Privacy policy

Device data and service operation

UTM Play processes the MAC or identifier displayed by the app (which may be synthetic), licence information, and the app type and version. It may also receive the device model, operating system, language and active playlist identifier to operate the app, provide remote configuration and support.

The app also stores the device key and sends it for operations that require it. To sign in through a partner, it sends the partner code and, when required, username and password for authentication. Usage data, including preferences, favourites, recent items and playback positions, is stored locally per playlist on the device.

Playlists and playback

When a playlist is registered, the service stores its address and, when provided, username and password. These details enable access to the playlist. In installed apps, playback connects to the selected playlist provider, which processes connection data according to its own practices. In the web implementation, catalogue and playback requests go directly from the browser to the playlist provider. This technical description does not indicate public availability of the web version. The provider's content and any advertisements are not controlled by UTM Play.

Technical logs and external services

Logs sent by the app may include event type, message, failure location, count, date and a device reference. Known URLs, MACs and credentials are filtered, but these logs are not anonymous. App logs received by the server are kept for 30 days. On the device, events may remain in a local queue until sent or cleared; this 30-day period does not apply to the local queue or to infrastructure logs.

Depending on the features used, the service may use TMDB for metadata, images and searches, Stripe or PayPal for website payments, and Cloudflare infrastructure. Sign-in, remote configuration and service messages also use the information needed to operate.

Contact and deletion

For questions, use the website's contact page. You can request deletion through Delete my data. Licence and payment information and an internal copy of deleted playlists may be retained, as explained on that page. Details about IP addresses and deletion follow below.

We keep your device's last IP address and the date/time of its last access, for security and support; it is replaced when the device accesses our services again. We also record the IP in security logs (for example, attempts to sign in with the partner code) and in the server's technical logs, which are deleted within 90 days. We only provide this data to authorities under a court order.

You can delete your TV's playlists and usage data yourself, with the MAC address and device key. The page explains what we delete and what we keep.

Delete my data