Privacy Policy (Datenschutzerklärung)
This is a convenience translation. Only the German version is legally binding; in case of any discrepancy, the German version shall prevail.
1. Controller (Verantwortlicher)
The controller is Henrik Teudt, iPii.TV. Contact: mail@ipii.tv.
2. Server and Access Data
When the website is visited, technically necessary access data is processed, for example IP address, time, browser, operating system, accessed paths and status codes. The legal basis is Art. 6(1)(f) of the GDPR (Datenschutz-Grundverordnung, DSGVO).
3. Account and Usage Data
During registration and login, we process necessary account data, in particular email address, protected access credentials, session data, as well as playlist and settings data created by the user.
4. Cookies and Local Storage
iPii.TV stores information in a session cookie, in the browser's local and session storage, and in IndexedDB and cache storage. We distinguish between strictly necessary storage operations, functions that you choose yourself, statistics and playback.
a) Strictly necessary storage
These storage operations serve functions that you expressly request. § 25(2) no. 2 TDDDG (Telekommunikation-Digitale-Dienste-Datenschutz-Gesetz) applies to the access to your terminal device; for the associated processing, Art. 6(1)(b) GDPR applies to the account and booked functions, and Art. 6(1)(f) GDPR applies to security.
| Storage location | Purpose | Duration | Group |
|---|---|---|---|
ipii_session (cookie) | Keeps the signed-in PHP session open for sign-in and security. | Until the browser is closed or until sign-out. | Sign-in |
ipii:session | Keeps you signed in within the app and enables authenticated requests. | Until sign-out; the server token for at most 90 days after sign-in. | Sign-in |
ipii:last-user-id | Detects an account switch and thereby keeps local account data separate from one another. | Until the next account switch or until local app data is deleted. | Security |
ipii:settings-preferences, ipii:settings | Mirror the settings that you yourself define in your account so that the app can apply them locally. | Until sign-out or until local app data is deleted; account settings are then loaded again. | Your settings |
ipii:zap:reminders | Stores the program reminders you have set. | Until sign-out, until the reminder is removed or until local app data is deleted. | Your selection |
ipii:manager:epg-urls | Holds the XMLTV sources that you have entered in the source manager. | Until sign-out or until local app data is deleted. | Your sources |
ipii:zap:activeDeviceCode:<account ID> | Remembers the target device you have selected for remote control. | Until sign-out or until local app data is deleted. | Your device selection |
ipiiRecorder (IndexedDB) | Remembers the folder you have selected for recordings. | Until sign-out or until local app data is deleted. | Your selection |
ipii_remote_pin, ipii_remote_playlist, ipii_remote_device | Hold the binding of the web remote control to a device that you have set up. | Until sign-out or until local browser data is deleted. | Your device selection |
ipii:sw-purged (sessionStorage) | Remembers for this tab that outdated service workers have been checked. | Until the tab is closed. | Technical maintenance |
ipii:editor:state (sessionStorage) | Retains the working state of the Playlist Studio during the current session. | Until the tab is closed. | Working state |
ipii:pending-import (sessionStorage) | Displays the playlist import you started after the page change. | Until the tab is closed. | Working state |
ipii:welcome-dismissed | Remembers that you have closed the welcome notice so that the app remains directly usable afterwards. | Permanently until local app data is deleted. | Strictly necessary |
ipii:tapzap:onboarded | Remembers that you have completed the introduction to the channel guide so that it is directly usable the next time you open it. | Permanently until local app data is deleted. | Strictly necessary |
ipii.signalBoot.shown (sessionStorage) | Ends the pairing intro display after it has been shown once so that it does not interrupt the pairing process you have chosen again. | Until the tab is closed. | Strictly necessary |
ipii:zap:view | Restores the list or grid view of the channel guide that you have selected. | Permanently until sign-out or until local app data is deleted. | Strictly necessary |
ipii:remoteMode | Restores the remote control mode you have selected so that the desired control is directly available. | Permanently until sign-out or until local app data is deleted. | Strictly necessary |
ipii:active-playlist-id | Reopens the source you last had active so that you can resume the playback you selected. | Permanently until sign-out or until local app data is deleted. | Strictly necessary |
ipii:zap:lastPlaylist | Reopens the source you last had active in the channel guide so that you can continue there. | Permanently until sign-out or until local app data is deleted. | Strictly necessary |
ipii:zap:recent | Shows the channels you most recently watched again so that you can continue with the channel guide. | Permanently until sign-out or until local app data is deleted. | Strictly necessary |
ipii-cache (IndexedDB) | Briefly holds channel lists of your account sources so that the channels you open can be displayed immediately. | Logically five minutes; until overwritten, sign-out or deletion of local app data. | Strictly necessary |
ipii:emailVerified (sessionStorage) | Shows the status of your email verification within the current tab session. | Until the tab is closed. | Account |
ipii:mt:rails:v1 (sessionStorage) | Briefly holds the most recently loaded VOD carousel data for the same session. | Logically five minutes, at most until the tab is closed. | Temporary cache |
ipii-remote-v15 (Cache Storage) | Keeps the web remote control available for offline access. | Until a new version or until the browser cache is deleted. | Offline remote control |
b) Storage you choose
| Storage location | Purpose | Duration | Group |
|---|---|---|---|
ipii:last-login-id | Pre-fills the sign-in field with the login name you have chosen. | Only if you activate “Remember login name”; is also retained on sign-out until you deselect the option or delete local app data. | Optional |
ipii:remember-login | Remembers your choice to keep the login name on this device. | Only as long as “Remember login name” is active; is retained on sign-out and is removed when the option is deselected or local app data is deleted. | Optional |
ipii:client-id | Assigns the playback history to this browser as long as the playback history is switched on (default: on; can be switched off in the settings). | Until sign-out or until local app data is deleted. | Playback history |
c) Playback storage
These storage operations are strictly necessary for the playback you have requested. § 25(2) no. 2 TDDDG applies to the access to your terminal device; Art. 6(1)(b) GDPR applies to the associated processing.
