Legal

Privacy
Policy

Last updated: March 6, 2026

Introduction

Pierre-yves Boulbin operates Fluid IPTV (the "Application"), an IPTV player application available on iOS, tvOS, and Samsung Tizen, as well as the website fluidiptv.com (the "Website"). This privacy policy explains how we collect, use, and protect your information when you use our application and website.

Data Controller

The data controller for your personal data is:

Pierre-yves Boulbin
Email :

About Fluid IPTV

Fluid IPTV is solely an IPTV player application. We do not provide, host, or distribute any content through the application. Users are solely responsible for the content they access and must ensure they have the right to access any content streamed through the application.

Data We Collect

Data Collected During Purchases

When you make a Premium purchase on our website, we collect the following information:

  • Email address — used to send you your activation code and for customer support
  • MAC address — the network identifier of your Samsung TV, encrypted with AES-256 before storage on our servers
  • Device ID — a SHA-256 hash derived from the MAC address, used as a lookup index (non-reversible)

Payment Data

Payments are processed by PayPal. PayPal is PCI-DSS certified and handles the entire payment process. We never store your credit card or PayPal account data on our servers. PayPal collects the information necessary for payment processing in accordance with its own privacy policy.

PayPal Privacy Policy :

Transactional Emails

Confirmation emails containing your activation code are sent via our mail server (OVH). Only your email address is used for message delivery.

Analytics Data

We use the following analytics services:

Google Analytics (website)

Google Analytics GA4 is used on the website only after your explicit consent via the cookie banner. It collects anonymous site usage data.

Firebase (application)

  • Usage data
  • Performance statistics
  • Crash reports
  • Device location data

This information is collected anonymously and is used solely to improve the application's performance and user experience.

iCloud (coming soon)

  • All user data stored in the application is saved directly to the user's personal iCloud account
  • We have no access to this data
  • The management and privacy of this data is governed by Apple's iCloud privacy policy

Cookies and Tracking Technologies

Our website uses the following cookies:

Essential Cookies (always active)

  • XSRF-TOKEN — CSRF attack protection (form security)
  • Laravel session cookie — Technical site operation
  • PayPal cookies — Fraud prevention during payment (essential)

Analytics Cookies (subject to consent)

  • _ga — Google Analytics — visitor identifier (duration: 2 years)
  • _ga_G-6CG1B2M9VE — Google Analytics — session state (duration: 2 years)

Analytics cookies are only loaded after your explicit consent via the cookie banner displayed on the website. You can change your choice at any time via the "Cookie Settings" link in the footer.

Legal Basis for Processing

  • Contract performance (article 6.1.b RGPD) — processing necessary to fulfill your purchase and deliver the activation code
  • Legitimate interest (article 6.1.f RGPD) — analytics to improve the service (Firebase in the application)
  • Consent (article 6.1.a RGPD) — Google Analytics cookies on the website

Data Retention

  • Purchase data — retained for the duration of the license + 5 years for legal and accounting obligations
  • Payment records — 10 years (French legal accounting requirement)
  • Analytics data — 14 months (default Google Analytics / Firebase retention setting)

Your Rights (GDPR)

In accordance with the General Data Protection Regulation (GDPR), you have the following rights:

  • Right of access (article 15) — obtain a copy of your personal data
  • Right to rectification (article 16) — correct inaccurate data
  • Right to erasure (article 17) — request deletion of your data
  • Right to restriction (article 18) — restrict processing of your data
  • Right to data portability (article 20) — receive your data in a structured format
  • Right to object (article 21) — object to processing of your data

To exercise these rights, contact us at . We will respond within 30 days.

You also have the right to lodge a complaint with the CNIL (French Data Protection Authority):

Data Security

We implement appropriate security measures to protect your personal data:

  • AES-256 encryption of MAC addresses in the database
  • Secure communications via HTTPS
  • PayPal PCI-DSS compliance for payment processing
  • Non-reversible SHA-256 hash for device identifiers

TV Credentials (Partnership Program)

As part of the Supplier TV Partnership program, suppliers may store third-party IPTV credentials (M3U URL, Xtream Codes server, username, and password) on our servers for delivery to TV clients.

Credential Encryption

All IPTV credentials (source URL, Xtream server, username, and password) are encrypted with AES-256-CBC before database storage. They are only decrypted when accessed by the authorized supplier or when retrieved by the TV client via a valid code.

Purpose of Processing

  • Secure storage of IPTV credentials on behalf of the supplier
  • Delivery of credentials to the TV client upon retrieval code entry
  • Enabling the supplier to modify or revoke access at any time

Retention and Deletion

Credentials are retained as long as the TV access is active. When the supplier revokes an access, the status changes to "revoked" and credentials are no longer delivered to the client. Revoked data is retained for 12 months for audit purposes, then automatically deleted.

International Data Transfers

Some of your data may be transferred to service providers located in the United States:

  • PayPal — payment processing
  • Google — audience analytics (Analytics, Firebase)
  • OVH — transactional email delivery (hosted in France/EU)

These transfers are governed by the EU-US Data Privacy Framework and/or the European Commission's Standard Contractual Clauses.

Content Disclaimer

We explicitly state that:

  • Fluid IPTV is solely a media player application
  • We do not provide, host, or distribute any content
  • We have no control over the content users choose to access
  • Users are solely responsible for ensuring they have the right to access any content they stream through the application
  • Users must comply with all applicable laws and regulations regarding content access in their jurisdiction

Changes to Content Access

We reserve the right to implement any measure required by law regarding content access, including:

  • Blocking access to certain types of content
  • Implementing additional verification systems
  • Adding content filtering capabilities

Changes to This Privacy Policy

We may update this privacy policy from time to time. We will notify you of any changes by posting the new privacy policy on this page and updating the "Last updated" date.

Contact Us

For any questions about this privacy policy or the processing of your data:

Legal Rights

Nothing in this privacy policy is intended to exclude or limit any condition, warranty, right, or remedy you may have under law.