Privacy policy

Who is responsible

Studio LXD, which develops Zapper IPTV. For any question about your data, write to us at [email protected].

If you use the app without an account

This is the default, and in it we handle no data of yours:

• The app only connects to your IPTV provider's server, to download the catalogue and to play. On Android it also checks zapperiptv.app to find out whether there is a new version, without sending personal data.
• Your playlists, usernames and passwords are stored encrypted on your device (in the Keychain on Apple devices and in the system keystore on Android) and are excluded from backups.
• Favourites, progress and settings stay on the device.

What your IPTV provider does with the data of your connection depends on the provider and its own privacy policy.

If you create an account

The account is optional and only serves to keep the same playlists, favourites and progress on all your devices. With it, our service stores:

• Your email address, which identifies the account.
• The playlists you move to the account (name, kind, server, username, password and guide address), end-to-end encrypted.
• Favourites, watch progress, “Continue watching”, the last channel and your settings.
• Your signed-in devices: their name and the date they were added.

Your provider's catalogue, the programme guide, the incident log and the images are never uploaded. Neither are the playlists you do not move to the account.

How it is protected

Playlists are encrypted on your device with a random master key that never leaves it unencrypted. The service stores that key encrypted in three ways: with your password, with your recovery code and with a key specific to each device. The server never receives the password you type, only a value derived from it that cannot be used to decrypt the key. That is why we cannot read the passwords of your playlists, or recover them if you lose your password, your recovery code and all your signed-in devices at the same time.

Favourites, progress and settings are not end-to-end encrypted: they are protected by access rules that stop other users from reading them, but whoever administers the service could see which content you have marked and where you left off. In exchange, that data is kept even if you lose access to the encrypted playlists.

Where it is stored

The account service runs on Supabase, which acts as data processor and hosts the database and the authentication.

Legal basis and retention

We process this data to provide the sync service you ask for when you create the account. It is kept for as long as the account exists. You can delete the account from the app itself, which deletes everything held by the service.

What we do not do

• There is no advertising.
• The app has no analytics or telemetry of any kind, with or without an account.
• We do not sell or hand over data to third parties.

This website

zapperiptv.app uses no cookies and loads no third-party resources.

To know how many visits the website gets we use Plausible, a statistics program that runs on our own server. It counts, in aggregate, page views, the referring website, the country, the kind of device and the clicks on the download buttons. It uses no cookies or persistent identifiers and does not store your IP address, so it cannot recognise you from one day to the next or follow you across other websites. This data is not shared with anyone.

Like any web server, ours keeps a technical log of the requests it receives (IP address, date and page), which is used only to keep the service running and is deleted periodically.

Your rights

You can ask us for access to, rectification, erasure or portability of your data, and object to or restrict its processing, by writing to [email protected]. If you believe we have not handled your request properly, you can lodge a complaint with the Spanish Data Protection Agency (aepd.es).

Changes

If we change this policy, we will reflect it here with its new date. If the change affects what is stored with your account, we will also tell you in the app.