Privacy policy

1. Controller

Daniel Andersson
Allerstr. 32
12049 Berlin, Germany
Email: mail@posterhomegallery.com

2. This website

Server log files

When you visit iptv-tree.com, the web server automatically records the IP address, date and time of the request, the requested page or file, the HTTP status code, the referring page and the browser user agent. This is needed to deliver the site and to detect and prevent misuse. Legal basis is Art. 6 (1) (f) GDPR. Log files are deleted after 14 days.

Hosting

The website and the account service run on a server of IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany, which processes data on our behalf under a data processing agreement (Art. 28 GDPR).

No cookies, no tracking

This website sets no cookies and uses no analytics or tracking tools. Fonts and images are served from our own server; no data is sent to third parties when you view it.

3. IPTV Tree account

The account page (linked as "Account") and the apps use an account service operated by us. When you create and use an account, we process:

• Account data: email address and password (stored only as a secure hash).
• Playlist data you enter: server URLs, M3U links, usernames and passwords of your IPTV provider, playlist names, the XMLTV (EPG) link and, if you add one, your OpenSubtitles API key.
• Sync data: settings, watchlists, recently watched items and playback positions, so they are available on all your devices.
• Device data: a random device ID, a device name and the time a device was last seen, plus short-lived pairing codes used for QR-code sign-in.

We process this data to provide the account and sync features you requested (Art. 6 (1) (b) GDPR). The data is stored until you delete your account. To delete your account, email us from the address you registered with.

Session cookie

The account page sets a technically necessary session cookie to keep you signed in and to protect forms against cross-site request forgery. It expires when your session ends. Legal basis is § 25 (2) TDDDG and Art. 6 (1) (f) GDPR.

Cloudflare

Requests to the account service are routed through Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA, for protection against attacks and for delivery. Cloudflare processes IP addresses and request data for this purpose. Cloudflare is certified under the EU-US Data Privacy Framework. Legal basis is Art. 6 (1) (f) GDPR.

4. Connections made by the app

The app connects directly from your device to the servers you configure: your IPTV provider's server and EPG source. If you add an OpenSubtitles API key, subtitle searches are sent directly to OpenSubtitles (opensubtitles.com). These services receive your IP address and the requests needed to deliver their content. We have no control over their processing; their own privacy policies apply.

5. Your rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). To exercise these rights, contact us at the email address above.

You also have the right to lodge a complaint with a supervisory authority, for example the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit).

Last updated: September 2026