Privacy Policy
Last updated: August 12, 2026
Who we are
Maya IPTV publishes the Maya IPTV app (Android, Android TV, Windows, iOS) and the website mayaiptv.com. For any question about your data: contact@mayaiptv.com.
Maya IPTV is a media player: the app does not provide, host or sell any content. You sign in with your own subscription (Xtream Codes or Stalker Portal).
Data we collect
- Account: email address, username (optional), password (stored hashed, never in plain text).
- IPTV connections: the server URL and credentials of your subscription, required for the app to work. They are encrypted at rest (AES-256-GCM) on our servers.
- Usage: favorites, playback progress ("Continue Watching"), last activity date.
- Technical data: server logs (IP address, date, requested URL) for security purposes, kept for at most 14 days.
- Security events: when a login attempt fails, a request is blocked or rate limits are exceeded, we record the IP address, timestamp and event type, solely to detect and block abuse (brute-force, credential stuffing). Kept for at most 90 days, then automatically deleted.
What we do not do
- We never sell or rent your data.
- No ads, no ad profiling.
- No commercial sharing with third parties.
- No cookies or analytics trackers on this website.
Third-party services
Our servers are hosted by Hetzner (European Union). The app contacts Google Firebase (Remote Config) for its remote configuration — Google may process your IP address in doing so. On Android and iOS the app also uses Google Analytics for Firebase for anonymous usage statistics (screens viewed, features used, app version, device model and OS, approximate country derived from the IP address), tied to a random installation identifier. Advertising ID collection is disabled: no data is used for advertising. Movie/series metadata and sports scores are fetched by our own servers: your IP address is not shared with those services.
Security
All communications use HTTPS. IPTV credentials are encrypted at rest. Administration access is restricted (VPN + two-factor authentication).
Retention
Your data is kept for as long as your account is active. Technical logs are purged within 14 days; security events are automatically purged within 90 days. If you delete your account, all your data is erased — see Delete your account.
Your rights
Under the GDPR you have the right to access, rectify, erase and port your data. Write to contact@mayaiptv.com from your account email address.
Children
Maya IPTV is not directed at children under 13 and does not knowingly collect data about them.
Changes
This policy may change; the date at the top prevails. Substantial changes will be announced on the website.