WorldStreamPrivacy policy
1. Controller
Fernando Topolski, IT-Art Support, Switzerland.
Contact: info@itartsupport.com
This policy follows the Swiss Federal Act on Data Protection (revFADP/revDSG) and, where applicable, the EU General Data Protection Regulation (GDPR).
2. Local first
WorldStream keeps your profiles, favorites, folders, watch history, search history, reminders, stream reliability and settings only on your device; in the browser this is local storage (IndexedDB and localStorage). This data is not sent to us. You can delete it at any time in Settings ("Reset application data") or through your browser's site data.
WorldStream uses no analytics or tracking tools, no advertising, no advertising identifiers and no cookies.
3. Server logs at the host
The website is hosted by Infomaniak Network SA in Switzerland. For every request the web server processes technically necessary data: IP address, date and time, requested address, amount of data, browser identification (user agent) and referrer. These logs keep the service secure and are deleted by the host according to its retention periods. The legal basis is our legitimate interest in secure operation (Art. 6(1)(f) GDPR).
4. Helper services on our server
Two small helper services prepare public data: the channel list (from the community project iptv-org and open playlists) and programme guides (from open XMLTV sources). Only this public programme data is cached. To prevent abuse, a request counter is kept under a one-way hash of the IP address; these files are deleted after 24 hours at the latest. No profiles, favorites or histories are stored on the server.
5. Streams and channel logos
WorldStream does not host streams and never passes streams through its own servers. When you play a channel, your device connects directly to the broadcaster's server, which sees your IP address and possibly your browser type. The same applies to channel logos loaded from third-party servers. Those servers are governed by their operators' privacy policies.
6. Sign in with Google and sync (optional)
If you choose to sign in with Google, WorldStream uses Google Identity Services; only then is the script from accounts.google.com loaded. WorldStream receives access to:
- drive.appdata: only WorldStream's own hidden app folder in your Google Drive. WorldStream can neither see nor change your other files.
- openid, email, profile: your email address and name, to show which account you are signed in with.
The app folder holds a single backup file (worldstream-backup.json) with your profiles (without PIN), favorites, smart collections, reminders, followed programmes, your own playlist links and settings. The file is merged between your devices. In the browser and in the Android app the access token is kept in memory only and never stored (on Android, Google Play services manage the sign-in). The Windows, macOS and Linux apps store a refresh token on your device so you do not have to sign in on every start: on Windows encrypted for your user account, on macOS and Linux in a file only your user account can read. Signing out deletes it and revokes it at Google. The data is processed by Google LLC, including in the USA; Google is certified under the Swiss-U.S. and EU-U.S. Data Privacy Framework. The legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time by signing out in Settings or in your Google Account (Security, third-party access). Signing out keeps your local data. You can delete the backup file in Google Drive under Settings, Manage apps.
WorldStream's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. The data is used only for syncing, is not shared and is not used for advertising.
7. Notifications
For reminders the browser asks for permission to show notifications. Reminders are triggered locally while WorldStream is open. No push service is used.
8. Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability and objection, and the right to withdraw consent. Since we store no personal data on our servers apart from the server logs, you can exercise most rights directly in the app (export, import, reset). For requests write to info@itartsupport.com. You may also lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) or a supervisory authority in the EU.
9. Changes
We update this policy when WorldStream changes. The version published here applies.