Gizlilik politikası

Son güncelleme: [date]

Taslak çeviri. Yalnızca özet ve bölüm başlıkları çevrilmiştir. Aşağıdaki tam yasal metin İngilizcedir ve İngilizce sürüm esas alınır.

Özetle

Uygulamanın ve lisansınızın çalışması için Device ID bilginizi, eklediğiniz oynatma listelerini ve ödeme kayıtlarınızı saklarız.
Hesaba ihtiyacınız yoktur. E-posta adresi isteğe bağlıdır ve yalnızca makbuzunuzu göndermek için kullanılır.
Canlı sohbet mesajları ile vermeyi tercih ettiğiniz ad ve Device ID, size yanıt verebilmek için saklanır.
Ne izlediğinizi takip etmeyiz; reklam veya analiz çerezleri kullanmayız.
Verilerinizi görmeyi veya silmemizi istediğiniz zaman talep edebilirsiniz.

1. Veri sorumlusu

The controller of your personal data is [Company name], [registered address], [company number]. Contact for privacy questions: [legal email]. [Add a data protection officer or EU representative if required.]

2. Sakladığımız veriler

Data	Why	Legal basis (GDPR)
Device ID, a device secret (stored only as a hash), Device Key, platform, app version, first and last seen dates, parental PIN reset date, accepted terms version	To run the trial, recognise your licence and show your status	Contract (Art. 6(1)(b))
Playlists you add: name, M3U URL or Xtream server, username and password, EPG URL	To deliver your playlists to your device	Contract (Art. 6(1)(b))
Payment records: plan, amount, currency, status, date, receipt number, the payment provider's transaction reference, and your email address if you entered one	To activate the licence, issue receipts, handle refunds and meet accounting duties	Contract and legal obligation (Art. 6(1)(b), (c))
Live chat: a random visitor ID and chat token (also kept in your browser's local storage), the name and Device ID you choose to enter, your messages and their times	To answer your support questions	Contract / legitimate interest (Art. 6(1)(b), (f))
App error reports: error type and message, app version, Device ID	To find and fix bugs	Legitimate interest (Art. 6(1)(f))
IP address and request details in server logs	Security, abuse prevention and troubleshooting	Legitimate interest (Art. 6(1)(f))
Portal sign-in sessions (hashed token) and failed sign-in attempts	To keep you signed in and to block guessing of Device Keys	Legitimate interest (Art. 6(1)(f))
Messages you send us on Telegram	To answer you and activate manual payments	Contract / legitimate interest

We do not need your name or address, and we do not track what you watch. We do not use advertising or analytics cookies. The website keeps a short-lived sign-in token in your browser's session storage (deleted when you close the tab), and in local storage your language choice and, if you use the live chat, the chat visitor ID and token so the conversation continues when you come back.

Playlist credentials are needed in readable form to deliver them to your device. [Describe encryption at rest and who at the company can access them.]

3. Hizmet sağlayıcılar

Supabase (database, authentication and server functions; hosting region: [region]).
PayPal (card and PayPal payments). PayPal processes your payment details as an independent controller under its own privacy policy. We receive your PayPal transaction reference and [payer email / name — confirm what is stored].
NOWPayments (cryptocurrency payments), under its own privacy policy.
Resend (sends the receipt email, only if you entered an email address).
Telegram, when you contact us there, and to notify our support staff about new live chat messages (the notification contains the message text).
[Website hosting provider] (serves this website and may keep access logs).

Some of these providers may process data outside the EEA. Where they do, transfers are based on [adequacy decisions / Standard Contractual Clauses].

4. Verilerin saklanma süresi

Device and playlist data: while the device is in use, and deleted [12 months] after the device was last seen, or earlier on request.
Payment records and receipts: [10 years] or as long as tax and accounting law requires.
Live chat conversations: [12 months] after the last message.
Server logs and error reports: [30 days] / [90 days].
Portal sessions: 2 hours; failed sign-in attempts: [24 hours].

5. Haklarınız

Under the GDPR you can ask for access to, correction, deletion or a copy (portability) of your data, object to processing based on legitimate interest, and restrict processing. You can delete your playlists yourself in My device. For other requests, contact us in the live chat or at [legal email] with your Device ID; we may ask you to prove you control the device (for example with the Device Key shown on it). You also have the right to complain to your data protection authority [name the lead authority].

6. Çocuklar

The Service is not directed at children under 16 and we do not knowingly collect their data.

7. Değişiklikler

We will post any changes to this policy on this page and update the date above.