Privacy policy

LoveTech, SIRET 980 494 413 00027, 30 avenue Condorcet, 71880 Châtenoy-le-Royal, France. Contact: support@loveplayer.app.

Account: email address, display name, profile photo if provided by Google, hashed password if you create an email account, trial / subscription dates, email confirmation date.

Google sign-in (OAuth): Google account ID, email, access / refresh tokens needed for the session. We do not post anything to your Google account.

Transactional emails: address confirmation code (OTP) and contact-form messages, sent from support@loveplayer.app.

Playlists: name, type (M3U or Xtream), M3U URL, or Xtream server / username / password. These credentials are used only to fetch your list for playback.

Devices: TV name, MAC address or equivalent technical ID, last-seen date, TV session token, temporary pairing codes.

Sync: favourites, watch progress, account settings, recent items.

Contact: first name, last name, email, subject, message (and MAC if you provide it).

Metadata: title IDs and language sent to TMDB to show titles, posters and trailers — not your email.

On the website: Auth.js session cookie (JWT) to stay signed in; CSRF cookie to secure sign-in; admin cookie (lp_admin) for the internal dashboard only, never for end users.

No advertising cookies and no third-party analytics trackers on the user journey. Site language comes from the URL (/fr, /en, /es), not from a tracking cookie.

LG webOS: the TV network MAC address, used to link and restore the account.

Android TV: hardware MAC if available, otherwise a stable technical ID (Widevine DRM fingerprint, manufacturer serial or ANDROID_ID), formatted as a MAC address for the same activation flow.

These IDs are not used for advertising. They apply the licence (2 TVs, 1 replacement per month) and restore your account after reinstall.

Contract: create the account, activate the licence, link TVs, sync playlists / favourites / progress, answer support.

Legitimate interest: secure sessions, prevent abuse, operate administration.

Legal obligation: respond to a rights request or a lawful demand.

Hosting and database: Vercel Inc. (440 N Barranca Ave #4133, Covina, CA 91723, United States).

Google sign-in: Google Ireland / Google LLC, only if you choose “Continue with Google”.

Movie / series metadata: The Movie Database (TMDB), with title IDs and display language.

We do not sell your data and do not use an ad network.

The host (Vercel Inc.) and, where used, Google and TMDB may process data in the United States. Those transfers rely on standard contractual clauses and their respective privacy policies.

Account, devices, playlists and sync: for the life of the account, then deletion on request or when the account is closed.

Pairing codes: until they expire (a few minutes).

Contact messages: for as long as needed to handle your request.

Web session: until you sign out or the token expires.

You can delete a playlist or a TV at any time from the site or the app.

Favourites, history, parental PIN and settings can also stay locally on the device. Clearing app data or resetting the TV deletes the local copy; synced copies stay on the account until you delete them.

Access, rectification, erasure, objection, restriction and portability under the GDPR. Write to support@loveplayer.app or use the Contact form. You may also lodge a complaint with a supervisory authority (in France: CNIL, cnil.fr).