DT-IPTV is a media player that plays streams from a playlist or server source that the user adds. The app does not provide any content, channels or playlists. This policy explains what data the app processes, why, and your rights.
The following data is stored only on your device and is never sent to our servers or anywhere else:
Playlist addresses and server details you add (usernames and passwords are stored encrypted on the device)
Channel, movie and series lists, favorites, recently watched channels and playback positions
App settings (language, audio and subtitle preferences, etc.)
3. Data sent to our server
Only after you accept this policy, when the app starts and about every 6 hours while it is open, the following is sent to our server (iptvclient.detartech.com):
An irreversible hash (SHA-256) of the device identifier. The real device identifier never leaves the device.
Platform (e.g. Samsung Tizen), device model, operating system version, app version and distribution channel
App language
4. Data stored on the server
The data above, first and last seen time, and the country code determined from your connection by our infrastructure provider. Your IP address is not stored in this record.
Web server access logs (IP address, time, requested address) are kept for security and operations for at most 14 days and deleted automatically.
5. Purposes
The data is not used for advertising, profiling or marketing and is never sold. The app contains no advertising or analytics/tracking tools. If the purpose changes, your consent will be requested again.
Deciding which features the app can use on this device (license and feature entitlement)
Delivering remote settings such as maintenance, mandatory updates and announcements
Preventing abuse (rate limiting)
Tracking device and version compatibility
6. Legal basis
Your consent and our legitimate interest in providing the service (Turkish Personal Data Protection Law No. 6698, Art. 5; EU General Data Protection Regulation, Art. 6(1)(a) and (f)).
7. Retention and deletion
The device record is permanently deleted automatically 24 months after the device was last seen.
The in-app option "Withdraw consent and delete my data" deletes your server record immediately.
Web server access logs are deleted after 14 days.
All data on your device is deleted when you uninstall the app. You can delete a profile and its encrypted details on the Profiles screen, and channel lists with Settings > Clear cache.
8. If you do not consent
Nothing is sent to our server unless you consent. However, the app cannot work without obtaining the device entitlement from the server on first use, so the app cannot be used without consent.
9. Processors (service providers)
The following providers process data on our behalf, only to operate the service:
TransIP B.V. (Netherlands): server hosting. Records are kept on a server inside the European Union.
Cloudflare, Inc. (USA): DNS, encrypted connections (TLS) and traffic protection. Your connection passes through the Cloudflare network, which includes international transfer.
10. Sharing with third parties
Your data is not shared with third parties, except with competent authorities where required by law.
The streams you play come directly from the source you added; that source is responsible for its own data practices.
11. Children
The app is not directed at children. Users under 18 may use the app only with the consent of a parent or legal guardian, who must accept the consent screen.
12. Your rights
Under the Turkish Personal Data Protection Law (Art. 11) and the GDPR you have the right to access your data, request rectification or deletion, object to processing and withdraw your consent.
In the app, Settings > Privacy shows the data sent to the server.
Settings > Privacy > "Withdraw consent and delete my data" withdraws your consent and deletes your server record.
For other requests write to info@detartech.com and include the first 8 characters of the device ID shown in Settings; we reply within 30 days.
13. Security
All communication between the app and the server is encrypted with TLS.
The device identifier reaches the server only as an irreversible hash.
The database is reachable only from inside the server and is password protected; only authorized staff access the admin panel, with two-factor authentication.
14. Changes
If this policy changes, the current text is published on this page and in the app. If the data collected or the purpose expands, your consent will be requested again.