Privacy Policy

1. Introduction

67IPTV LLC, a Wisconsin limited liability company organized under Ch. 183 of the Wisconsin Statutes ("67IPTV," "we," "us," or "our"), respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the 67IPTV application ("Application"). 67IPTV LLC is the data controller responsible for your personal data, and can be reached by email at [email protected].

67IPTV is a media player application only. We do not provide, host, or distribute any media content. The Application allows users to input and organize their own playlist URLs from third-party sources.

2. Information We Collect

We collect the following categories of information:

2.1 Information You Provide

• Account information (email address, username, and your password — stored only as a salted one-way cryptographic hash; we never store, and cannot see, your plaintext password)
• Playlist URLs (M3U links or XTREAM codes) that you choose to add to the Application
• Optional credentials for third-party playlist services that you provide
• Support inquiries and correspondence

2.2 Automatically Collected Information

• Device information (device type, model, operating system, app version, and device identifiers such as a MAC address or serial number used to recognize and manage your registered devices)
• Application information (version, configuration settings)
• Usage data (feature interactions, session duration, error logs)
• IP address (used for security, fraud prevention, and to derive your approximate location)
• Approximate location (city, region, and country) derived from your IP address — we do not collect precise GPS location

2.3 Payment Information

Payments for access to the 67IPTV Application may be processed either directly by 67IPTV or by authorized third-party payment processors acting on our behalf. 67IPTV does not store complete credit card numbers, CVV codes, or other sensitive payment details and does not process payments for third-party IPTV services or content providers.

3. Lawful Basis for Processing (GDPR)

For users in the European Economic Area (EEA), United Kingdom, and Switzerland, we process personal data for the following purposes on the following lawful bases:

• Account and service operation — creating and administering your account, storing the playlists and device registrations you add, and operating the Application: performance of our contract with you (GDPR Art. 6(1)(b))
• Payments and billing — processing payments, sending transactional messages, and keeping billing records: contract performance (Art. 6(1)(b)) and compliance with legal obligations such as tax and accounting rules (Art. 6(1)(c))
• Security — authenticating sign-ins, preventing fraud and abuse, enforcing device limits, and deriving approximate (city-level) location from your IP address for security review: our legitimate interests in keeping the Application secure and preventing misuse (Art. 6(1)(f)), which we have assessed as not overridden by your rights and freedoms
• Reliability — diagnosing errors and monitoring performance through error logs: our legitimate interests in maintaining a reliable service (Art. 6(1)(f))
• Support — responding to your inquiries: contract performance (Art. 6(1)(b)) or our legitimate interests (Art. 6(1)(f))
• Legal compliance — complying with valid legal requests and other legal obligations: Art. 6(1)(c)
• Consent — any activity for which we separately ask your consent: Art. 6(1)(a), which you may withdraw at any time without affecting processing that occurred before withdrawal

Data minimisation. We collect only the personal data needed for the purposes above; we do not require any information that is not necessary to operate the Application (for example, playlist credentials are optional), and we do not repurpose your data for marketing, advertising, or profiling.

4. How We Use Your Information

Your User ID and account information are used solely for account access and service operation. We use the information we collect to:

• Provide, maintain, and improve the Application
• Process transactions and manage your account
• Respond to your inquiries and provide customer support
• Detect, prevent, and address technical issues and security threats
• Comply with legal obligations and enforce our Terms of Service
• Send service-related communications (such as account notifications)

We do not use your information for marketing, advertising, or personalization beyond basic application functionality.

5. What We Do NOT Do

We are committed to protecting your privacy. We expressly confirm that we:

• Do NOT sell, rent, or trade your personal information to third parties
• Do NOT use your data for advertising or marketing profiling
• Do NOT track your activity across other applications or websites
• Do NOT share your playlist URLs or viewing habits with advertisers
• Do NOT use behavioral targeting or personalized advertising

Viewing Privacy (Video Privacy Protection Act). 67IPTV does not disclose — to advertisers, analytics companies, social-media platforms, or any other third party — information that identifies you as having requested or obtained specific video materials or services, as described in the Video Privacy Protection Act, 18 U.S.C. § 2710. We can make this commitment categorically because of how the Application is built: 67IPTV is a media player only, and playback happens directly between your device and the third-party playlist source you chose. Our systems are not designed to receive or record the specific channels, programs, or titles you play, and we do not create or keep any viewing history about you. If a diagnostic error report incidentally references a stream that was playing when an error occurred, we use it solely for troubleshooting and never disclose, sell, or share it.

6. Information Sharing

We may share your information only in the following limited circumstances:

• Service Providers: Third-party vendors that process data on our behalf under confidentiality and data-protection obligations, including Square (payment processing), Cloudflare (security, bot protection, and content delivery), Sentry (error and performance monitoring), our hosting and email-delivery providers, and Google, Microsoft, or Apple (only if you choose to sign in using one of those providers)
• Legal Requirements: When required by law, court order, or governmental authority
• Protection of Rights: To protect the rights, property, or safety of 67IPTV, our users, or others
• Business Transfers: In connection with a merger, acquisition, or sale of assets, with notice to users

7. Data Security

We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit (HTTPS/TLS), one-way hashing of passwords, access controls, network-level protections, and periodic review of our security practices.

Playlist URLs and credentials. Playlist URLs and any optional third-party playlist credentials (such as an XTREAM username and password) that you choose to store in your account are treated as confidential. They are transmitted only over encrypted (TLS/HTTPS) connections, stored on access-controlled servers, used solely to load your playlists on your registered devices at your request, and are never sold, shared with advertisers, or used for any other purpose. They are deleted when you remove the playlist or delete your account. Because stored playlist credentials are secrets you obtained from a third party, we recommend using credentials unique to that service rather than reusing a password from another account.

However, no method of transmission over the Internet or electronic storage is completely secure. While we strive to protect your information, we cannot guarantee absolute security.

In the event of a data breach that affects your personal data, we will notify affected users and the relevant supervisory authorities without undue delay where required by applicable law.

For residents of the United States: every U.S. state, as well as the District of Columbia and U.S. territories, has enacted a security-breach notification law. If a breach of security affects your unencrypted personal information, we will notify you without unreasonable delay, consistent with the timing, content, and — where applicable — regulator and consumer-reporting-agency notice requirements of the breach-notification law of your state of residence and any applicable federal requirements. If a breach involves "personal information" as defined by Wisconsin's data-breach notification law, we will notify affected Wisconsin residents within a reasonable time and in no event later than forty-five (45) days after we learn of the unauthorized acquisition, as required by Wis. Stat. § 134.98, unless a statutory exception applies.

8. International Data Transfers

67IPTV is operated from the United States. If you are located outside the United States, including in the European Economic Area (EEA), United Kingdom, or Switzerland, please be aware that your personal data will be transferred to, stored, and processed in the United States.

Where personal data is transferred from the EEA, the United Kingdom, or Switzerland to the United States, we rely on appropriate safeguards under Chapter V of the GDPR and equivalent UK and Swiss rules — in particular the European Commission's Standard Contractual Clauses (and, for UK transfers, the UK International Data Transfer Addendum) incorporated into our agreements with our service providers, together with supplementary technical and organizational measures. Where no other mechanism is available, we may rely on the derogations in Article 49 GDPR for occasional transfers, such as transfers necessary for the performance of our contract with you. You may request further information about these safeguards, or a copy of the relevant clauses, by contacting [email protected]. We do not treat your use of the Application as consent to international transfers.

9. Cookies and Similar Technologies

We use only strictly necessary cookies and similar technologies — those essential to provide a service you have expressly requested. We do not set any advertising, analytics, or cross-site tracking cookies, and we do not permit third parties to set such cookies through the Application. Specifically, we use: (a) NEXT_LOCALE — a cookie that remembers your language preference so pages display in your chosen language; (b) authentication and session identifiers — including a sign-in session cookie and an auth token stored in your browser's local storage — used to keep you signed in and to secure your account, including when you sign in with Google, Microsoft, Apple, or Facebook; and (c) security cookies set by our security provider, Cloudflare (such as __cf_bm), used to distinguish people from bots and to protect the Application against attacks and abuse. Because each of these is strictly necessary to deliver the service you request — within the meaning of Article 5(3) of the ePrivacy Directive (2002/58/EC) and its national implementations, including the UK Privacy and Electronic Communications Regulations — your consent is not required, and we therefore do not display a cookie consent banner. If we ever introduce non-essential cookies, we will ask for your consent before setting them. You can delete or block cookies in your browser or device settings, but blocking strictly necessary cookies may prevent parts of the Application from working.

Do Not Track. Some browsers can transmit a "Do Not Track" (DNT) signal. No industry standard for responding to DNT signals has been adopted, and we do not alter our practices in response to them — because we do not track our users over time or across third-party websites in the first place, there is no tracking for a DNT signal to switch off. We likewise do not permit third parties to collect personally identifiable information about your online activities over time and across different websites when you use our website or the Application. Separately, we honor the Global Privacy Control (GPC) signal as described in Section 16.

10. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Rectification: Request correction of inaccurate or incomplete data
• Erasure: Request deletion of your personal data ("right to be forgotten")
• Restriction: Request restriction of processing of your personal data
• Portability: Request transfer of your data in a structured, machine-readable format
• Objection: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent at any time where processing is based on consent
• Opt-out of Marketing: Opt out of receiving promotional communications

11. Rights for European Union Users (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR) and related laws:

• You have the right to lodge a complaint with your local data protection supervisory authority
• You have the right to obtain information about any automated decision-making
• You have the right not to be subject to decisions based solely on automated processing

No automated decision-making or profiling. We do not make any decision based solely on automated processing that produces legal effects concerning you or similarly significantly affects you, and we do not profile you, within the meaning of Article 22 GDPR. The automated processes in the Application are limited to routine service operations — for example, sign-in authentication checks, enforcement of device limits under your plan, and automated security and anti-bot filtering — none of which involve evaluating personal aspects about you or produce legal or similarly significant effects. If this ever changes, we will update this Privacy Policy first and, where required, obtain your explicit consent and provide meaningful information about the logic involved.

To exercise any of these rights, please contact us at [email protected]. To protect your data, we may need to verify your identity before acting on a request. We will respond within 30 days, or as required by applicable law.

12. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you with the Application. After account deletion, we may retain certain data for a limited period as required by law, to resolve disputes, enforce our agreements, or for legitimate business purposes. Generally, we retain account data for up to three (3) years following account closure, unless a longer retention period is required by law — for example, transaction and payment records we must keep longer under tax and accounting law. Server logs, IP addresses, analytics records, approximate-location data, and error-monitoring events are retained for a shorter period — generally up to twenty-four (24) months — after which they are deleted or aggregated into non-identifiable form.

13. Children's Privacy

The Application is intended only for users aged 18 and older, consistent with our Terms of Service. We do not knowingly collect personal data from anyone under 18 (or under the higher age of majority in your jurisdiction). If we become aware that we have collected such data, we will delete it promptly.

Consistent with the Children's Online Privacy Protection Act (COPPA, 15 U.S.C. §§ 6501–6506) and the FTC's COPPA Rule (16 C.F.R. Part 312), the Application and our website are not directed to children under 13, and we do not knowingly collect, use, or disclose personal information from any child under 13. We do not permit anyone under 18 to register an account, and we do not use age screens designed to attract younger users. If you are a parent or guardian and believe a child under 13 has provided us personal information, please contact us at [email protected]; we will delete that information and terminate any associated account promptly.

14. Third-Party Content and Services

The Application allows you to access third-party content through playlist URLs you provide. We are not responsible for the privacy practices of these third-party content providers. We encourage you to review the privacy policies of any third-party services you access through the Application.

15. Policy Updates

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date. Your continued use of the Application after any changes constitutes acceptance of the updated Privacy Policy.

16. California Privacy Rights (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA/CPRA), gives you additional rights regarding your personal information.

Categories we collect: identifiers (such as email address, IP address, and device identifiers); internet or other network activity (usage and error logs); approximate geolocation derived from IP address; and commercial information (subscription and payment records). We collect this information from you directly and automatically from your devices, for the business purposes described in Section 4.

Retention by category. We retain each category of personal information no longer than reasonably necessary for the purposes disclosed in Section 4: identifiers and account information — for the life of your account plus up to three (3) years after closure; internet or other electronic network activity (usage and error logs) and approximate geolocation — up to twenty-four (24) months; commercial information (order, subscription, and payment records) — for the period required by tax, accounting, and audit obligations (generally up to seven (7) years); and playlist URLs and any optional third-party credentials you choose to store — until you delete them or your account is deleted, whichever comes first. Where a fixed period is not listed, we use these same criteria to determine the retention period.

We do not sell or share your personal information as those terms are defined under the CCPA/CPRA, and we have not done so in the preceding twelve (12) months. We do not use or disclose sensitive personal information for purposes that would trigger a right to limit. Because we do not sell or share personal information, we treat browser-based opt-out preference signals such as Global Privacy Control (GPC) as already honored.

California residents have the right to know, access, correct, and delete their personal information, to opt out of sale or sharing (which we do not engage in), and not to receive discriminatory treatment for exercising these rights. You, or an authorized agent acting on your behalf, may exercise these rights by contacting us at [email protected]. We may need to verify your identity before responding.

17. Other U.S. State Privacy Rights

Depending on your state of residence — including Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and other states with comprehensive privacy laws — you may have the right to confirm whether we process your personal data; to access, correct, or delete it; to obtain a portable copy; and to appeal a denial of any request. Where a state grants a right to opt out of targeted advertising, the sale of personal data, or profiling that produces legal or similarly significant effects, that right is effectively already satisfied because we do not engage in any of those activities.

To exercise any of these rights, contact us at [email protected]. We may need to verify your identity before responding, and if we deny a request you may appeal by replying to our decision. We do not discriminate against you for exercising any privacy right.

18. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have concerns about our privacy practices, please contact us at:

Email: [email protected]

For data protection inquiries specifically, you may also contact: [email protected]