Privacy Policy

Template - to be completed with the company details and legally reviewed before the service goes live.

Last updated: TODO: date

1. Controller

TODO: company name, address, contact e-mail; data protection officer if required.

2. Data processed by the app and the license server

To check the license of a device, the app sends to the license server:

the device's MAC address (used as the license identifier),
a device identifier, which the server stores only as a one-way hash (SHA-256),
the app version, device model, Android version, app language and time zone,
the IP address of the request (stored as "last seen"),
the portal address, if the user sets one.

The license server does not receive or store what is watched, channel lists or any content of the portal.

3. Purchases

Payments are handled by the selected payment provider (Stripe, PayPal or bank transfer). The server stores the order (plan, amount, date, status, payment reference) and, only if entered, an e-mail address for the receipt. Card or account data is never processed by this server. TODO: links to the payment providers' privacy policies.

4. Purpose and legal basis

TODO: purposes (providing the license, fraud prevention, accounting) and legal bases (e.g. GDPR Art. 6(1)(b), (c), (f)).

5. Retention

TODO: retention periods (device records, audit events, orders / accounting obligations, server logs, backups: 14 days).

6. Recipients and hosting

TODO: hosting provider and location; payment providers; e-mail provider.

7. Your rights

TODO: access, rectification, erasure, restriction, objection, data portability, complaint to a supervisory authority; how to exercise them.

8. Cookies

This website uses only a technically necessary session cookie (language choice, form protection). No tracking or advertising cookies. Fonts are served from this server.