Updated October 9, 2026
Privacy Policy
This English version is provided for convenience. In case of discrepancy, the French version prevails.
In short. CTV+ doesn’t provide any channels or content and doesn’t show any ads. We don’t sell your data and we don’t track you for advertising purposes. Videos go directly from your source to your device, never through our servers. We only keep what is needed for your account, your devices and your profiles to work.
Who is responsible for your data?
CTV+ is published by Buzzle Partners LLP, a limited liability partnership registered in England and Wales under number OC455560, whose registered office is at 82a James Carter Road, Mildenhall, IP28 7DE, United Kingdom. Buzzle Partners LLP is the controller of your personal data.
For any question about your data: contact@ctvplus.app.
The data we process
Your account
Your email address, your password, the date your account was created and your plan (Free or Premium). Your password is never stored in plain text: only a cryptographic hash of it (scrypt) is stored.
Your devices
For each device signed in to your account: its name (for example “Léa’s MacBook”), its type, the app version, an installation identifier created by the app and the date it last signed in. This data is used to display and manage your devices, and to notify you by email when a new device signs in.
Your sources
The name and type of each source you add, together with the server address and your Xtream Codes credentials or your M3U link. This information is encrypted (AES-256) on our servers and is only sent to your own signed-in devices. The web dashboard never displays it.
So that you can hide content from the dashboard, your device also sends us the list of your source’s content: the categories, the channel names and the number of titles, with no addresses or credentials.
Your profiles and what you watch
The names and settings of your profiles (avatar, language, suggestions), your playback progress, the episodes you have watched, the series you follow, My List, your favorite channels, hidden content and your preferences. This is what keeps everything in sync from one device to another. In private mode, what you watch is not recorded.
Technical data
Your IP address is used to limit repeated sign-in attempts (it is only held in memory, for the duration of this check) and appears in the server logs, which are kept for 14 days for security and troubleshooting purposes.
To detect slowdowns and outages, the app also sends short technical reports: the device model and memory, how long the catalog and the home screen take to load, and, when playback fails, the type of error and the quality that was attempted. These reports contain no stream addresses, no credentials and no titles watched, and only the 60 most recent reports for your account are kept.
If something goes wrong (the app closes unexpectedly, playback fails) or if you send a report from the settings, the app attaches the session log: the sequence of technical steps (loading the catalog, opening a video, error messages), with addresses and credentials removed. It is never sent in any other case, and only the 10 most recent logs for your account are kept.
The remote control
When you control a TV from your phone, our servers relay the commands you send (button presses, typed text, the movie or channel to start) and what the TV is currently playing (title, position, audio and subtitle tracks) in real time, only between the devices on your account. These messages are not stored.
Trakt (if you connect it)
Each profile can be linked to its own Trakt account. If you link one, and only then, our servers send what you watch in that profile (the movie or episode, with its TMDB identifier, and your playback progress) to Trakt to keep your history, and episodes and movies marked as watched on Trakt are imported into CTV+. Trakt access tokens are stored encrypted on our servers. You can disconnect Trakt from the profile at any time: the link is then deleted.
The voice assistant (iPhone, beta)
Only if you turn it on (you are of legal age and you give your consent in the app): your voice is transcribed by your iPhone’s speech recognition (Apple), then only the text of your request is sent, through our servers, to Google Gemini so that it can be understood. No data from your account (email, credentials, sources, history) is attached to it, and we don’t keep these requests. You can withdraw your consent at any time in Settings › General.
Payments
Premium subscriptions are paid for through the App Store or Google Play. We never see your payment details: we only receive the status of your subscription (active, in trial, expired) and the purchase reference, in order to unlock Premium on your account.
Why we use your data
- To provide the service you request (account, devices, sources, sync, subscription). The lawful basis is the performance of our contract with you.
- To protect your account and the service (limiting sign-in attempts, new device alerts, logs). The lawful basis is our legitimate interests.
- To comply with our legal obligations, for example to respond to a request from an authority.
We don’t use your data for advertising, profiling or resale, and the app contains no audience analytics tools.
Who has access to your data
- Hostinger International Ltd (Cyprus) hosts our servers, located in Frankfurt, Germany, and sends our emails (forgotten password, new device).
- Apple and Google process payments and subscriptions, under their own policies.
- Google LLC (Gemini service, paid tier) receives the text of requests made to the voice assistant, if you have turned it on, in order to understand them. These requests contain no data from your account.
- Trakt, Inc. (United States) receives what you watch in a profile, only if you have linked that profile to your Trakt account.
No other company receives your account data.
Services your device contacts directly
To display title pages, the app itself contacts certain services. They receive your device’s IP address and the request, but no data from your account:
- Your source, which you choose and which applies its own terms.
- TMDB (The Movie Database), for posters, synopses and movie and series search.
- TheIntroDB, to know where an episode’s opening credits start and end.
- YouTube, in privacy-enhanced mode, only for trailers.
- Wikimedia Commons, for the royalty-free movies in demo mode.
- football-data.org, for club crests in the Sport tab (never in demo mode).
Some of these services are located outside the European Union, in particular in the United States, and process these requests under their own policies.
How long we keep your data
- Your account data, for as long as your account exists.
- A device session expires after 180 days without use, and a web dashboard session after 60 days.
- Pairing codes expire after 10 minutes, and password reset links shortly after they are sent.
- Server logs, 14 days.
When you delete your account, everything is erased immediately and permanently: account, sources, profiles, playback progress, devices and content list. See how to delete your account.
Security
All connections to our servers are encrypted (HTTPS). Passwords are stored as hashes, sources are encrypted, and session tokens are only stored as hashes.
Your rights
You have the right to access your data, to have it corrected or erased, to obtain a copy of it, to object to its processing or to request that its processing be restricted. You can change your email address and delete your account yourself from the dashboard. For anything else, write to us at contact@ctvplus.app from your account’s email address. We reply within one month.
You can also lodge a complaint with the data protection supervisory authority in your country: the CNIL in France, the ICO in the United Kingdom.
Minors
CTV+ accounts are reserved for people of legal age. The account holder creates and manages the profiles of their household, including children’s profiles.
Cookies
This website uses no cookies and no audience analytics. The web dashboard sets a single cookie, which is strictly necessary to keep you signed in.
Changes
If this policy changes, we update the date at the top of this page. In the event of a significant change, we will notify you by email or in the app.