Informativa sulla privacy

Ultimo aggiornamento: [date]

Traduzione provvisoria. Sono tradotti solo il riepilogo e i titoli delle sezioni. Il testo legale completo qui sotto è in inglese e prevale la versione inglese.

In breve

Conserviamo il tuo Device ID, le playlist che aggiungi e i dati dei tuoi pagamenti affinché l'app e la tua licenza funzionino.
Non hai bisogno di un account. L'indirizzo email è facoltativo e viene usato solo per inviarti la ricevuta.
I messaggi della live chat, insieme al nome e al Device ID che scegli di fornire, vengono conservati per risponderti.
Non tracciamo ciò che guardi e non utilizziamo cookie pubblicitari o analitici.
Puoi chiederci in qualsiasi momento di accedere ai tuoi dati o di cancellarli.

1. Titolare del trattamento

The controller of your personal data is [Company name], [registered address], [company number]. Contact for privacy questions: [legal email]. [Add a data protection officer or EU representative if required.]

2. Quali dati conserviamo

Data	Why	Legal basis (GDPR)
Device ID, a device secret (stored only as a hash), Device Key, platform, app version, first and last seen dates, parental PIN reset date, accepted terms version	To run the trial, recognise your licence and show your status	Contract (Art. 6(1)(b))
Playlists you add: name, M3U URL or Xtream server, username and password, EPG URL	To deliver your playlists to your device	Contract (Art. 6(1)(b))
Payment records: plan, amount, currency, status, date, receipt number, the payment provider's transaction reference, and your email address if you entered one	To activate the licence, issue receipts, handle refunds and meet accounting duties	Contract and legal obligation (Art. 6(1)(b), (c))
Live chat: a random visitor ID and chat token (also kept in your browser's local storage), the name and Device ID you choose to enter, your messages and their times	To answer your support questions	Contract / legitimate interest (Art. 6(1)(b), (f))
App error reports: error type and message, app version, Device ID	To find and fix bugs	Legitimate interest (Art. 6(1)(f))
IP address and request details in server logs	Security, abuse prevention and troubleshooting	Legitimate interest (Art. 6(1)(f))
Portal sign-in sessions (hashed token) and failed sign-in attempts	To keep you signed in and to block guessing of Device Keys	Legitimate interest (Art. 6(1)(f))
Messages you send us on Telegram	To answer you and activate manual payments	Contract / legitimate interest

We do not need your name or address, and we do not track what you watch. We do not use advertising or analytics cookies. The website keeps a short-lived sign-in token in your browser's session storage (deleted when you close the tab), and in local storage your language choice and, if you use the live chat, the chat visitor ID and token so the conversation continues when you come back.

Playlist credentials are needed in readable form to deliver them to your device. [Describe encryption at rest and who at the company can access them.]

3. Fornitori di servizi

Supabase (database, authentication and server functions; hosting region: [region]).
PayPal (card and PayPal payments). PayPal processes your payment details as an independent controller under its own privacy policy. We receive your PayPal transaction reference and [payer email / name — confirm what is stored].
NOWPayments (cryptocurrency payments), under its own privacy policy.
Resend (sends the receipt email, only if you entered an email address).
Telegram, when you contact us there, and to notify our support staff about new live chat messages (the notification contains the message text).
[Website hosting provider] (serves this website and may keep access logs).

Some of these providers may process data outside the EEA. Where they do, transfers are based on [adequacy decisions / Standard Contractual Clauses].

4. Periodo di conservazione dei dati

Device and playlist data: while the device is in use, and deleted [12 months] after the device was last seen, or earlier on request.
Payment records and receipts: [10 years] or as long as tax and accounting law requires.
Live chat conversations: [12 months] after the last message.
Server logs and error reports: [30 days] / [90 days].
Portal sessions: 2 hours; failed sign-in attempts: [24 hours].

5. I tuoi diritti

Under the GDPR you can ask for access to, correction, deletion or a copy (portability) of your data, object to processing based on legitimate interest, and restrict processing. You can delete your playlists yourself in My device. For other requests, contact us in the live chat or at [legal email] with your Device ID; we may ask you to prove you control the device (for example with the Device Key shown on it). You also have the right to complain to your data protection authority [name the lead authority].

6. Minori

The Service is not directed at children under 16 and we do not knowingly collect their data.

7. Modifiche

We will post any changes to this policy on this page and update the date above.