Privacy Policy

1. About This Policy

This Privacy Policy applies to all PickFlick services, including the PickFlick mobile app (iOS/tvOS), the PickFlick web companion app (app.pickflick.xyz), the marketing website (pickflick.xyz), our embeddable developer widgets, and related services.

2. What We Collect

Marketing Website Visitors

• Analytics data: Page views, referrer URLs, browser type, device type, and approximate location (country/region level) via privacy-respecting analytics
• Contact form submissions: Name, email address, and message content when you voluntarily contact us
• Cookies: Essential cookies for website functionality and optional analytics cookies (with your consent)

Developer Widget Users

When IPTV providers embed our widgets on their websites:

• Widget load events: Anonymous usage statistics to monitor widget performance
• QR code generation: IPTV source credentials are encoded client-side in the browser—we do NOT receive or store these credentials on our servers
• API validation requests: When widgets validate IPTV sources, requests go directly from the user's browser to the IPTV provider (CORS) or through our proxy with minimal logging (request success/failure only)

What We Do NOT Collect

• IPTV source credentials (usernames, passwords, server URLs)
• Content you access through your IPTV sources
• M3U playlist contents or EPG data
• Viewing history or watch patterns
• Any personally identifiable information unless you voluntarily provide it

3. How We Use Your Data

• To improve our website and widget performance
• To respond to your inquiries and support requests
• To analyze aggregate usage patterns (not individual tracking)
• To ensure security and prevent abuse

4. Data Sharing

We do NOT sell your personal data. We may share data with:

• Service providers: Hosting (Vercel), analytics providers—bound by data processing agreements
• Legal requirements: When required by law, court order, or to protect our legal rights

5. Widget Embedding Notice

If you are an IPTV provider embedding our widgets on your website, you are responsible for:

• Disclosing widget usage in your own privacy policy
• Obtaining any necessary consents from your users
• Ensuring your use complies with applicable laws

6. Cookies

We use essential cookies for website functionality. Analytics cookies are only set with your consent. You can manage cookie preferences through your browser settings or our cookie consent banner.

7. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Opt out of analytics tracking
• Withdraw consent for optional data processing

California residents: Under CCPA/CPRA, you have additional rights including the right to know what data we collect and opt out of any sale (we do not sell personal data). In the preceding 12 months, we have collected the following categories of personal information:

Category	Collected?	Source	Business Purpose	Sold/Shared?
Identifiers (name, email)	Only if voluntarily provided via contact form	Directly from you	Responding to inquiries	No
Internet/network activity (page views, browser type, referrer)	Yes, with consent	Collected automatically via analytics	Improving website and widget performance	No
Geolocation (country/region level only)	Yes, approximate only	Collected automatically via analytics	Aggregate usage analysis	No

We do not collect: biometric data, financial information, protected classification characteristics, professional/employment information, education information, or sensitive personal information.

Data retention: Analytics data is retained in aggregate form. Contact form submissions are retained until your inquiry is resolved, then deleted within 90 days. Widget usage statistics are anonymized and retained indefinitely in aggregate form only.

EU/UK residents: Under GDPR, you have rights to access, rectification, erasure, restriction, portability, and objection. Our lawful basis for processing is legitimate interest (website analytics) and consent (contact forms).

8. Data Security

We implement industry-standard security measures including HTTPS encryption, secure hosting infrastructure, and regular security reviews. However, no method of transmission over the internet is 100% secure.

9. Children's Privacy

Our services are not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected data from a child, please contact us immediately.

10. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes by posting the updated policy with a new effective date. Your continued use of our services after changes constitutes acceptance.

11. Contact Us

For privacy-related inquiries or to exercise your rights: