Playzy

Privacy Policy

Last updated: October 13, 2026

This Privacy Policy explains how Playzy processes information in its Windows and Android applications, website and backend services. Playzy does not sell personal information and does not use it for advertising or behavioral profiling.

Account information

  • When you create or use a Playzy account, we process your email address, nickname or login, account role and account membership.
  • We process this information to authenticate you, manage the account and provide account features.
  • Email verification and password recovery codes are processed temporarily. Raw passwords are not stored; the backend stores a one-way password hash.

Authentication and sessions

  • Playzy uses access and refresh tokens to authorize requests from signed-in applications and the website.
  • Refresh tokens are stored by the backend with their user and device association. Verification and password-recovery codes are temporary and expire according to the backend security configuration.
  • Tokens and sessions are revoked when you sign out, when the account is deleted, or when security checks require it. Authentication data is not provided to advertising companies.

Account content

  • For account features, Playzy stores playlist sources, playlist channels, playlist views, additional users, registered account devices, access settings and related identifiers and creation or update dates.
  • A local M3U file or local playlist and its local settings stay on the device unless you explicitly add or import them into an account source.
  • Cloud sources and playlist views are stored in the Playzy account so they can be used across supported clients. IPTV streams, playlist URLs and websites operated by third-party providers are not controlled by Playzy.

Local application data

  • Windows and Android clients store local application settings, selected channel and playback preferences, and local playlist data where applicable.
  • The Android client stores the signed-in email and access tokens in application preferences, caches EPG data and keeps a local cache of channel logos. Windows stores account tokens in its protected local application settings.
  • Local EPG and logo caches are used to make the application faster and are not a separate Playzy account database. Removing the application or clearing its data can remove local-only data. The Android application may also write diagnostic messages to the device system log while it is running.

Android device identifier

  • The Android application reads Android’s ANDROID_ID and sends it to the Playzy API when checking whether a newer Android version is available.
  • This identifier is used for the version-check request, not for advertising, location tracking or behavioral profiling. The application does not request GPS or other location permissions.
  • The version-check request is sent to the Playzy API over HTTPS. It is not used as a long-term account identifier; the version endpoint receives the device identifier, platform, application version, method and request timestamp.

Technical logs and security

  • Playzy and its own server infrastructure may process technical request logs such as IP address, user-agent, request time, endpoint, response status and errors. These logs are used for security, rate limiting, troubleshooting and operation of the service.
  • Playzy does not use these technical details for advertising, geolocation or profiling. No fixed retention period is promised for technical logs; access to logs is restricted to service administration and they are kept only as needed for operation and security.
  • The Playzy API is accessed over HTTPS in production. Passwords, access tokens and refresh tokens are not intentionally written to application logs.

Playzy server services and external IPTV sources

  • Playzy uses its own server-side services to operate account email notifications, the website, API, database and background worker. These services are part of the Playzy infrastructure and are not used for advertising.
  • Third-party IPTV providers, playlist hosts and stream servers have their own privacy practices. Playzy is not responsible for data processed by those external services when you use their URLs.

Account deletion

  • Only an authenticated account owner with administrator rights can request deletion. Additional users cannot delete the owner’s account.
  • The owner and all additional users lose access immediately. The account profile, users, devices, playlist sources, playlists, views and access settings are marked for deletion.
  • The account remains in a 30-day recovery period and is then permanently deleted by the background service. Shared global EPG data and platform security audit records are not account content and are not deleted with the account.
  • The owner can cancel deletion once through the one-time link sent by email before the deadline. After cancellation, a new sign-in is required and previously issued sessions remain revoked.
  • To start the process, sign in and use the account control. Public instructions are available on the account deletion page below.

Your choices and contact

  • You may use the account controls to manage your account and request deletion. You may also remove local-only data by clearing application data or uninstalling the client.
  • For questions about privacy or data deletion, contact support@playzy.ru.

Account deletion instructions: open the account deletion page

Back to Home