Privacy policy
Last updated: October 3, 2026
This page is a courtesy translation of the Portuguese original. If there is any difference, the Portuguese version prevails.
We keep only what is needed for your TV to work. We do not ask for your name, tax ID or an email sign-up to watch on the TV. The reseller sign-up is separate and uses a name and email.
What we keep
- About the TV: the code shown on the screen, the PIN (encrypted), the system brand (Samsung, LG or Roku), a factory identifier of the device, only if you agree when the TV asks (stored in a way that cannot be read back; it helps support find the registration after a reinstall), the trial and license dates, the last time the TV connected, and the history of license changes made by support.
- About the lists: the name you gave it, stored as plain text (so it can appear on the website and on the TV), and the access details (server, username and password), always encrypted. The list PIN, when there is one, is stored in a way that cannot be read back.
- About the connection: the IP address goes into counters that limit wrong attempts and block abuse. An automatic cleanup, every hour, deletes the counters whose most recent counting window started more than 24 hours ago. While the same address keeps trying, its counter keeps existing.
- About parental PIN recovery: when support generates a temporary PIN, the server stores a protected version of it (which cannot be read back) and the request data. The temporary PIN is valid for 48 hours. The request data is deleted when the change is completed or, if it is not completed, by the automatic cleanup after the PIN expires. A mark that the change was completed (the request identifier and a hash of the authorization, linked to the TV registration, without the PIN) is kept until a new recovery request for the same TV: it lets the TV confirm the change even if it stays switched off for days.
Reseller accounts and access emails
For resellers, we store name, email, email confirmation, acceptance of the terms, a protected version of the password, temporary sessions, credits and a history of operations. We never store the account password in plain text.
Confirmation and recovery links are single-use and are valid for 24 hours and 1 hour, respectively. The database stores a protected version of the code. While a message is waiting to be sent, its content is encrypted. Once sent, the message is removed from the queue; expired requests are deleted in the hourly automatic cleanup.
We use Resend to send confirmation and recovery messages. It receives the email address and the content of these messages, including the access link, and may keep technical records according to its own privacy policy. We do not send Resend account passwords, credits or list access details. We do not use these emails for advertising.
What we do not keep
- What you watch. The catalog and the video go straight from your provider to the TV, without passing through our servers.
- Favorites, history and the parental PIN you use day to day: they stay only on your TV.
Reinstalling the app
The identifier helps recognize a TV that already has a registration. After a reinstall, the TV may receive a pending registration with a new code, with no new free trial and no license. The lists you add to that pending registration only appear on the TV after it is released. Support must confirm ownership through a verified purchase linked to the customer or an authenticated request from the linked reseller. The PIN and the identifier alone do not prove ownership. In the history we record only the method of proof and its reference, not the content of documents or messages.
After confirmation, support may transfer the license, lists and reseller link from the original registration, preserving the expiration date and ending the old access to the server. There is no automatic recovery; favorites, progress and the local parental PIN are not transferred.
A pending registration without a transfer expires 30 days after it is created, even if it keeps accessing the service. Its access stops being valid and its lists enter automatic deletion. If support archives a pending registration before that, its lists are kept for 30 days from the archiving and then enter deletion. These periods do not delete the lists of the original registration or of a TV that has already been transferred.
The cleanup runs every hour, in limited batches. Deletion happens once the period expires and may be delayed in case of failure or a backlog of tasks. Minimal codes and receipts of archiving, expiration, deletion and transfer, with dates and references, remain linked to the registrations for security and support; they do not contain list credentials. These records are not anonymous. Requests to delete an account and financial records are reviewed separately by support.
You can choose not to use the identifier and keep using the app. Without it, a reinstall generates a new code, without automatically recovering the data from the previous registration.
Cookies
The website does not use advertising or statistics cookies. When you sign in with the TV code, the browser keeps a temporary session that disappears when you close the tab or after 2 hours. The administration and reseller panels use necessary cookies to keep you signed in for up to 2 hours; they cannot be read by page scripts.
What we use it for
Only to activate the TV, deliver the list to it, control the trial and the license, and provide support. We do not sell this data. It stays on the servers of Cloudflare, which hosts the service. The email and the access message are shared with Resend only for the sending described above.
Technical logs and backups
Cloudflare, which hosts the service, may keep technical logs of connections (which may include the IP address). On the Workers Free plan currently used, Time Travel allows restoring versions of the database from the last 7 days: after a deletion, earlier versions may still contain the data during that window. This does not mean immediate deletion of all copies or platform logs. A restore must reapply the deletions before the service is reopened. If the plan or the backup policy changes, this text will be updated.
Your rights
You can delete your lists at any time through the website. To delete all the data of a TV, or for any request provided for in the LGPD (the Brazilian data protection law), write to support with the TV code. For requests about the reseller account, contact us at the registered email.