Privacy Policy

Last updated 2026-10-22

Draft for legal review [D]. Replace the placeholders in brand.config.ts before publishing.

Controller

<Your company name>, <Address>, is responsible for the data described here. Contact: support@4ktvzplayer.com.

What we store

  • Devices: the Device ID, trial and licence dates, the Device Key (encrypted), app version and device model, the last time the device checked in, hashes of install proofs and device tokens. Devices hold no names or email addresses, and we do not store IP addresses with them.
  • Playlists you add: names, playlist and guide URLs, server addresses, usernames and passwords. URLs and credentials are stored encrypted. PINs are stored only as one-way hashes.
  • Accounts (optional): your email address, a password hash, a recovery-code hash, language, and sign-in times.
  • Orders: order number, plan, amount, payment method, the payment partner's reference and status, and the receipt email if you gave one.
  • Contact messages: your name, email, subject and message.
  • Security records: rate-limit counters and an audit trail of administrative and account actions. IP addresses appear there only as keyed hashes.

Processors

  • PayPal (payments with a PayPal account or card)
  • NOWPayments (cryptocurrency payments)
  • Cloudflare Turnstile (bot protection on our forms)
  • Our email (SMTP) provider, for account and receipt emails
  • The chat widget provider, only if the chat widget is enabled and you accept it

Retention

  • Expired sessions, email links and pairing codes: deleted within an hour.
  • Accounts that are never verified: deleted after 7 days.
  • Payment event payloads: personal details removed, and the remaining payload deleted after 180 days.
  • Audit entries and archived contact messages: deleted after 365 days.
  • Orders: kept without your email for the accounting period required by law (10 years by default).

Cookies

We use only strictly necessary cookies: a device session, an account session, an admin session and a security (CSRF) token. Your theme choice is stored in your browser's local storage, not in a cookie. If an optional chat widget is enabled, it loads only after you accept it; you can change that choice at any time.

Your rights

Under the GDPR you can access, correct, export and delete your data, object to processing and complain to your data protection authority. With an account you can download your data and delete the account yourself on the Account page. Without an account you can delete a device's playlists and PINs on its Security page. For anything else, write to support@4ktvzplayer.com.