Privacy Policy

Last updated: 25 October 2026

1. Data controller

The data controller of personal data is:

• Marco Migozzi (self-employed professional)
• VAT number: IT18375681006
• Business address: Via Pier Alessandro Guglielmi 76d, 00144 Roma – Italia
• Privacy contact: [email protected]

For any request concerning your data you can write to [email protected].

2. What ZipTv does (and what it does not do)

ZipTv is a player (media center) for IPTV lists: it organizes and plays the content that you access through your own credentials. The app does not provide, host or distribute any content: it is you who enter your own M3U8 list or the access to your own API server. ZipTv processes only the minimum data necessary to let you use the player on your devices.

3. Zero-knowledge principle: what our server does NOT see

The core of the project is a zero-knowledge model for sensitive information:

• The credentials of your Sources (server, username and password of the API server, URLs with embedded credentials) and the playback addresses of the streams (the locators) are encrypted on your device, with a symmetric key (the Account Key) that is generated on your device and is never sent to our servers.
• On the server this data exists only as encrypted text (ciphertext): we cannot decrypt it, nor do we know which content you watch through your list. Decryption takes place only on your device, at the time of playback.
• The Account Key is never transmitted to the server; the only way to recover it is the manual backup that you manage yourself.

Consequently, access to our systems does not expose your IPTV credentials or the links to your streams.

4. What data we process

• Account — email address (for the sign-in magic link). Where: ZipDB. Purpose: creating and authenticating the account. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
• Devices — identifiers of the paired devices and their capabilities (mobile/TV). Where: ZipDB. Purpose: pairing the devices and synchronizing. Legal basis: performance of a contract.
• Encrypted domain — Source credentials and stream locators, in encrypted form only. Where: ZipDB. Purpose: playing your content on your devices. Legal basis: performance of a contract.
• Catalog metadata — normalized title, year, TMDB identifier, quality (non-sensitive data, in plain text). Where: ZipDB. Purpose: browsing and deduplicating the catalog. Legal basis: performance of a contract.
• Watch state — viewing progress per profile (not watched / in progress / watched). Where: ZipDB. Purpose: synchronizing resume positions across your devices. Legal basis: performance of a contract.
• Diagnostics — error/crash events (technical logs, app version, device type). Where: ZipLog. Purpose: stability and security of the service. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
• Purchases — subscription/license status (transaction identifier). Where: store / PSP (see §6). Purpose: managing access to paid features. Legal basis: performance of a contract.

We do not collect: advertising profiling data, behavioral tracking for marketing purposes, media content (which does not belong to us and does not pass through our servers in plain text).

5. Metadata enrichment (TMDB)

To show covers and information about titles, the app queries The Movie Database (TMDB) with the normalized title of the content. We do not send your credentials or your locators to TMDB. The use of TMDB is subject to the TMDB terms.

6. Providers and third parties

• ZipDB: our data infrastructure (authentication, database), run on servers under our control.
• ZipLog: our error diagnostics system, hosted on our infrastructure.
• App Store / Google Play: they handle in-app purchases (IAP) as seller of record; their processing is governed by their respective privacy policies.
• PSP (e.g. Stripe) for the direct channel, where active: it processes payment data according to its own privacy notice. We do not store your full card details.
• TMDB: metadata enrichment (see §5).

With the providers that process data on our behalf we enter, where required, into agreements pursuant to Art. 28 GDPR (data processors).

7. Transfers outside the EU

The primary infrastructure (ZipDB, ZipLog) is operated directly by us and located in Germany (EU). Stores and PSPs may process data outside the EU: in that case the transfer takes place on the basis of adequacy decisions of the European Commission or, failing that, of the Standard Contractual Clauses (SCC) signed by the respective providers.

8. Retention periods

• Account and encrypted domain data: for the entire lifetime of the account, then deleted within 30 days of its closure.
• Diagnostic logs (ZipLog): retained for 30 days and then deleted.
• Purchase data: for the period required by tax and accounting obligations.

9. Your rights (Arts. 15-22 GDPR)

You have the right to: access, rectification, erasure ("right to be forgotten"), restriction, portability, object to processing based on legitimate interest, and to withdraw consent where applicable.

• You can delete your account from the app; this entails the deletion of the associated data (see §8).
• To exercise the other rights write to [email protected]. We reply within one month, which may be extended in the cases provided for by Art. 12 GDPR.
• You can lodge a complaint with the supervisory authority of the country where you reside or work or where the alleged infringement took place (in Italy, the Garante per la protezione dei dati personali).

10. Security

We adopt appropriate technical and organizational measures: client-side encryption of sensitive data (zero-knowledge model, §3), encrypted transport (TLS), access controls and per-account data isolation.

11. Minors

The service is not intended for minors under 16. We do not knowingly collect data of minors without the consent of the holder of parental responsibility.

12. Changes

We may update this privacy policy. Material changes will be communicated in-app or by email; the date at the top indicates the latest revision.

13. Contact

For any question about privacy: [email protected] — Marco Migozzi, Via Pier Alessandro Guglielmi 76d, 00144 Roma – Italia.