTimeout(10000);
+            connection.setReadTimeout(15000);
+            connection.setInstanceFollowRedirects(false);
+            connection.setRequestProperty("User-Agent", "podcasters-firetv/1.1");
+            connection.setRequestProperty(
+                    "Accept", "application/rss+xml, application/atom+xml, application/xml, text/xml;q=0.9");
+            try {
+                int status = connection.getResponseCode();
+                if (status >= 300 && status < 400) {
+                    String location = connection.getHeaderField("Location");
+                    if (location == null || redirect == 5) throw new IOException("redirect");
+                    url = checkedFeedUrl(new URL(url, location).toString());
+                    continue;
+                }
+                if (status < 200 || status >= 300) throw new IOException("response");
+                int length = connection.getContentLength();
+                if (length > MAX_FEED_BYTES) throw new IOException("large feed");
+                try (InputStream in = connection.getInputStream()) {
+                    xml = readBounded(in, MAX_FEED_BYTES);
+                }
+                break;
+            } finally {
+                connection.disconnect();
+            }
+        }
+
+        if (xml == null) throw new IOException("feed unavailable");
+        return parseFeed(xml, url);
+    }
+
+    private URL checkedFeedUrl(String raw) throws Exception {
+        if (raw == null || raw.trim().length() == 0 || raw.length() > 2048) {
+            throw new IOException("url");
+        }
+        Uri uri = Uri.parse(raw.trim());
+        String scheme = uri.getScheme() == null ? "" : uri.getScheme().toLowerCase(Locale.ROOT);
+        if (!"https".equals(scheme) || uri.getHost() == null || uri.getHost().length() == 0
+                || uri.getUserInfo() != null) {
+            throw new IOException("https required");
         }
+        return new URL(raw.trim());
+    }
 
-        private void offline() {
-            web.loadUrl(OFFLINE);
+    private byte[] readBounded(InputStream in, int maxBytes) throws IOException {
+        ByteArrayOutputStream out = new ByteArrayOutputStream();
+        byte[] buffer = new byte[8192];
+        int total = 0;
+        int count;
+        while ((count = in.read(buffer)) != -1) {
+            total += count;
+            if (total > maxBytes) throw new IOException("large feed");
+            out.write(buffer, 0, count);
+        }
+        return out.toByteArray();
+    }
+
+    private JSONObject parseFeed(byte[] bytes, URL feedUrl) throws Exception {
+        XmlPullParser parser = Xml.newPullParser();
+        parser.setFeature(XmlPullParser.FEATURE_PROCESS_DOCDECL, false);
+        parser.setInput(new ByteArrayInputStream(bytes), null);
+
+        JSONArray episodes = new JSONArray();
+        String feedTitle = "";
+        StringBuilder text = null;
+        boolean titleIsEpisode = false;
+        boolean inEpisode = false;
+        String episodeTitle = "";
+        String audioUrl = "";
+
+        int event = parser.getEventType();
+        while (event != XmlPullParser.END_DOCUMENT && episodes.length() < MAX_EPISODES) {
+            if (event == XmlPullParser.START_TAG) {
+                String name = parser.getName().toLowerCase(Locale.ROOT);
+                if ("item".equals(name) || "entry".equals(name)) {
+                    inEpisode = true;
+                    episodeTitle = "";
+                    audioUrl = "";
+                } else if ("title".equals(name)) {
+                    text = new StringBuilder();
+                    titleIsEpisode = inEpisode;
+                } else if ("enclosure".equals(name) || "media:content".equals(name)) {
+                    String candidate = parser.getAttributeValue(null, "url");
+                    String type = parser.getAttributeValue(null, "type");
+                    if (candidate != null && (type == null || type.trim().length() == 0
+                            || type.toLowerCase(Locale.ROOT).startsWith("audio"))) {
+                        audioUrl = resolveAudioUrl(feedUrl, candidate);
+                    }
+                } else if ("link".equals(name)
+                        && "enclosure".equals(parser.getAttributeValue(null, "rel"))) {
+                    String candidate = parser.getAttributeValue(null, "href");
+                    if (candidate != null) audioUrl = resolveAudioUrl(feedUrl, candidate);
+                }
+            } else if ((event == XmlPullParser.TEXT || event == XmlPullParser.CDSECT) && text != null) {
+                text.append(parser.getText());
+            } else if (event == XmlPullParser.END_TAG) {
+                String name = parser.getName().toLowerCase(Locale.ROOT);
+                if ("title".equals(name) && text != null) {
+                    String value = clean(text.toString(), 180);
+                    if (titleIsEpisode) episodeTitle = value;
+                    else if (feedTitle.length() == 0) feedTitle = value;
+                    text = null;
+                } else if (("item".equals(name) || "entry".equals(name)) && inEpisode) {
+                    if (isHttpsUrl(audioUrl)) {
+                        JSONObject episode = new JSONObject();
+                        episode.put("title", episodeTitle.length() == 0 ? "Untitled episode" : episodeTitle);
+                        episode.put("audio", audioUrl);
+                        episodes.put(episode);
+                    }
+                    inEpisode = false;
+                }
+            }
+            event = parser.next();
         }
+
+        if (episodes.length() == 0) throw new IOException("no playable episodes");
+        JSONObject result = new JSONObject();
+        result.put("title", feedTitle.length() == 0 ? "Podcast feed" : feedTitle);
+        result.put("episodes", episodes);
+        return result;
+    }
+
+    private boolean isHttpsUrl(String raw) {
+        try {
+            Uri uri = Uri.parse(raw);
+            return "https".equalsIgnoreCase(uri.getScheme())
+                    && uri.getHost() != null && uri.getUserInfo() == null;
+        } catch (Exception ignored) {
+            return false;
+        }
+    }
+
+    private String resolveAudioUrl(URL base, String raw) {
+        try {
+            URL resolved = new URL(base, raw.trim());
+            return "https".equalsIgnoreCase(resolved.getProtocol()) ? resolved.toString() : "";
+        } catch (Exception ignored) {
+            return "";
+        }
+    }
+
+    private String clean(String value, int limit) {
+        String result = value == null ? "" : value.replaceAll("\\s+", " ").trim();
+        return result.length() > limit ? result.substring(0, limit) : result;
     }
 
     private class Chrome extends WebChromeClient {
diff --git a/firetv/app/src/main/res/values/strings.xml b/firetv/app/src/main/res/values/strings.xml
index 4095dd0..a4ef85d 100644
--- a/firetv/app/src/main/res/values/strings.xml
+++ b/firetv/app/src/main/res/values/strings.xml
@@ -1,6 +1,6 @@
 <?xml version="1.0" encoding="utf-8"?>
 <resources>
     <string name="app_name">podcasters</string>
-    <string name="search_hint">Search podcasts, radio and TV</string>
-    <string name="search_go">Search</string>
+    <string name="search_hint">Podcast RSS feed URL</string>
+    <string name="search_go">Done</string>
 </resources>
diff --git a/firetv/emulator-test.sh b/firetv/emulator-test.sh
old mode 100644
new mode 100755
index 8e76e6f..118e24a
--- a/firetv/emulator-test.sh
+++ b/firetv/emulator-test.sh
@@ -1,15 +1,7 @@
 #!/bin/bash
-# Boots an Android TV emulator (API 30, the base of Fire OS 8), installs the APK,
-# drives it with remote-control keys and saves 1920x1080 screenshots to store/shots.
-#
-# THIS IS A FUNCTIONAL TEST, NOT THE SOURCE OF STORE ART. It searches the live
-# directory, so 04-results, 05-results-nav, 05b-results-right and 08-menu-search
-# are full of other people's cover art and show names. Uploading those is what
-# got 1.0.0 rejected on 2026-11-04 under Amazon's IP and Copyright policy.
-# Store screenshots come from store/capture.sh (/tv-preview), never from here.
-# Runs inside gradle:8.7-jdk17 with --device /dev/kvm and the SDK cache at /sdk:
-#   docker run --rm --device /dev/kvm -v ~/scratch/android-sdk:/sdk -v "$PWD/firetv:/w" -w /w \
-#     gradle:8.7-jdk17 bash emulator-test.sh
+# Boots API 30 Android TV and checks the Fire TV reader's empty state and form.
+# It never opens the public catalog or writes screenshots into the repository.
+# Run inside gradle:8.7-jdk17 with --device /dev/kvm and the SDK cache at /sdk.
 set -euo pipefail
 SDK=/sdk
 export ANDROID_HOME=$SDK ANDROID_SDK_ROOT=$SDK ANDROID_AVD_HOME=/root/.android/avd
@@ -20,69 +12,55 @@ apt-get install -y -qq libpulse0 libnss3 libxcomposite1 libxcursor1 libxi6 libxt
   libasound2 libgl1 libxkbfile1 libxdamage1 libxrandr2 libdrm2 libgbm1 >/dev/null 2>&1
 
