← Back to Fast IPTV Player

Privacy Policy

Fast IPTV Player - Version 3.0 - Effective October 2026 - Last updated 23 October 2026

1. Information we process

The app assigns your device a random Device ID (format FAST-XXXX-XXXX) and a separate private authentication token used to prove that requests really come from your device — the Device ID alone cannot access your data. Depending on how you use the app, we process:

  • the random Device ID and private device authentication token;
  • a broad device platform category (iPhone, iPad or Apple TV), app version and build number, operating system version, and subscription/access state — recorded automatically once per app launch to help us understand device compatibility, prioritise support, and plan which platforms to invest in; never your device's personal name, exact hardware model/serial number, or advertising identifier;
  • playlist details you enter — playlist name, provider server address, username, password or M3U URL, and custom EPG details;
  • portal pairing and session information when you use the web portal;
  • technical playback diagnostics linked to your Device ID — app and player events such as error codes, stream format, video resolution, track counts and timings — sent automatically to help us find and fix playback problems, and support messages you submit (with more detailed diagnostics when you send a report); never playlist passwords or stream URLs;
  • if you use Playlist Transfer, an end-to-end encrypted copy of the playlists you choose to move between your own devices (see section 3);
  • channel names, when a channel in your playlist has no working logo and the app looks one up (see section 6);
  • purchase/subscription status received or inferred from Apple purchase validation;
  • optional aggregate product-interaction counters, where enabled (see section 4).

Playlist credentials are encrypted before backend storage and are only ever decrypted to return to your own authenticated device or portal session. We do not collect your name, email address (unless you contact support), precise location, advertising identifiers, your device's personal name, or exact hardware model/serial number.

2. Playback and viewing data

Media playback connects directly from your device to your playlist provider and does not pass through Fast IPTV Player's servers. We do not intentionally collect a viewing history of channel names, movie titles or programmes watched, unless you yourself include such information in a support report.

3. Moving playlists between your devices

Playlist Transfer lets you add your playlists to another of your devices (for example Apple TV) without typing them again. Both ways are end-to-end encrypted on your devices before anything is sent, so our server only stores and relays data it cannot read:

  • Transfer code — the new device shows a short code; the device that already has your playlists encrypts them for that new device only. Codes expire after 10 minutes, a transfer can be collected once, and expired transfers are deleted from our server within an hour.
  • Your other devices (iCloud) — a random encryption key is kept in your own iCloud key-value storage, which Apple stores under Apple's privacy policy. Each of your devices stores its playlists on our server encrypted with that key. Our server holds the encrypted copy and Apple holds the key, so neither can read your playlist logins alone. A device's copy is replaced each time it updates and removed when it no longer has playlists to share.

Playlist logins, links, codes and keys are never written to logs.

4. Aggregate analytics

Fast IPTV Player may collect aggregate, non-linked counters such as app launches, playlists added and playback started or failed. These counters are stored as daily totals only and are not stored with Device IDs, playlist URLs, credentials, channel names or content titles. This collection is disabled by default and may be enabled through service configuration.

5. Why we process information

We process the information above to: provide playlist synchronisation and portal access; authenticate devices and protect accounts and sessions; determine complimentary or purchased access; provide customer support and diagnose failures; maintain security and prevent abuse; improve reliability using aggregate statistics; and meet legal obligations where applicable.

We process information where it is necessary to provide the service requested by the user, protect the security and reliability of the service, respond to support requests, comply with legal obligations, or pursue legitimate interests such as preventing abuse and improving app stability.

6. Third parties

Purchases are processed by Apple under Apple's own privacy policy. Our hosting provider processes data on our behalf to operate the website and backend. Optional artwork, metadata and sports-guide features fetch information from catalogue services using content titles or search terms only — never playlist credentials or Device IDs. We do not sell personal data and do not share it for targeted advertising.

The external services involved are:

  • TMDB and TVmaze — artwork, ratings and series information, requested through our server using titles only. Artwork images load directly from TMDB, which sees your IP address.
  • YouTube (privacy-enhanced mode) — only when you choose to play a trailer.
  • Cloudflare — only when you run the Speed Test in Settings.
  • OpenSubtitles / SubDL — only when online subtitles are enabled and you search for subtitles; the title and language are sent through our server.
  • Apple Intelligence — Smart Search runs on your device; your searches are not sent to us.
  • iptv-org and tv-logos (public channel-logo databases) — when a channel has no working logo, the app sends the channel name only to our server, which finds a matching logo and serves a copy it stores itself; these databases never see your device or IP address.

7. Where data is processed

Backend data is stored on our servers in the EU (Netherlands). Some external service providers (for example Apple, or catalogue services used for artwork) may process technical requests outside your country; where required, appropriate protections are relied on for such processing.

8. How long we keep it

  • Device and playlist data remains while needed to provide synchronisation, or until you request deletion.
  • Portal sessions expire after approximately one hour.
  • Playback diagnostics are kept for 14 days; legacy diagnostic log entries are capped per device and overwritten.
  • Playlist Transfer codes expire after 10 minutes and are deleted within an hour; encrypted iCloud-transfer copies stay until your device replaces or removes them, or you request deletion.
  • Support reports you submit remain until reviewed or no longer needed.
  • Security and abuse-prevention records may be retained for a reasonable period.
  • Records we are legally required to keep may be retained for as long as the law requires.

9. Your rights

Depending on your location, you may have the right to request access to, correction of, or deletion of your information; restriction of or objection to processing; portability; and withdrawal of consent where processing is based on consent. To exercise these rights — including deletion of all data linked to your device — email [email protected] and include the Device ID shown in the app's Settings. UK users may also complain to the UK Information Commissioner's Office (ico.org.uk).

10. Portal cookie

The playlist portal uses a strictly necessary first-party session cookie after successful pairing or Portal PIN login. It is used to authenticate the portal session, protect playlist-management requests and prevent unauthorised access. The cookie is Secure, HttpOnly, SameSite=Lax and expires after approximately one hour. It is not used for advertising or cross-site tracking, and the website sets no advertising or analytics cookies.

11. Security

We use reasonable safeguards including encryption of playlist credentials, private device tokens, authenticated portal sessions and CSRF protection. No system can be guaranteed completely secure, but we design the service so that the most sensitive data — your playlist credentials — is encrypted at rest and only returned to authenticated devices.

12. Contact

Privacy questions or deletion requests: [email protected] (include your Device ID from Settings).

Terms of Use · Support