Datenschutzerklärung

Zuletzt aktualisiert: [date]

Übersetzungsentwurf. Nur die Zusammenfassung und die Abschnittsüberschriften sind übersetzt. Der vollständige Rechtstext unten ist auf Englisch; maßgeblich ist die englische Fassung.

Kurz gesagt

Wir speichern Ihre Device ID, die von Ihnen hinzugefügten Playlists und Ihre Zahlungsdaten, damit die App und Ihre Lizenz funktionieren.
Sie benötigen kein Konto. Eine E-Mail-Adresse ist freiwillig und wird nur zum Versand Ihres Belegs verwendet.
Live-Chat-Nachrichten sowie der Name und die Device ID, die Sie freiwillig angeben, werden gespeichert, um Ihnen antworten zu können.
Wir erfassen nicht, was Sie ansehen, und verwenden keine Werbe- oder Analyse-Cookies.
Sie können jederzeit Auskunft über Ihre Daten oder deren Löschung verlangen.

1. Verantwortlicher

The controller of your personal data is [Company name], [registered address], [company number]. Contact for privacy questions: [legal email]. [Add a data protection officer or EU representative if required.]

2. Welche Daten wir speichern

Data	Why	Legal basis (GDPR)
Device ID, a device secret (stored only as a hash), Device Key, platform, app version, first and last seen dates, parental PIN reset date, accepted terms version	To run the trial, recognise your licence and show your status	Contract (Art. 6(1)(b))
Playlists you add: name, M3U URL or Xtream server, username and password, EPG URL	To deliver your playlists to your device	Contract (Art. 6(1)(b))
Payment records: plan, amount, currency, status, date, receipt number, the payment provider's transaction reference, and your email address if you entered one	To activate the licence, issue receipts, handle refunds and meet accounting duties	Contract and legal obligation (Art. 6(1)(b), (c))
Live chat: a random visitor ID and chat token (also kept in your browser's local storage), the name and Device ID you choose to enter, your messages and their times	To answer your support questions	Contract / legitimate interest (Art. 6(1)(b), (f))
App error reports: error type and message, app version, Device ID	To find and fix bugs	Legitimate interest (Art. 6(1)(f))
IP address and request details in server logs	Security, abuse prevention and troubleshooting	Legitimate interest (Art. 6(1)(f))
Portal sign-in sessions (hashed token) and failed sign-in attempts	To keep you signed in and to block guessing of Device Keys	Legitimate interest (Art. 6(1)(f))
Messages you send us on Telegram	To answer you and activate manual payments	Contract / legitimate interest

We do not need your name or address, and we do not track what you watch. We do not use advertising or analytics cookies. The website keeps a short-lived sign-in token in your browser's session storage (deleted when you close the tab), and in local storage your language choice and, if you use the live chat, the chat visitor ID and token so the conversation continues when you come back.

Playlist credentials are needed in readable form to deliver them to your device. [Describe encryption at rest and who at the company can access them.]

3. Dienstleister

Supabase (database, authentication and server functions; hosting region: [region]).
PayPal (card and PayPal payments). PayPal processes your payment details as an independent controller under its own privacy policy. We receive your PayPal transaction reference and [payer email / name — confirm what is stored].
NOWPayments (cryptocurrency payments), under its own privacy policy.
Resend (sends the receipt email, only if you entered an email address).
Telegram, when you contact us there, and to notify our support staff about new live chat messages (the notification contains the message text).
[Website hosting provider] (serves this website and may keep access logs).

Some of these providers may process data outside the EEA. Where they do, transfers are based on [adequacy decisions / Standard Contractual Clauses].

4. Speicherdauer

Device and playlist data: while the device is in use, and deleted [12 months] after the device was last seen, or earlier on request.
Payment records and receipts: [10 years] or as long as tax and accounting law requires.
Live chat conversations: [12 months] after the last message.
Server logs and error reports: [30 days] / [90 days].
Portal sessions: 2 hours; failed sign-in attempts: [24 hours].

5. Ihre Rechte

Under the GDPR you can ask for access to, correction, deletion or a copy (portability) of your data, object to processing based on legitimate interest, and restrict processing. You can delete your playlists yourself in My device. For other requests, contact us in the live chat or at [legal email] with your Device ID; we may ask you to prove you control the device (for example with the Device Key shown on it). You also have the right to complain to your data protection authority [name the lead authority].

6. Kinder

The Service is not directed at children under 16 and we do not knowingly collect their data.

7. Änderungen

We will post any changes to this policy on this page and update the date above.