 SM="$SDK/cmdline-tools/latest/bin/sdkmanager --sdk_root=$SDK"
-(yes || true) | $SM --licenses >/dev/null || true   # yes dies of SIGPIPE: not a failure
+(yes || true) | $SM --licenses >/dev/null || true
 $SM "emulator" "platform-tools" "$IMG" >/dev/null
-
 echo no | "$SDK/cmdline-tools/latest/bin/avdmanager" create avd -n tv -k "$IMG" -d tv_1080p --force >/dev/null
+
 ADB="$SDK/platform-tools/adb"
 "$SDK/emulator/emulator" -avd tv -no-window -no-audio -no-boot-anim -gpu swiftshader_indirect \
   -no-snapshot -memory 2048 >/tmp/emu.log 2>&1 &
-
 "$ADB" wait-for-device
 for i in $(seq 1 120); do
   [ "$("$ADB" shell getprop sys.boot_completed 2>/dev/null | tr -d '\r')" = 1 ] && break
   sleep 2
 done
-echo "booted"
-"$ADB" shell wm size
 
-# The package manager comes up a little after boot_completed; retry until it takes.
 for i in $(seq 1 20); do "$ADB" install -r dist/podcasters-firetv.apk && break; sleep 5; done
-mkdir -p store/shots
-shot() { "$ADB" exec-out screencap -p > "store/shots/$1.png"; echo "shot $1"; }
-key() { "$ADB" shell input keyevent "$@"; sleep 1.2; }
-focus() { "$ADB" shell dumpsys window 2>/dev/null | grep -m1 mCurrentFocus || true; }
-
-# 1. Leanback launch, the way the Fire TV home screen opens it.
 "$ADB" shell monkey -p com.p0dcasters.tv -c android.intent.category.LEANBACK_LAUNCHER 1 >/dev/null
-sleep 12
-focus
-shot 01-home
+sleep 8
+mkdir -p dist/test-artifacts
+"$ADB" exec-out screencap -p > dist/test-artifacts/reader-empty.png
 
-# 2. The home page autofocuses the search box: OK raises the Fire TV keyboard.
-#    (Arrows moving the focus ring are checked on the results page below.)
-key KEYCODE_DPAD_CENTER
-sleep 2
-focus
-shot 03-keyboard
-"$ADB" shell input text "true%scrime"
-key KEYCODE_ENTER
-sleep 10
-shot 04-results
-key KEYCODE_DPAD_DOWN KEYCODE_DPAD_DOWN KEYCODE_DPAD_DOWN KEYCODE_DPAD_DOWN
-shot 05-results-nav
-key KEYCODE_DPAD_RIGHT
-shot 05b-results-right
+dump_ui() {
+  "$ADB" shell uiautomator dump /sdcard/window.xml >/dev/null
+  "$ADB" pull /sdcard/window.xml "$1" >/dev/null
+}
+UI=$(mktemp)
+trap 'rm -f "$UI"; "$ADB" emu kill >/dev/null 2>&1 || true' EXIT
+dump_ui "$UI"
+if ! grep -q 'android.webkit.WebView' "$UI" || ! "$ADB" shell pidof com.p0dcasters.tv >/dev/null; then
+  cat "$UI"
+  echo "reader activity did not remain open" >&2
+  exit 1
+fi
 
-# 3. Back returns to the home page, Back again leaves the app.
-key KEYCODE_BACK
-sleep 4
-shot 06-back
-key KEYCODE_BACK
+# The native keyboard must accept a URL, and the page must reject HTTP without
+# making a network request. This also exercises the D-pad form and JS bridge.
+"$ADB" shell input keyevent KEYCODE_DPAD_CENTER
 sleep 2
-focus
-
-# 4. Menu key opens the standalone search box.
-"$ADB" shell monkey -p com.p0dcasters.tv -c android.intent.category.LEANBACK_LAUNCHER 1 >/dev/null
-sleep 8
-key KEYCODE_MENU
+"$ADB" exec-out screencap -p > dist/test-artifacts/reader-keyboard.png
+"$ADB" shell input text 'http://127.0.0.1/rss.xml'
+"$ADB" shell input keyevent KEYCODE_ENTER
+sleep 2
+# Keyboard Done fills the URL. Only selecting the page's Load button submits it.
+"$ADB" shell input keyevent KEYCODE_DPAD_RIGHT
+"$ADB" shell input keyevent KEYCODE_DPAD_CENTER
 sleep 2
-shot 07-menu-search
-"$ADB" shell input text "technology"
-key KEYCODE_ENTER
-sleep 10
-shot 08-menu-search
+dump_ui "$UI"
+"$ADB" exec-out screencap -p > dist/test-artifacts/reader-http-rejected.png
 
