Privacy Policy
1. Data controller
Emirhan Öksüz
Zum Walkmüller 1
47269 Duisburg
Germany
Email: support@cineo-iptv.de
Contact form: cineo-iptv.web.app/kontakt
2. Overview
We process personal data only to the extent necessary to provide the website, your CINEO account, the CINEO apps (Samsung TV, Fire TV, Android TV, Windows, iPhone, iPad, Mac, Apple TV) and payment processing. We do not use advertising or analytics trackers or cookies for marketing purposes.
3. Hosting and servers
The website and server functions run on Google Firebase (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). The database (Cloud Firestore) and server functions are located in the Frankfurt am Main region (europe-west3). When you visit the website, the hosting service processes technically necessary connection data (such as your IP address, the time of access, the requested address and browser identifier) to deliver the page and protect against attacks. The legal basis is Article 6(1)(f) GDPR (secure operation). A transfer to Google LLC in the United States cannot be ruled out; Google is certified under the EU–US Data Privacy Framework.
Visitor statistics: To know how many people visit the website, it counts page views without cookies and without storing anything on your device. Per day we only store totals: page views, visits (arrivals from outside this website) and the countries the visits came from. The country is derived from the IP address of the request. We do not store the IP address itself or any other identifier, so individual persons cannot be identified. The legal basis is Article 6(1)(f) GDPR (legitimate interest in measuring reach).
4. CINEO account
We use Firebase Authentication for sign-in. The data processed includes your email address, a password hash (when signing in with email), an account ID and, when using “Sign in with Apple” or “Sign in with Google”, the email address and identifier provided by Apple or Google. Your sign-in status is stored in your browser's storage; this is technically necessary for sign-in (Section 25(2), no. 2 TDDDG). The legal basis is Article 6(1)(b) GDPR (contract).
5. Profiles, playlists and usage data
In your account, we store the profiles you create (name, profile picture, settings and optional profile PIN), your playlist credentials (Xtream Codes server, username, password or M3U link), “My List”, favourite channels, ratings and playback progress. This data is synchronised between your devices and transmitted only to devices connected to your account. The legal basis is Article 6(1)(b) GDPR.
During playback, the device connects directly to your IPTV provider's servers. These providers receive technically necessary connection data; their own privacy policies apply.
6. Televisions and PCs (Samsung TV, Fire TV, Android TV, Windows)
On first launch, the CINEO app on your television transmits a device identifier (the MAC address on Samsung TVs, or an identifier derived from the Android device ID on Fire TV and Android TV) and the television's model name. The Fire TV and Android TV app also checks at startup whether a new version is available; this only loads the version file from our website. We use this information to create a device record with a device key, trial period and connection status so that you can connect the television to your account and the free trial is available only once per television. We also store when the television was last active. Instead of a MAC address, the CINEO app for Windows transmits an identifier derived irreversibly from the Windows device ID and the device name “Windows-PC”; it is treated in the same way as a television. It plays videos directly from your IPTV provider with the bundled ffmpeg program, without the content passing through our servers. It receives updates through the Microsoft Store. The legal basis is Article 6(1)(b) GDPR; the one-time trial per device is based on Article 6(1)(f) GDPR (protection against misuse).
7. Payments
Payments made through our website are processed by Stripe (Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Dublin 2, Ireland). Stripe receives the data required for payment (such as your email address, payment method and billing address). We receive only your plan status, a customer ID and invoice information from Stripe, not your full card details. The legal bases are Article 6(1)(b) and (c) GDPR (contract and tax record retention requirements). Stripe Inc. (USA) is certified under the EU–US Data Privacy Framework. If you choose PayPal or Klarna, Stripe passes the data required for payment to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg, or to Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden; their privacy notices also apply. Klarna may carry out identity and credit checks.
For purchases through the App Store, our servers receive signed purchase records from the Apple app and, for renewals, expiry or refunds, from Apple's server notifications. We check the app and product identifiers and, if present, a purchase account identifier derived from your CINEO account (appAccountToken). In Google Firebase, we store the original transaction identifier (originalTransactionId), its association with your CINEO account, the plan, the expiry time if applicable, revocation status, the purchase environment (production or test), the times of account association, signing and updates, and a flag for eligible test purchases. The purchase account identifier itself is not stored in this process. In server logs, we record the Apple notification type and the original transaction identifier. This data is used to associate the purchase with your account, synchronise valid access between your devices and take renewals, expiry and refunds into account.
8. Cancellations
If you cancel through “Cancel contracts here”, we store your name, email address, contract details, type of cancellation, reason for cancellation if provided and the time of receipt to carry out and confirm the cancellation (Article 6(1)(b) and (c) GDPR).
9. Contact form
If you contact us using the contact form, we store your name, email address, subject, message and the time of receipt to respond to your enquiry (Article 6(1)(b) GDPR for questions about a contract, otherwise Article 6(1)(f) GDPR). The data is stored on Google Firebase (see Hosting) and deleted when it is no longer needed to handle the enquiry, no later than after one year, unless statutory retention requirements apply.
10. Retention periods
We store account data, profiles and device data until you delete your account. We retain device records without a connected account so that the trial period is available only once per television. We retain data relevant to invoicing for the statutory periods (up to 10 years). If we delete an account at your request or because it is no longer used, we keep only the internal account ID, the date and the reason for the deletion as a record.
11. Your rights
You have the right of access (Article 15 GDPR), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18), data portability (Article 20) and objection to processing based on Article 6(1)(f) GDPR (Article 21). You may also lodge a complaint with a data protection supervisory authority (Article 77 GDPR). You can delete your account and its associated data in the CINEO app on iPhone, iPad or Mac, or ask us to delete them through the contact form.
Last updated: 14 October 2026