| Storage location | Purpose | Duration | Group |
|---|---|---|---|
ipii:bw-estimate | Stores an estimated bandwidth as a starting value for the adaptive playback quality so that the playback you have requested starts in a quality that suits the connection. | Until it is overwritten, you are signed out or local app data is deleted. | Playback |
dashjs_*_bitrate, dashjs_*_settings | Remembers the quality last used as well as the audio and subtitle selection during DASH playback so that the playback you have requested continues with these settings. | Logically six minutes; physically until the next read, until sign-out or until local app data is deleted. | Playback |
d) Statistics consent
| Storage location | Purpose | Duration | Group |
|---|---|---|---|
ipii:statistics-consent | Stores your decision on statistics. | Is retained until local app or browser data is deleted and also persists on sign-out. | Consent |
ipii:analytics:vid | Recognizes returning visits in pseudonymized form for the statistics. | Until withdrawal, sign-out or until the browser data is deleted. | Statistics |
ipii:analytics:ses (localStorage and sessionStorage) | Assigns page views to a statistics session and to a browser tab. | The session ends after 30 minutes of inactivity; the identifiers are removed on withdrawal, on sign-out or when the browser data is deleted. | Statistics |
The options “Decline” and “Allow statistics” are offered on equal terms in the banner. You can change or withdraw your choice via “Cookie settings” in the page footer. On sign-out, account-related app data and statistics identifiers are removed; the consent decision and an explicitly remembered login name are retained. “Delete local app data” also removes these two items, including your consent decision.
5. Statistics and Reach Measurement (only with consent)
If you select “Allow statistics”, we process, in pseudonymized form, page views, time spent, scroll depth, clicks on downloads and external links, and form completions. In addition, there are the referrer, UTM data, screen size, browser language code, time zone, device type, browser type and operating system. A visitor identifier and session identifiers are created only after you have given your consent. The IP address is not stored in plain text but server-side as a daily changing hash value. We do not create profiles of individual persons and do not sell data. The legal basis for access to your terminal device is § 25(1) TDDDG and, for the processing, Art. 6(1)(a) GDPR. Without consent, no statistics identifiers are created and no statistics data is sent.
We store raw statistics data with pseudonymous identifiers only for as long as we need it for the evaluation. We are currently setting up automatic deletion after 90 days (thereafter only daily totals without identifiers); we will adapt this policy as soon as it is active.
5a. Optional Usage Data in the Player
In addition to the consent to statistics, you can switch on the toggles “Optional usage data” and “Crash reports” under “Privacy & Telemetry”; both are off by default. If the statistics consent and the respective toggle are active, the player transmits playback events such as start, time to first frame, buffering interruptions, reconnections and technical error codes with a random session identifier that exists only in the player's working memory. With “Optional usage data”, the channel name may also be included; the stream address is not transmitted. Without both prerequisites, the player sends no such data.
App logs are retained for 90 days, debug lines within them for 14 days; thereafter only aggregated daily values without individual identifiers remain. We delete playback session data after 90 days for the web player and after 14 days for TV and mobile apps. We are currently setting up automatic deletion after 90 days for technical player event logs; we will adapt this policy as soon as it is active.
External Content
Some other pages load Google Fonts, cdnjs or jsDelivr: publicly accessible pages under /app/, /give/, /landing/, /neu.html, /portfolio/, /root-landing/ and /wm-2026/ as well as internal or preview pages under /admin-redesign/intranet.html, /api/admin/telemetry-dashboard.php, /manager-redesign/manager-shell-header.html, /previews/variants/, /redesign/, /topbar-preview.html and /tv/index-editor.html. When such content is loaded, the respective provider may receive connection data.
Your browser loads poster images in the media library directly from The Movie Database (TMDB, image.tmdb.org); TMDB receives connection data such as your IP address in the process.
6. Content and Playlist Data
Playlist data imported or stored by the user is processed in order to provide the functions. iPii.TV itself does not provide any streams.
7. Hosting and Security
The website is operated on server infrastructure in Germany. Appropriate technical and organizational measures are used, including HTTPS, access protection and logging of security-relevant events.
8. Data Subject Rights
You have the rights of access, rectification, erasure, restriction of processing, data portability and objection, as well as the right to lodge a complaint with a data protection supervisory authority. Please send requests to mail@ipii.tv.
9. HAFENFRONT: Anonymous Usage Statistics
For the game HAFENFRONT (ipii.tv/Hafenfront), we collect, in deviation from Section 5, an anonymous usage statistic without consent in order to improve the usability, stability and performance of the game. Only coarse events such as game starts, match duration, selected faction, device type and technical performance values are recorded. Free text, chat, names, full URLs and account data do not flow into this statistic. No cookies are set for the statistic.
The server processes the IP address and user agent only transiently in order to form from them a shortened visitor key (HMAC-SHA-256) using a random value that is newly generated daily and held exclusively in working memory. The IP address and user agent are not stored in the process. The key allows, at most, visits within the same day to be combined. Raw events and keys are deleted after 90 days at the latest; thereafter only aggregated daily values remain. A random session identifier exists only in the working memory of the respective browser tab.
The legal basis is our legitimate interest in a stable and easy-to-use game (Art. 6(1)(f) GDPR). You can object at any time by switching off the statistics in the game options. We automatically treat signals such as Do Not Track (DNT) and Global Privacy Control (GPC) as an objection. Your refusal is stored locally in your browser so that it is retained on later visits; you can change it there at any time.