config/legal.php:
entity, address, email, country. Set the matching LEGAL_*
values in .env, and have the wording reviewed, before
submitting this domain to Paddle.
This notice explains what Puls stores about you, why, and what you can do about it. Puls is built to need very little: there are no user accounts, no advertising, and no analytics or tracking of any kind.
| Data | Why we hold it | Legal basis |
|---|---|---|
| Device identifier and platform — your TV's hardware ID or a random identifier we generate, plus which platform it is (webOS, Tizen, Android TV, web) | It is the only thing tying your playlist and your purchase to your installation. Without it we cannot tell your data from anyone else's. | Performance of our contract with you |
| Entitlement state — plan (trial, yearly, lifetime), trial end date, subscription expiry | To know whether playback should be unlocked on this device. | Performance of our contract |
| Playlist source — the M3U URL or Xtream server, username, and password. The password is encrypted at rest; an M3U URL is stored as you entered it and often embeds credentials in the link itself. | The server fetches and refreshes your catalogue and guide from your provider on a schedule. It cannot do that without the credentials you supplied. | Performance of our contract |
| Catalogue and guide data retrieved from your provider — channel names, logos, movie and series metadata, programme schedules | To render the interface quickly. This data is deduplicated: where several users load the same provider, one shared copy is kept rather than one per person. | Performance of our contract |
| Your personalisation — favorites, resume positions, preferences, hidden and locked categories, channel ordering, and a hashed parental PIN | To make the app remember what you set. The PIN is hashed, not readable by us. | Performance of our contract |
| Purchase linkage — the Paddle customer and subscription identifiers, and the email address you gave at checkout, if any | To match a payment to a device, to handle renewals, cancellations and refunds, and to restore your access if the device is reset. | Performance of our contract; legal obligation for tax records |
| Pairing codes — the short-lived code shown on your TV when you link a playlist from your phone | To connect the two screens for a few minutes. Expires automatically. | Performance of our contract |
| Server logs — IP address, timestamp, requested endpoint, errors | Security, abuse prevention, and diagnosing faults. | Our legitimate interest in running the service safely |
We do not collect your name, address, date of birth, contacts, location, or any record of what you actually watch beyond the resume position on an item you paused.
Note that when you open the checkout, Paddle runs its own page and may set its own cookies for fraud prevention and payment processing, under Paddle's privacy policy.
| Who | Role | What they get |
|---|---|---|
| Paddle.com Market Limited | Merchant of record — an independent controller for the sale | Your payment details, billing country and email. They pass us only a customer identifier, a subscription identifier, and the device identifier we sent them. |
| Our hosting provider | Processor — runs the servers and database | Whatever is stored on the server, under contract and on our instructions. |
| Your playlist provider | Independent third party — you chose them, not us | Our server connects to them using the credentials you entered, so they see those requests and our server's IP. We have no agreement with them and no control over what they log. |
We may also disclose data where we are legally required to, or to establish or defend legal claims.
Our servers are located in the European Union. Paddle operates internationally and may transfer data outside the EEA under the safeguards described in their privacy policy, such as standard contractual clauses.
If the GDPR or a comparable law applies to you, you have the right to access your data, to correct it, to have it erased, to restrict or object to processing, and to receive it in a portable form. You can withdraw consent where processing relies on it, and you can complain to your national data protection authority.
Be aware that erasing your data removes your playlist and personalisation, and that we may need to retain the minimum record of a purchase to honour your entitlement and meet tax obligations.
Traffic to our servers is encrypted with TLS. Xtream passwords and parental PINs are protected at rest — the password encrypted, the PIN hashed. Database and cache services are not exposed to the public internet. Administrative access is restricted and session-protected.
No system is perfectly secure. Because an M3U URL can itself contain your provider credentials, treat the link you paste as a secret, and change it with your provider if you believe it has been exposed.
Puls is not directed at children under 16 and we do not knowingly collect their data. The app includes a parental PIN so an adult can lock categories on a shared television.
If we change how we handle data, we will update this page and move the "last updated" date. Material changes will be signalled in the app where we reasonably can.
TODO_LEGAL_ENTITY
TODO_LEGAL_ADDRESS
TODO_LEGAL_EMAIL