Skip to content

Privacy Policy

Effective date — 30.10.2026

01 Introduction

Welcome to Ontv. Your privacy is important to us. This Privacy Policy explains what we collect, how we use it and how we protect it when you use the Ontv app for smart TVs and this website.

02 Information we collect

  • When you contact us: your name, your email address and what you write to us.
  • When you visit this website: your IP address, browser type and the pages you open, in our server logs.
  • When you use the TV app: the details in "The Ontv TV app" below.

03 How we use your information

  • Run the Ontv app and this website, and keep them secure.
  • Activate TVs and apply the licences you buy.
  • Answer your questions and provide support.
  • Meet our legal obligations.

04 Payment processing

Licence payments are processed by PayPal. We never receive or store your card or PayPal account details.

05 Sharing of information

We do not sell, trade or rent your personal information. We share it only with service providers who help us run the service, such as PayPal and our hosting provider, and where the law requires it.

06 Data security

We protect your information with appropriate security measures, such as encrypting the playlist passwords you add, but no system can be guaranteed to be completely secure.

07 Cookies

The pages of this website that have forms — activation, the contact form and the IPTV checker — set a session cookie so that they work and are protected against forgery. We use no advertising or tracking cookies.

08 The Ontv TV app

Our Ontv app for smart TVs ships with no content. You link it to your own Xtream Codes subscription at ontv.al/activate, using the Device ID the app shows on screen.

  • What we store: the Device ID, and for each playlist you add to it the name and either the server address, username and password or the M3U link, plus the PIN if you set one. The app reads your TV's own device identifier (on LG TVs the LG unique device ID, on Samsung TVs the DUID) once, the first time it starts, and turns it into the Device ID by a one-way calculation, so the same TV always shows the same Device ID and the identifier itself never leaves the TV and cannot be worked out from the Device ID. Passwords, M3U links and PINs are stored encrypted. We do not test a login against its server when you add it. For an M3U link we may read the start of the playlist once, to see whether it is really an Xtream Codes login, which gives your TV the guide, films and series.
  • Device key: newer versions of the app also send a hidden device key, derived from the TV's identifier in the same one-way manner as the Device ID, which proves that a request comes from that TV. We keep only a one-way fingerprint of it, never the key itself.
  • What we record when the app contacts us: the IP address, the app version, when the TV last called in, and what the app says about the TV: its platform and model, OS and firmware version, whether it has a 4K screen, the screen size and the app's interface language. We use these to run and protect the service, to know which TVs to support, and to know when older versions of the app can be retired. They are deleted with the Device ID.
  • Anonymous diagnostics: the app also sends reports when a channel starts, fails or freezes, and when the app hits an error: the provider's server name and the stream number, how long the picture took to appear, which player was used, the error message, and the app version, TV model, OS and language. They carry no Device ID, account, playlist or IP address, so they cannot be linked to you or your TV. We use them to find channels that do not work and to fix the app, and delete them after 90 days. You can switch them off in the app, under Settings → Send anonymous diagnostics.
  • Demo mode: until you add a playlist, the app plays free demo content (open films by the Blender Foundation and public test streams) straight from the services that publish them: Unified Streaming, Mux, the Internet Archive, Wikimedia Commons and a public webcam. As with any video you watch, those services receive your TV's IP address; Ontv sends them nothing else and receives nothing back from them about you.
  • If you buy a licence: PayPal processes the payment. We keep the Device ID, the plan, the amount and PayPal's order reference, so the licence can be applied and checked; we never see your card or PayPal account details.
  • What stays on the TV: favourites, watch positions and settings. They are never sent to us.
  • Blocked providers: if a provider's servers are blocked after a copyright notice, its playlists stay listed at ontv.al/activate but are no longer sent to the TV. Nothing about this is sent to the provider.
  • No viewing history: we keep no record of what a TV or a person watches. Diagnostics reports cannot be traced back to a TV, and favourites and watch positions never leave it.
  • Deleting your data: remove the playlists at ontv.al/activate with your Device ID, which deletes them immediately, or contact us using the details below to have the Device ID and everything linked to it deleted.

09 The Ontv app for iPhone and iPad

Our Ontv app for iPhone and iPad works like the TV app: it comes with no content and plays only the playlists you add to it, in the app or at ontv.al/activate.

  • Device ID and device key: the app creates a random Device ID and a hidden device key, which proves that requests come from that phone. Both are kept in the phone's Keychain, so reinstalling the app keeps them. We store the Device ID and only a one-way fingerprint of the key.
  • What the app sends when it checks for playlists: the Device ID, the device key, the app version, the platform, the phone model, the iOS version, the app's interface language and the screen size, and with them the IP address the request comes from. We keep the latest of these with the Device ID, to run and protect the service and to know which devices to support, until the Device ID is deleted.
  • Playlists: the name and either the server address, username and password or the M3U link are stored on ontv.al for that Device ID, with passwords and links encrypted, and on the phone. Deleting a playlist in the app deletes it on ontv.al too.
  • No tracking, advertising or analytics: the iPhone app shows no ads, does not track you, uses no analytics and sends no diagnostics reports. It takes no payments.
  • Deleting your data: delete playlists in the app or at ontv.al/activate, or contact us using the details below to have the Device ID and everything linked to it deleted.

10 Copyright notices

If you report a provider at ontv.al/copyright, we keep what you send us (your name, organisation and email address, the rights holder, the works and server addresses you name, and your evidence) with the IP address and time it was sent. We use them to handle the notice, to contact you about it, and as a record of the notice and of what we did. We do not tell the provider or our users who sent a notice unless the law requires it.

11 Your rights

  • Ask for a copy of the personal information we hold about you.
  • Have it corrected or deleted.
  • Ask how it is used.

12 Third-party links

Our website may contain links to third-party websites. We are not responsible for their privacy practices.

13 Changes to this Privacy Policy

We may update this policy from time to time. Changes are posted here with a new effective date.

14 Contact us

If you have any questions, contact us at: