This policy explains what Zapora (“Zapora”, “we”) collects when you use the Zapora apps, zapora.app and getzapora.com, why, and what you can do about it. The short version: we collect as little as we can, we never sell data, and your TV provider’s logins never reach us.
What stays on your device
The sources you add (server addresses, usernames, passwords, playlist and portal links, MAC addresses), your channel lists and your viewing are stored on the device you use. The video itself streams directly between your device and your provider. We can’t see what you watch.
What we collect
If you create an account
- Email address and a password hash, to sign you in and send account emails (verification, password reset, receipts).
- Devices you link: a random device ID, the name and platform you see in your account, and when it was last used, to enforce the 5-device limit.
- Purchases: your plan, its status and the store’s or Stripe’s transaction ID. We never see or store card numbers.
- Sync data, if you use sync: profiles, favourites, history, resume points, channel lists and settings. Provider logins are left out.
- Security records: sign-ins, failed attempts and account changes, with the IP address, to protect your account and stop abuse.
Without an account
Nothing that identifies you. The apps don’t contain advertising, analytics or tracking libraries.
Services that help us
| Service | What for | What it receives |
|---|---|---|
| Hetzner (EU) | Hosts our account server | Account data above |
| Cloudflare | Network protection and delivery for our websites and API | IP address, request details |
| Stripe | Card payments on zapora.app | What you enter at checkout |
| Google Play, Amazon, LG, Samsung | In-app purchases in their stores | Handled by the store under its own policy |
| Resend | Sends account emails | Your email address and the message |
When you use these features, the app contacts the service directly from your device:
- Ratings, artwork and subtitle search (OMDb, IMDb suggestions, OpenSubtitles): the title being looked up.
- Trakt, only if you connect it: what you watch, to update your Trakt history.
- Casting uses Google Cast on your network.
Why we’re allowed to (legal bases)
To provide the service you asked for (your account, purchases, sync); our legitimate interest in keeping accounts secure and preventing fraud; and legal obligations such as keeping payment records.
How long we keep it
- Account and sync data: while your account exists. Deleting your account erases it within 30 days, including from backups.
- Security records: up to 12 months.
- Payment records: as long as tax law requires.
Your rights
You can see, correct, export or delete your data, object to how we use it, or ask us to restrict it. Delete your account in the app (Settings → Account → Delete account) or email [email protected]. We reply within 30 days. You can also complain to your local data protection authority.
Children
Accounts are for people aged 16 and over. Kids profiles are set up and managed by an adult on the adult’s account, and we don’t knowingly collect data from children.
International transfers
Our server is in the EU. Some of the services above may process data in other countries; where they do, they use safeguards such as the EU’s Standard Contractual Clauses.
Changes
If we change this policy in a way that matters, we’ll tell you in the app or by email before it takes effect.
Contact
Zapora · [email protected]