-"$ADB" logcat -d | grep -E "AndroidRuntime|FATAL|com.p0dcasters.tv|chromium.*Uncaught" | tail -20 || true
-[ -n "${OWNER:-}" ] && chown -R "$OWNER" store/shots
-ls -l store/shots
+if "$ADB" logcat -d | grep -E 'FATAL EXCEPTION|Process: com\.p0dcasters\.tv|Uncaught TypeError|Uncaught ReferenceError' | tail -20; then
+  echo "runtime error found in emulator log" >&2
+  exit 1
+fi
+echo "Fire TV reader emulator check passed"
diff --git a/firetv/store/capture.sh b/firetv/store/capture.sh
deleted file mode 100755
index 27e8e75..0000000
--- a/firetv/store/capture.sh
+++ /dev/null
@@ -1,51 +0,0 @@
-#!/bin/sh
-# Store screenshots for the Amazon Appstore listing, 1920x1080.
-#
-# These must carry NO third-party cover art and NO real show names. Amazon
-# rejected 1.0.0 on 2026-11-04 because the screenshots were live captures of
-# /search: real artwork and real titles (Mighty Oaks Daily Devotional, The
-# Harry Sisson Show) were in the listing, and we hold no licence to any of it.
-#
-# Both shots therefore come from /tv-preview, which renders the real card grid
-# with invented shows and no image URLs, so <Art> draws its own typographic
-# tile for every square. The app is a WebView of this site at this size, so a
-# headless capture is what the TV shows, without needing the Android SDK.
-#
-# Three things that are not obvious, each found the hard way:
-#
-#   * NOT the home page. Below its hero it shows the "deep catalogues" row,
-#     which is real cover art - and two of those shows are the ones Amazon
-#     named. /tv-preview?hero=1 gives the same hero with our own grid instead.
-#   * NOT /search either, even with no query: it carries a sponsored ad and
-#     names a real third-party domain in its help text.
-#   * Point BASE at the app container, not at the public hostname. p0dcasters
-#     answers a headless browser with its own x402 paywall ("You have used up
-#     the free allowance") after 20 requests an hour, and you will screenshot
-#     that instead. A browser user agent is still needed: the default
-#     HeadlessChrome string is treated as a crawler.
-#
-# Usage:
-#   sh firetv/store/capture.sh                      # the dev2 app container
-#   sh firetv/store/capture.sh http://127.0.0.1:PORT
-set -eu
-BASE=${1:-http://127.0.0.1:3235}
-OUT=$(CDPATH= cd -- "$(dirname -- "$0")" && pwd)/shots
-UA="Mozilla/5.0 (X11; CrKey armv7l 1.5.16041) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
-mkdir -p "$OUT"
-
-shot() { # shot <name> <path>
-  docker run --rm --memory 3g --shm-size 1g --network host \
-    -v "$OUT:/out" -w /out --entrypoint chromium-browser \
-    zenika/alpine-chrome:124 \
-    --headless --no-sandbox --disable-gpu --disable-dev-shm-usage \
-    --hide-scrollbars --window-size=1920,1080 --virtual-time-budget=15000 \
-    --user-agent="$UA" --screenshot="/out/$1.png" "$BASE$2"
-  echo "$1.png  <-  $BASE$2"
-}
-
-shot 01-hero "/tv-preview?hero=1"
-shot 02-grid /tv-preview
-
-echo
-echo "Look at both before uploading: no cover art that is not ours, no real show titles."
-ls -l "$OUT"
diff --git a/firetv/store/listing.md b/firetv/store/listing.md
index e82f43d..4b9b7c9 100644
--- a/firetv/store/listing.md
+++ b/firetv/store/listing.md
@@ -4,43 +4,41 @@
 - **Package:** com.p0dcasters.tv
 - **Category:** Music & Audio > Podcasts (fallback: Entertainment)
 - **Price:** Free. No in-app purchases.
-- **Devices:** Fire TV only. Audience: 13+ (open podcast directory, unfiltered content).
-- **Collects data:** no. No account needed to listen.
+- **Devices:** Fire TV only. Audience: 13+ (user-supplied feeds may contain unfiltered content).
+- **Account:** none. The app does not store feed URLs or collect account information. When you
+  load a feed, your device requests it from the HTTPS host you entered; that host receives the
+  request and normal network metadata.
 - **Privacy policy URL:** https://p0dcasters.com/privacy
 
 ## Short description
 
-Every podcast with a feed, plus live radio and TV. Free, no account.
+Play episodes from a podcast RSS feed you provide. Free, no account.
 
