Política de privacidad

Última actualización: [date]

Traducción provisional. Solo se han traducido el resumen y los títulos de las secciones. El texto legal completo que aparece a continuación está en inglés, y prevalece la versión en inglés.

En resumen

Almacenamos tu Device ID, las listas que añades y tus registros de pago para que la app y tu licencia funcionen.
No necesitas una cuenta. El correo electrónico es opcional y solo se usa para enviarte el recibo.
Los mensajes del chat en directo, así como el nombre y el Device ID que decidas facilitarnos, se conservan para poder responderte.
No hacemos seguimiento de lo que ves ni usamos cookies publicitarias o analíticas.
Puedes pedirnos en cualquier momento acceder a tus datos o eliminarlos.

1. Responsable del tratamiento

The controller of your personal data is [Company name], [registered address], [company number]. Contact for privacy questions: [legal email]. [Add a data protection officer or EU representative if required.]

2. Qué datos almacenamos

Data	Why	Legal basis (GDPR)
Device ID, a device secret (stored only as a hash), Device Key, platform, app version, first and last seen dates, parental PIN reset date, accepted terms version	To run the trial, recognise your licence and show your status	Contract (Art. 6(1)(b))
Playlists you add: name, M3U URL or Xtream server, username and password, EPG URL	To deliver your playlists to your device	Contract (Art. 6(1)(b))
Payment records: plan, amount, currency, status, date, receipt number, the payment provider's transaction reference, and your email address if you entered one	To activate the licence, issue receipts, handle refunds and meet accounting duties	Contract and legal obligation (Art. 6(1)(b), (c))
Live chat: a random visitor ID and chat token (also kept in your browser's local storage), the name and Device ID you choose to enter, your messages and their times	To answer your support questions	Contract / legitimate interest (Art. 6(1)(b), (f))
App error reports: error type and message, app version, Device ID	To find and fix bugs	Legitimate interest (Art. 6(1)(f))
IP address and request details in server logs	Security, abuse prevention and troubleshooting	Legitimate interest (Art. 6(1)(f))
Portal sign-in sessions (hashed token) and failed sign-in attempts	To keep you signed in and to block guessing of Device Keys	Legitimate interest (Art. 6(1)(f))
Messages you send us on Telegram	To answer you and activate manual payments	Contract / legitimate interest

We do not need your name or address, and we do not track what you watch. We do not use advertising or analytics cookies. The website keeps a short-lived sign-in token in your browser's session storage (deleted when you close the tab), and in local storage your language choice and, if you use the live chat, the chat visitor ID and token so the conversation continues when you come back.

Playlist credentials are needed in readable form to deliver them to your device. [Describe encryption at rest and who at the company can access them.]

3. Proveedores de servicios

Supabase (database, authentication and server functions; hosting region: [region]).
PayPal (card and PayPal payments). PayPal processes your payment details as an independent controller under its own privacy policy. We receive your PayPal transaction reference and [payer email / name — confirm what is stored].
NOWPayments (cryptocurrency payments), under its own privacy policy.
Resend (sends the receipt email, only if you entered an email address).
Telegram, when you contact us there, and to notify our support staff about new live chat messages (the notification contains the message text).
[Website hosting provider] (serves this website and may keep access logs).

Some of these providers may process data outside the EEA. Where they do, transfers are based on [adequacy decisions / Standard Contractual Clauses].

4. Plazo de conservación de los datos

Device and playlist data: while the device is in use, and deleted [12 months] after the device was last seen, or earlier on request.
Payment records and receipts: [10 years] or as long as tax and accounting law requires.
Live chat conversations: [12 months] after the last message.
Server logs and error reports: [30 days] / [90 days].
Portal sessions: 2 hours; failed sign-in attempts: [24 hours].

5. Tus derechos

Under the GDPR you can ask for access to, correction, deletion or a copy (portability) of your data, object to processing based on legitimate interest, and restrict processing. You can delete your playlists yourself in My device. For other requests, contact us in the live chat or at [legal email] with your Device ID; we may ask you to prove you control the device (for example with the Device Key shown on it). You also have the right to complain to your data protection authority [name the lead authority].

6. Menores

The Service is not directed at children under 16 and we do not knowingly collect their data.

7. Modificaciones

We will post any changes to this policy on this page and update the date above.