Last updated: 16 June 2026
channl.tv ("we", "us", "our") operates the channl.tv service, a cross-platform BYOS (Bring Your Own Subscription) IPTV, VOD and catch-up streaming application. This Privacy Policy explains how we collect, use, store and protect your personal data when you use our website, desktop application, and mobile application (collectively, the "Service").
By using the Service, you agree to the collection and use of information as described in this policy.
Payment processing is handled entirely by Stripe. We do not store credit card numbers, CVVs or full payment details. We receive only a Stripe customer ID, subscription status and billing events via webhook.
channl.tv sends notifications only for the things you ask it to. You can turn each category on or off, per channel (push, email and in-app), at any time from the Notifications screen in the app or from your online account settings.
Push notifications are routed through the push service for your device — APNs on iOS, FCM on Android, and the browser's Web Push service in your browser (see Third-Party Services). To do this we store a per-device push token, which is a routing identifier; we do not use it to build a profile of you or to track you across apps or sites.
Marketing communications (announcements and any promotional email or push) are sent only with your explicit, opt-in consent, in line with UK PECR and GDPR. You can withdraw that consent at any time — from the Notifications screen, from your account settings, or via the unsubscribe link in any marketing email — and we will stop sending them. Withdrawing marketing consent does not affect transactional messages such as email verification, password resets, billing notices or reminders you set yourself.
When you grant or withdraw consent (for notification permission or marketing) we keep an append-only record of that decision — the type of consent, whether it was granted or withdrawn, when, from which kind of device, and the policy version in force — so we can demonstrate that we honoured your choices. This ledger contains no message content.
You can set quiet hours per category so notifications are held back during times you choose (for example overnight). Quiet hours are applied in your time zone.
Beyond the in-app controls, you can revoke notification permission at the operating-system or browser level at any time (in your device or browser settings), which stops all push from channl.tv regardless of your in-app choices.
To keep the service reliable we record whether each notification we send was delivered to your device and whether it was opened. These events are first-party, are stored alongside your account, contain no message content (no titles, bodies or recipients beyond the account itself), and are never shared with advertising networks or used to profile you. They are retained for up to 90 days and then aggregated. These events are included in any data export you request.
When you delete your account we permanently delete your notification preferences, inbox and delivery/open events. To preserve a defensible legal record of the consent decisions you made (as required to demonstrate compliance), the consent ledger entries are anonymised rather than deleted — your account identifier is removed and replaced with a non-reversible pseudonym, leaving only the consent type, action, timestamps and policy version, retained for a limited period. Because of this, a fresh account registered later with the same email address starts with marketing consent off and inherits none of the previous account's preferences or consent history.
If you ask us to tell you when channl.tv launches or when a platform becomes available — for example through the "Notify me" form on our website — we collect your email address and, if you choose to give it, a first name, together with the details needed to evidence your consent (the time, a truncated IP address and browser user-agent, and the version of the wording you agreed to). You do not need a channl.tv account to join the list, and joining does not create one.
We send these emails only with your explicit, opt-in consent (UK PECR regulation 22 and UK GDPR Article 6(1)(a)). The marketing consent box is never pre-ticked and is separate from agreeing to our Terms. We use double opt-in: after you submit the form we email you a confirmation link, and we do not add you to the list — or send anything further — until you click it. If you receive a confirmation email you did not request, simply ignore it (or use the "remove this address" link in it) and the address is discarded.
Marketing and confirmation emails are delivered by Resend, our email service provider, acting as our processor. Your email address may be processed outside the UK and EEA; where it is, the transfer is made under an appropriate safeguard. See the Resend Privacy Policy.
Every marketing email carries a one-click unsubscribe link, and you can withdraw consent at any time; we then stop sending and record the address as unsubscribed so it is not contacted again. If you never confirm, your details are deleted automatically after a short period. We keep an append-only record of your consent (granted or withdrawn, when, and the wording version) so we can demonstrate we honoured your choices; it contains no message content. If you later delete a channl.tv account that uses the same email address, we also delete the matching waitlist entry and its consent record.
You can ask us to access or erase the personal data we hold about you on the list at any time by emailing [email protected], and you have the right to complain to the Information Commissioner's Office (ICO).
Account data, sync data and encrypted source credentials are stored in a MySQL database hosted on Railway. All data is transmitted over HTTPS/TLS.
The channl.tv desktop and mobile applications store data locally in a SQLite database on your device. This includes cached channels, EPG data, playback state and locally saved preferences. Local data remains on your device and is not transmitted unless cloud sync is enabled.
When you delete data (favourites, groups, history), it is soft-deleted in the cloud to support incremental sync across your devices. Soft-deleted records are periodically purged.
We do not sell your personal data to any third party. We do not use advertising trackers or analytics services that profile individual users.
To keep playback reliable and improve the product, the app sends limited diagnostic telemetry to our servers by default when you are signed in and online: playback diagnostics (which playback route/engine was used, whether it succeeded, startup time, failure category, and the container/codec, platform and app version involved) and anonymous layout and feature-usage signals. The name of your IPTV provider is stored only as a salted hash, never in the clear, and we never send your source credentials or stream URLs. Telemetry is linked to your account and device while you are signed in and is retained for about 90 days. You can turn it off at any time in the app under Settings → Data. Crash and performance diagnostics are handled by Sentry as described above.
We use a small number of cookies that are strictly necessary to operate the website and keep you signed in. We do not use cookies for advertising, tracking, profiling or third-party analytics, and we do not sell or share cookie data with anyone.
Because these cookies are essential to provide a service you have requested (signing in and staying signed in), they are exempt from prior consent under the UK Privacy and Electronic Communications Regulations (PECR) and the EU ePrivacy Directive. We do not set any non-essential cookies, so there is no consent banner with on/off toggles.
The authentication cookies are flagged httpOnly (JavaScript cannot read them), SameSite=Lax, and Secure in production, so they are only transmitted over HTTPS to our own origin. You can clear these cookies at any time through your browser settings or by signing out; doing so will end your session.
We implement industry-standard security measures to protect your data:
We maintain an internal incident and breach-response procedure. In the event of a personal-data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority — in the UK, the Information Commissioner's Office (ICO) — without undue delay and, where required, within 72 hours of becoming aware of it (UK GDPR Article 33).
Where a breach is likely to result in a high risk to you (for example, exposure of account credentials), we will also notify you without undue delay, in clear language, describing what happened, the likely consequences, the measures we have taken, and the steps you should consider — such as resetting your password and rotating the credentials of any IPTV sources you have connected (UK GDPR Article 34).
If you believe your account or data may have been compromised, contact us at [email protected]. Security researchers should follow our security policy.
We retain your account data for as long as your account is active. If you delete your account, all associated personal data, sync data and encrypted credentials will be permanently deleted within 30 days. Notification delivery and open events are retained for up to 90 days and then aggregated. Your notification consent record is anonymised rather than deleted on account closure, as described under Notifications & Your Consent. Anonymised, aggregated usage statistics may be retained for service improvement.
You can delete your account at any time — from inside the app, from your online account settings, or by request without the app. See our account and data deletion page for step-by-step instructions.
If you are located in the European Economic Area (EEA) or the United Kingdom, you have the following rights under the General Data Protection Regulation (GDPR):
To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.
The Service is not intended for use by anyone under the age of 16. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child under 16, we will take steps to delete it promptly.
We may update this Privacy Policy from time to time. Material changes will be communicated via email or a notice on the Service. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.
If you have any questions about this Privacy Policy or how we handle your data, please contact us:
channl.tv
Email: [email protected]