IPTV SPEED · TV PLAYER
App Privacy Policy
Your playlists stay on your device. This notice explains the connections, device licensing and support information used by IPTV Speed.
1. Scope and current availability
This notice explains how IPTV Speed processes information in its TV player and associated device-licensing service. Last updated: 29 October 2026. The app is currently being prepared for release. Production device registration and the seven-day device trial are enabled. Public purchases are not yet available. Payment processing described below applies only when a checkout service is enabled; current payment testing uses Stripe’s test environment. IPTV Speed is a player for your own lawful playlists. We do not supply television subscriptions, films or series.
2. Who is responsible
Fehmi Zekaj, trading as IPTV Speed, Gretescher Weg 7, 49084 Osnabrück, Germany. Email: support@iptvspeed.app. Telephone: +49 15563 349305. Contact us for privacy questions and requests. Please do not send playlist passwords, full credential-bearing playlist URLs or payment-card details.
3. Information kept on your TV
The player stores playlist profiles and names, M3U or Xtream server addresses and access credentials, cached channel and catalogue information, favourites, recently watched channels, playback progress, and interface, language and colour preferences in the app’s local storage. This lets the player reconnect to your chosen service, show your library and resume playback. The app also stores a generated device key and an installation token used to authenticate device-licensing requests. Protect access to your TV: playlist credentials must be available to the player to retrieve your content.
These playlists, passwords, viewing titles, favourites and playback-history records are not sent to our licensing server. Removing a playlist removes its profile and associated cached catalogue data; other local preferences or progress records may remain. Use your TV’s available app-data reset controls to clear remaining local data. The exact reset options depend on the TV software.
4. Connections to your content providers
When you connect a playlist or play a stream, the TV contacts your chosen provider, programme-guide service and image or stream hosts directly. They receive the TV’s public IP address, requested resources and any credentials needed for that request. Their own privacy policies and retention rules apply. We do not operate a public relay for your viewing streams. Some providers use unencrypted HTTP; use HTTPS sources where available.
If you choose the optional public test video, the TV retrieves it from Apple’s streaming CDN (devstreaming-cdn.apple.com), which receives the connection information necessary to deliver that video. The test video is not an advertising or analytics service.
5. Device licensing and operational information
When device licensing is configured and enabled, registration sends the generated device key, installation token and, on supported Samsung TVs, the TV’s network MAC address to our service over HTTPS. The MAC address is used to recognise a device and limit repeated free trials. Our database stores a keyed cryptographic fingerprint rather than the full MAC address, and a keyed hash rather than the original installation token. These fingerprints are still device-related personal data, not anonymous information.
The server assigns a random device identifier and records registration time, trial expiry and any licence entitlements. The app subsequently checks licence status using its device identifier and authentication token. The server records at most one activity entry per device per UTC day to understand active-device totals. Entries older than 89 days are removed during subsequent status processing, so this is a rolling operational history of approximately 90 days. It contains no channel names or viewing titles.
IP addresses and technical request information are necessarily processed to deliver and protect the service, including in-memory rate limiting. We do not enable a separate web access log for individual requests. Limited technical error logs may contain connection information and are rotated by size. We do not use advertising identifiers, advertising SDKs, marketing pixels or third-party behavioural analytics in the player.
6. Activation and payment, when enabled
Activation codes link an external activation page to a TV licence. Codes expire after 30 minutes; expired database records are cleaned up when new activation requests are processed. Checkout is intended to open on your phone or computer, for example through a QR code, rather than collecting card details on the TV.
When Stripe Checkout is enabled, Stripe processes payment and contact or billing information on its hosted checkout. We send a random device identifier, a checkout-binding value and the selected price plan; we do not send MAC addresses, playlists or viewing histories to Stripe. We receive payment, subscription and invoice references and the information needed to grant, renew or revoke a licence. Customer contact and billing information may also be accessible to us through Stripe’s merchant dashboard. We do not receive your full card number.
For European merchants, relevant Stripe entities include Stripe Payments Europe, Limited and Stripe Technology Company, Limited in Ireland; Stripe may act as a processor or an independent controller depending on the activity. See Stripe’s Privacy Policy for its processing, retention and international-transfer arrangements. No live payment is taken through the current prelaunch site.