 ## Long description
 
-podcasters puts p0dcasters.com on your TV: every podcast with a public feed, on any host, plus live radio and TV channels.
+podcasters is a podcast RSS reader for Fire TV. Enter an HTTPS RSS feed URL that you choose and load it to see its available episodes. The app starts with no catalog, show artwork or episodes, and does not browse or index podcasts. Audio plays directly from the HTTPS address published in the feed.
 
-Over 390,000 live shows read straight from their RSS feeds: shows on their own domain, shows on every hosting platform, and the big network libraries. Free, no account, nothing to sign up for.
-
-podcasters is a podcast reader. It lists publicly published RSS feeds and plays them from the publisher's own server. It does not host, rehost or alter anyone's audio, and every show remains the property of whoever publishes it. Publishers can have a feed removed at any time from the contact page.
+No account is required. The app does not store feed URLs or collect account information. When you load a feed, your device requests it from the HTTPS host you entered; that host receives the request and normal network metadata.
 
 Made for the remote:
-- Press Menu to search, and type with the Fire TV keyboard or your voice.
-- Arrow keys move between shows and episodes with a big, easy-to-see highlight.
+- Enter a feed address with the Fire TV keyboard or your voice.
+- Arrow keys move between the address field, button and episode controls.
 - Play/pause, fast-forward 30 s and rewind 15 s from the remote.
-- Back steps back through your pages, and leaves the app from the home page.
-
-Browse by category, language and network, find self-hosted shows, or tune in to radio and TV streams.
+- Back leaves the app.
 
 ## Feature bullets
 
-Every podcast with a public feed, on any host
-Over 390,000 live shows, updated from their RSS feeds
-Live radio stations and TV channels
-Free, no account needed
-Search with the Fire TV keyboard or by voice
+Load a podcast RSS feed URL you choose
+Up to 100 playable episodes from the feed
+HTTPS feed and audio URLs
+No preloaded catalog or show artwork
+No account or saved feed history
+Use the Fire TV keyboard or voice input
 Remote play/pause, fast-forward and rewind
-Browse by category, language and network
 
 ## Keywords
 
-podcasts, podcast player, radio, live tv, p0dcasters, podcasters, rss, free podcasts
+podcasts, podcast player, podcasters, rss, podcast feed, free podcasts
 
 ## Art (store/out and store/shots)
 
@@ -49,18 +47,8 @@ podcasts, podcast player, radio, live tv, p0dcasters, podcasters, rss, free podc
 | Icon 512x512 / 114x114 | out/icon-512.png, out/icon-114.png |
 | Fire TV icon 1280x720 | out/firetv-icon-1280x720.png |
 | Fire TV background 1920x1080 | out/firetv-background-1920x1080.png |
-| Screenshots 1920x1080 | shots/01-hero.png, shots/02-grid.png |
-
-### Screenshots must not carry anyone else's artwork
-
-Amazon rejected version 1.0.0 on 2026-11-04 under the Intellectual Property
-and Copyright policy. The screenshots were live captures of `/search`, so real
-cover art and real show names — Mighty Oaks Daily Devotional, The Harry Sisson
-Show and others — were sitting in the store listing. We have no licence to
-anyone's cover art; a feed being public does not grant one.
+| Screenshots 1920x1080 | shots/01-empty.png, shots/02-url-entry.png |
 
-Capture the grid from **`/tv-preview`**, never from `/search`, `/podcasts` or
-the home page's "deep catalogues" row. That page renders the real card grid
-with invented shows and no image URLs, so `<Art>` draws its own typographic
-tile for every square. The search screenshot must be taken with the keyboard
-open and **no results behind it**.
+All screenshots must show only the bundled blank reader or user-entered example feed content
+whose names and artwork are original or licensed for this use. Never capture the live directory
+or any third-party catalog results.
diff --git a/firetv/store/shots/01-empty.png b/firetv/store/shots/01-empty.png
new file mode 100644
index 0000000..9f5832c
Binary files /dev/null and b/firetv/store/shots/01-empty.png differ
diff --git a/firetv/store/shots/01-hero.png b/firetv/store/shots/01-hero.png
deleted file mode 100644
index 0149508..0000000
Binary files a/firetv/store/shots/01-hero.png and /dev/null differ
diff --git a/firetv/store/shots/02-grid.png b/firetv/store/shots/02-grid.png
deleted file mode 100644
index 8697b60..0000000
Binary files a/firetv/store/shots/02-grid.png and /dev/null differ
diff --git a/firetv/store/shots/02-url-entry.png b/firetv/store/shots/02-url-entry.png
new file mode 100644
index 0000000..84e4fbe
Binary files /dev/null and b/firetv/store/shots/02-url-entry.png differ