Alleen mediaspeler — geen content inbegrepen

OTOO levert, host of verkoopt GEEN zenders, films of streams. Het speelt alleen de M3U- of Xtream-afspeellijst af die u zelf toevoegt — u bent verantwoordelijk voor de content die u afspeelt.

Privacybeleid

Laatst bijgewerkt: 10 September 2026

OTOO is een IPTV-speler. U levert uw eigen afspeellijst of provider-login; OTOO speelt deze af. Dit beleid beschrijft wat OTOO wel en niet verzamelt. Het weerspiegelt het feitelijke gedrag van de dienst.

Who is responsible for your data

The data controller is:

Covic 3D, owner Katarina Čović
Ul. Matije Gupca 6, 32253 Komletinci, Croatia
Personal identification number (OIB): 92455343627
Email: [email protected]

Wat wij niet doen

  • Wij verkopen, delen of profileren uw gegevens niet.
  • Wij hosten, verkopen of leveren geen zenders, media of abonnementen.
  • We never receive or store your card or payment-card details.
  • We do not track you across other companies' apps or websites.

Wat wij verwerken

  • Device identity: a random identifier created on your device the first time you open the app. It is not your hardware MAC address and not a device serial number, but the app displays it in MAC-address format so you can register the device. It is kept on the device (it can survive reinstalling the app) and stored on our servers so we can link your playlist and your access period to that device.
  • Playlist details: if you (or your reseller) attach a playlist to your device, we store its address and, for Xtream services, the username and password. These are stored encrypted at rest and are used only to load your channel list into the app. We do not use your provider account for anything else.
  • Koppeling: een kortlevende, eenmalige code en een versleutelde payload die alleen worden gebruikt om uw providergegevens van uw telefoon/browser naar uw tv te verplaatsen. De payload wordt verwijderd na levering of verval.
  • Technical data: the platform you use (for example iOS, tvOS, Android), the approximate country and network operator derived from your IP address when your device registers, and the time your device last contacted us. We use this for support and to detect abuse. We do not store a history of your IP addresses.
  • Aankopen (optioneel): if you buy the OTOO Lifetime Pass, the store (Apple App Store or Google Play) verifies the purchase. We store the fact that the purchase exists and the store transaction identifier, so that one purchase is not reused on an unlimited number of devices. If you pay by bank transfer or coupon, we store the payment record required for invoicing.
  • Playback positions: the title and the position where you stopped watching, so the app can offer to resume. This is tied to your device, not to your identity.
  • Contact details (optional): an email address if you provide one for your device or when you open a support ticket, together with the messages you send us.
  • Diagnostiek (optioneel): alleen als u uitdrukkelijk een rapport verzendt, met provider-URL's en inloggegevens verwijderd.

Why we are allowed to process it

Under the GDPR our legal bases are:

  • Performance of a contract (Art. 6(1)(b)) — running the player, loading your playlist, keeping your access period and purchases.
  • Legitimate interests (Art. 6(1)(f)) — preventing abuse and fraud, limiting how many devices share one purchase, keeping the service secure.
  • Legal obligation (Art. 6(1)(c)) — keeping invoices and accounting records.
  • Consent (Art. 6(1)(a)) — optional diagnostic reports, which you send only if you choose to.

How long we keep it

  • Pairing payloads: minutes — deleted on delivery or expiry.
  • Devices whose trial lapsed and that never completed a purchase: deleted automatically 90 days after the access period ends. The attached playlist details are deleted with the device.
  • Devices with active access: kept while the service is provided to you, and deleted on request.
  • Payment and invoice records: kept for the period required by accounting and tax law, even after the device is deleted.

Who else is involved

We use a small number of service providers who process data on our behalf: our hosting provider (servers located in the European Union), an email delivery provider for transactional messages, and the app stores (Apple, Google) which verify purchases. Where a provider processes data outside the European Economic Area, the transfer is covered by the European Commission's Standard Contractual Clauses. We do not sell your data and we do not give it to anyone for their own purposes.

Uw rechten

Under the GDPR you have the right to access your data, to have it corrected or erased, to restrict or object to processing, and to receive it in a portable format. Where processing is based on consent, you can withdraw it at any time.

U kunt uw lokale gegevens op elk moment vanuit de app verwijderen en verwijdering van eventuele server-side gegevens aanvragen via de pagina voor gegevensverwijdering, or by emailing us. We answer within one month.

If you believe we handle your data unlawfully, you may lodge a complaint with your local supervisory authority. In Croatia this is the Personal Data Protection Agency (AZOP), Selska cesta 136, 10000 Zagreb, azop.hr.

Children

OTOO is not directed at children and is rated for adult users. We do not knowingly collect data from children.

Changes to this policy

We may update this policy; the date at the top always shows the current version.

Contact

Vragen over dit beleid: [email protected].