7. Support and other service providers
If you contact support, we process your contact details, message and any diagnostic information you choose to provide to handle the request. Email sent to support@iptvspeed.app passes through Cloudflare Email Routing to our Microsoft Outlook/Hotmail mailbox. Please provide only the information necessary for the issue.
Our website and licensing service are hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, on a server in Nuremberg. Cloudflare and Microsoft handle support-email delivery and storage; Stripe handles payment services when enabled. Authorised providers and persons assisting with operation receive only access needed for their tasks. Information may also be disclosed where required by law or necessary to establish, exercise or defend legal claims. We do not sell your personal information.
Samsung separately processes information when you use its TV platform, account and app store under its own terms and privacy notices. We do not receive your Samsung account password. Store-provided download statistics are separate from the player’s device-activity counts.
8. Purposes and legal bases
We process information necessary to provide the requested playlist-player functions, trial, device licence, checkout and support on the basis of Article 6(1)(b) GDPR (steps before or performance of a contract). Security, preventing licence abuse and repeated trials, and basic operational device counts rely on Article 6(1)(f) GDPR, our legitimate interests in a secure and sustainable service. We consider the impact on users and limit the information collected. Legally required accounting or disclosure uses Article 6(1)(c) GDPR. If a particular feature requires consent, that consent must be requested separately before the relevant processing; this notice is not itself a consent request. You can decline to supply optional support information. Without necessary provider credentials or device-licensing information, the corresponding connection or licence feature cannot work.
9. Retention and deletion
Local player data remains on the TV until removed through the relevant app or TV data-reset controls. Device-registration and licence records are retained while needed to administer trials and entitlements, recover access, prevent abuse or handle legal claims. Payment references and required accounting records are retained for the applicable statutory periods. We assess deletion requests against these purposes and any legal retention duties; a device fingerprint cannot always be deleted immediately while it is still necessary to prevent repeated trials or establish an entitlement.
Daily activity records and activation codes have the shorter limits described above. Other device and payment records currently require an individual retention/deletion review; there is no general automatic purge schedule for them in the prerelease service. Backup copies may retain earlier records until replaced or securely removed, with access restricted to recovery purposes. Production database backups are created daily. Automatic backup expiry has not yet been enabled; the retention setting is awaiting the operator’s confirmation. Separately exported recovery copies are restricted and reviewed during maintenance. Support messages are kept for as long as needed to resolve the issue, meet any applicable obligations and handle necessary claims, and then deleted.
10. Security and international processing
Licensing and hosted activation connections use HTTPS. Stored installation credentials and device fingerprints are protected by keyed hashes; administrative access is restricted and the service uses network access controls. No system can guarantee absolute security, and a third-party stream’s security depends on that provider.
Hosting is in Germany. International providers, particularly Cloudflare, Microsoft and Stripe, may process information outside the EEA, including in the United States. Their published privacy and transfer information explains the safeguards they use, such as applicable adequacy decisions or standard contractual clauses. You may contact us for information about safeguards relevant to your data. Further information: Hetzner, Cloudflare and Microsoft.
11. Your rights and children
Subject to the applicable conditions, you can request access, correction, deletion, restriction and portability of your personal data. You can object to processing based on legitimate interests for reasons relating to your particular situation. Where processing is based on consent, you may withdraw that consent for the future without affecting earlier lawful processing. Contact support@iptvspeed.app; include your device key if relevant, but never your installation token or playlist password. We may need proportionate information to verify that a request relates to your device.
You can complain to a data-protection supervisory authority, including the State Commissioner for Data Protection of Lower Saxony, or the authority where you live or work.
The paid licensing service is intended to be set up by adults and is not directed at children. We do not intentionally request sensitive personal data or children’s profiles. If you believe a child has submitted personal information without the necessary authorisation, contact us so we can investigate and address it.
12. Changes and website privacy
We will update this notice when the app’s processing or services change, including before enabling public purchases. The version date appears above. The public website has separate website privacy information (German).