Privacy Policy
Effective: 17 September 2026.
1. Who is responsible for your data
The data controller for OrbitAI.tv is:
private
Registration: personal
Contact: support@orbitai.tv
2. What OrbitAI.tv is
OrbitAI.tv is a TV player. It ships with no channels, no playlists and no electronic programme guide of its own — you connect it to sources you already have (a playlist link, an Xtream or Stalker portal), and it plays them back. We never download, parse, cache or proxy your playlists, your EPG or your logs; that happens on your own device.
Your account holds your login credentials and, if you choose Premium, your licence. We do not store your sources, favourites, custom groups or settings — those stay on your own device only, and do not sync between devices.
3. What we collect, why, and for how long
| Data | Legal basis | Retention |
|---|---|---|
| Email, password hash, interface language | Performance of the contract | Until account deletion + 30 days, then pseudonymised |
| Devices linked to your account (including a device MAC used for pairing) | Performance of the contract | Unlinked after 90 days of inactivity; deleted when your account is pseudonymised |
| Licence records (a hash of your licence token, its state and dates) | Performance of the contract; our legitimate interest in fraud prevention | 5 years after expiry, then kept with no link to you |
| Support logs you choose to send us | Performance of the contract (support) | 30 days |
| Crash reports (only if you turn the crash‑reporting toggle on) | Our legitimate interest in fixing the app; you can opt out at any time | 90 days, after which the device identifier is removed |
| Telemetry (anonymous usage counters, opt‑in only) | Your consent | 13 months; collection stops the moment you withdraw consent, and it is deleted when your account is pseudonymised |
| IP address used for rate limiting | Our legitimate interest in keeping the service available | 24 hours |
| Sign-ins and sign-in attempts (account, IP address, client, result) | Our legitimate interest in account security | 90 days |
| Audit trail of security‑relevant account actions | Our legitimate interest in account security | 1 year |
| Database backups (Supabase) | — | 7 days, disclosed here as required |
We never sell your data, and we never use it for advertising.
4. Who else processes your data
We use the following processors, each bound by a data‑processing agreement:
- Supabase (Frankfurt, Germany) — database, authentication and file storage.
- Vercel (
fra1, Frankfurt) — hosting for this website. - Resend (EU region) — delivery of transactional emails only (confirmation, password reset, security notices). We never send marketing email.
- Google (Google Play, and Google Cloud Pub/Sub in
europe-west3) — processes your Premium subscription and its renewal notifications. See §5 and the Terms of Service for how the Google Play purchase itself works.
5. Your rights
Under the GDPR, you can at any time:
- Access the data we hold about you — ask us and we will provide a copy.
- Erase your account. Deleting your account starts a 30‑day undo window, after which your account is pseudonymised: your email and devices are removed or unlinked from you, and only what the retention table above requires us to keep (such as licence and audit records) survives, with no link back to your identity.
- Port your data. Ask us by email and we will send you an export of your account data in a structured, machine‑readable format.
- Object to processing based on our legitimate interest — in particular, you can turn off crash reporting at any time from the app or from your account settings, and we will stop collecting it for you going forward.
- Withdraw consent for telemetry at any time, with the same effect.
To exercise any of these rights, write to support@orbitai.tv.
6. Changes to this policy
If we change this policy in a way that reduces your rights or changes what we do with your data, we will tell you by email and give you at least 30 days' notice before it takes effect.
7. Contact
Questions about this policy: support@orbitai.tv. Reports about content on a source you use (not about your personal data): support@orbitai.tv.