Politique de confidentialité
Dernière mise à jour : [date]
Traduction provisoire. Seuls le résumé et les titres des sections sont traduits. Le texte juridique complet ci-dessous est en anglais, et la version anglaise fait foi.
En bref
- Nous conservons votre Device ID, les playlists que vous ajoutez et l'historique de vos paiements afin que l'application et votre licence fonctionnent.
- Lorsque l'application vérifie sa licence, nous enregistrons l'adresse IP de votre appareil et en déduisons une localisation approximative (pays, région, ville) ainsi que votre fournisseur d'accès, à des fins de sécurité, de prévention de la fraude et de respect de la licence. L'historique des adresses IP est conservé 90 jours.
- Vous n'avez pas besoin de compte. L'adresse e-mail est facultative et sert uniquement à vous envoyer votre reçu.
- Les messages du chat en direct, ainsi que le nom et le Device ID que vous choisissez de communiquer, sont conservés pour vous répondre.
- Nous ne suivons pas ce que vous regardez et n'utilisons aucun cookie publicitaire ou de mesure d'audience.
- Vous pouvez à tout moment nous demander d'accéder à vos données ou de les supprimer.
1. Responsable du traitement
The controller of your personal data is [Company name], [registered address], [company number]. Contact for privacy questions: [legal email]. [Add a data protection officer or EU representative if required.]
2. Données conservées
| Data | Why | Legal basis (GDPR) |
|---|---|---|
| Device ID, a device secret (stored only as a hash), Device Key, platform, app version, first and last seen dates, parental PIN reset date, accepted terms version | To run the trial, recognise your licence and show your status | Contract (Art. 6(1)(b)) |
| Playlists you add: name, M3U URL or Xtream server, username and password, EPG URL | To deliver your playlists to your device | Contract (Art. 6(1)(b)) |
| Payment records: plan, amount, currency, status, date, receipt number, the payment provider's transaction reference, and your email address if you entered one | To activate the licence, issue receipts, handle refunds and meet accounting duties | Contract and legal obligation (Art. 6(1)(b), (c)) |
| Live chat: a random visitor ID and chat token (also kept in your browser's local storage), the name and Device ID you choose to enter, your messages and their times | To answer your support questions | Contract / legitimate interest (Art. 6(1)(b), (f)) |
| App error reports: error type and message, app version, Device ID | To find and fix bugs | Legitimate interest (Art. 6(1)(f)) |
| Device network data: the public IP address your device uses when the App checks its licence (first and latest IP address, time of the last check), the approximate location derived from it (country, region, city) and the internet provider, and a history of the IP addresses the device checked in from (with first/last seen dates and number of check-ins) | Security, fraud and abuse prevention, licence enforcement (for example detecting one licence being used on many devices or in many places) and support (identifying your device when you contact us) | Legitimate interest (Art. 6(1)(f)) |
| IP address and request details in server logs | Security, abuse prevention and troubleshooting | Legitimate interest (Art. 6(1)(f)) |
| Portal sign-in sessions (hashed token) and failed sign-in attempts | To keep you signed in and to block guessing of Device Keys | Legitimate interest (Art. 6(1)(f)) |
| Messages you send us on Telegram | To answer you and activate manual payments | Contract / legitimate interest |
We do not need your name or address, and we do not track what you watch. We do not use advertising or analytics cookies. The website keeps a short-lived sign-in token in your browser's session storage (deleted when you close the tab), and in local storage your language choice and, if you use the live chat, the chat visitor ID and token so the conversation continues when you come back.
IP address and approximate location. Every time the App checks its licence (when it starts, when it resumes and every 15 minutes while it is open) it connects to our servers, which receive your device's public IP address. We store it with your device record and in an IP history. To show our support staff where a device approximately is, the IP address — and nothing else, no Device ID or other data — is sent to the IP geolocation service ipwho.is, which returns the country, region, city and internet provider associated with that IP address. The country may also be provided by our hosting network (Cloudflare) with the request. This location is approximate (at most city level), does not reveal your address, and is never used for advertising or to track what you watch. You can object to this processing (see section 5); as the licence check cannot work without an internet connection, the IP address itself is always transmitted when the App connects.
Playlist credentials are needed in readable form to deliver them to your device. [Describe encryption at rest and who at the company can access them.]
3. Prestataires de services
- Supabase (database, authentication and server functions; hosting region: [region]).
- PayPal (card and PayPal payments). PayPal processes your payment details as an independent controller under its own privacy policy. We receive your PayPal transaction reference and [payer email / name — confirm what is stored].
- NOWPayments (cryptocurrency payments), under its own privacy policy.
- Resend (sends the receipt email, only if you entered an email address).
- ipwho.is (IP geolocation lookup: receives only a device's IP address and returns its approximate country, region, city and internet provider; it receives no Device ID, email address or other data).
- Telegram, when you contact us there, and to notify our support staff about new live chat messages (the notification contains the message text).
- [Website hosting provider] (serves this website and may keep access logs).
Some of these providers may process data outside the EEA. Where they do, transfers are based on [adequacy decisions / Standard Contractual Clauses].
4. Durée de conservation des données
- Device and playlist data: while the device is in use, and deleted [12 months] after the device was last seen, or earlier on request.
- Payment records and receipts: [10 years] or as long as tax and accounting law requires.
- Live chat conversations: [12 months] after the last message.
- IP address history: 90 days after the device last used that IP address, then deleted automatically. The latest IP address, the first IP address and the approximate location are kept with the device record and deleted together with it.
- Server logs and error reports: [30 days] / [90 days].
- Portal sessions: 2 hours; failed sign-in attempts: [24 hours].
5. Vos droits
Under the GDPR you can ask for access to, correction, deletion or a copy (portability) of your data, object to processing based on legitimate interest (including the recording of your IP address and approximate location), and restrict processing. You can delete your playlists yourself in My device. For other requests, contact us in the live chat or at [legal email] with your Device ID; we may ask you to prove you control the device (for example with the Device Key shown on it). You also have the right to complain to your data protection authority [name the lead authority].
6. Mineurs
The Service is not directed at children under 16 and we do not knowingly collect their data.
7. Modifications
We will post any changes to this policy on this page and update the date above.