Πολιτική απορρήτου

Τελευταία ενημέρωση: [date]

Πρόχειρη μετάφραση. Μεταφράζονται μόνο η σύνοψη και οι τίτλοι των ενοτήτων. Το πλήρες νομικό κείμενο παρακάτω είναι στα αγγλικά και υπερισχύει η αγγλική έκδοση.

Συνοπτικά

Αποθηκεύουμε το Device ID σας, τις λίστες που προσθέτετε και τα στοιχεία των πληρωμών σας, ώστε να λειτουργούν η εφαρμογή και η άδεια χρήσης σας.
Δεν χρειάζεστε λογαριασμό. Η διεύθυνση email είναι προαιρετική και χρησιμοποιείται μόνο για την αποστολή της απόδειξής σας.
Τα μηνύματα της ζωντανής συνομιλίας, καθώς και το όνομα και το Device ID που επιλέγετε να μας δώσετε, διατηρούνται για να σας απαντήσουμε.
Δεν παρακολουθούμε τι βλέπετε και δεν χρησιμοποιούμε cookies διαφήμισης ή ανάλυσης.
Μπορείτε να μας ζητήσετε ανά πάσα στιγμή να δείτε ή να διαγράψουμε τα δεδομένα σας.

1. Υπεύθυνος επεξεργασίας

The controller of your personal data is [Company name], [registered address], [company number]. Contact for privacy questions: [legal email]. [Add a data protection officer or EU representative if required.]

2. Τι αποθηκεύουμε

Data	Why	Legal basis (GDPR)
Device ID, a device secret (stored only as a hash), Device Key, platform, app version, first and last seen dates, parental PIN reset date, accepted terms version	To run the trial, recognise your licence and show your status	Contract (Art. 6(1)(b))
Playlists you add: name, M3U URL or Xtream server, username and password, EPG URL	To deliver your playlists to your device	Contract (Art. 6(1)(b))
Payment records: plan, amount, currency, status, date, receipt number, the payment provider's transaction reference, and your email address if you entered one	To activate the licence, issue receipts, handle refunds and meet accounting duties	Contract and legal obligation (Art. 6(1)(b), (c))
Live chat: a random visitor ID and chat token (also kept in your browser's local storage), the name and Device ID you choose to enter, your messages and their times	To answer your support questions	Contract / legitimate interest (Art. 6(1)(b), (f))
App error reports: error type and message, app version, Device ID	To find and fix bugs	Legitimate interest (Art. 6(1)(f))
IP address and request details in server logs	Security, abuse prevention and troubleshooting	Legitimate interest (Art. 6(1)(f))
Portal sign-in sessions (hashed token) and failed sign-in attempts	To keep you signed in and to block guessing of Device Keys	Legitimate interest (Art. 6(1)(f))
Messages you send us on Telegram	To answer you and activate manual payments	Contract / legitimate interest

We do not need your name or address, and we do not track what you watch. We do not use advertising or analytics cookies. The website keeps a short-lived sign-in token in your browser's session storage (deleted when you close the tab), and in local storage your language choice and, if you use the live chat, the chat visitor ID and token so the conversation continues when you come back.

Playlist credentials are needed in readable form to deliver them to your device. [Describe encryption at rest and who at the company can access them.]

3. Πάροχοι υπηρεσιών

Supabase (database, authentication and server functions; hosting region: [region]).
PayPal (card and PayPal payments). PayPal processes your payment details as an independent controller under its own privacy policy. We receive your PayPal transaction reference and [payer email / name — confirm what is stored].
NOWPayments (cryptocurrency payments), under its own privacy policy.
Resend (sends the receipt email, only if you entered an email address).
Telegram, when you contact us there, and to notify our support staff about new live chat messages (the notification contains the message text).
[Website hosting provider] (serves this website and may keep access logs).

Some of these providers may process data outside the EEA. Where they do, transfers are based on [adequacy decisions / Standard Contractual Clauses].

4. Για πόσο διατηρούμε τα δεδομένα

Device and playlist data: while the device is in use, and deleted [12 months] after the device was last seen, or earlier on request.
Payment records and receipts: [10 years] or as long as tax and accounting law requires.
Live chat conversations: [12 months] after the last message.
Server logs and error reports: [30 days] / [90 days].
Portal sessions: 2 hours; failed sign-in attempts: [24 hours].

5. Τα δικαιώματά σας

Under the GDPR you can ask for access to, correction, deletion or a copy (portability) of your data, object to processing based on legitimate interest, and restrict processing. You can delete your playlists yourself in My device. For other requests, contact us in the live chat or at [legal email] with your Device ID; we may ask you to prove you control the device (for example with the Device Key shown on it). You also have the right to complain to your data protection authority [name the lead authority].

6. Ανήλικοι

The Service is not directed at children under 16 and we do not knowingly collect their data.

7. Αλλαγές

We will post any changes to this policy on this page and update the date above.