Privacy (draft)

Last updated 11 October 2026. Status: draft placeholder.

What this draft is for

tesiptv is a browser player for a subscription you bring yourself. To run that player, the service has to store some information about you and about the provider account you connect. This draft lists the categories we expect. It does not fix retention periods, legal bases, or international transfers. A lawyer must do that.

Account

We expect to store the email you sign up with, a password hash, and the state of your trial or subscription. We do not expect to see your card number. Payment, when it exists, is intended to be handled by a payment provider.

Your provider sign-in

Connecting a provider means storing the server address, username and password that provider gave you, so the player can fetch your channel list, guide, catch-up and on-demand catalogue. Those credentials are your provider's, and they are sensitive. The finished policy must say how they are encrypted, who can see them, and how you delete them.

Favourites and devices

Favourites, hidden categories and watch history belong to your account so the same short list appears on each device. The product intention is to keep watch history for a limited time. This draft does not set that period.

A signed-in device can have a name, a last-seen time, and an approximate location taken from the network the device used. Approximate location is so you can recognise a car or a phone when you approve a QR sign-in. It is not a precise address.

What we do not do

• We do not supply the programmes you watch. Your provider does.
• This draft says we do not sell personal data. That sentence is an intention, not a finished legal commitment, until a lawyer confirms it.
• We do not put provider logos or other people's marks on this marketing site.

Cookies

The player is expected to use a sign-in cookie so you stay signed in. This marketing site itself does not set analytics cookies. The finished notice must list every cookie the app sets, and why.

Contact

Privacy questions about this draft: hello@tesiptv.example. That address is a placeholder and is not monitored yet. The real notice must name the controller and say how you ask for a copy or deletion of your data.