Privacy Policy

Last updated: May 16, 2026

M3u IPTV ("we", "us", "our") takes your privacy seriously. This page explains what personal data we collect when you visit m3uiptv.cam or subscribe to our M3U playlist service, how we use it, and what you can do about it. If anything's unclear, message us through the contact page.

1. Who We Are

M3u IPTV is a paid subscription service that ships a working M3U playlist URL to subscribers. We act as the data controller for any personal data you give us. For privacy questions, head to our contact page or ping us on WhatsApp.

2. Data We Collect

What you give us directly

• Email address — we need this to send you your personal M3U URL and account details.
• Payment details — handled by our payment partners (Stripe, PayPal, or a crypto processor). We don't see or store your full card number.
• First name — optional, used only if you contact support and want to be addressed personally.
• Support messages — anything you send us via the contact form, WhatsApp, or email reply.

What we pick up automatically

• IP address — used for fraud checks and to show pricing in the right currency. We don't keep persistent logs.
• Browser and device type — collected via cookies so the site renders properly on your screen.
• Pages you visit and time spent — through analytics cookies. Full details on our Cookies Policy page.

3. Why We Use Your Data

• To create your subscription and send your M3U playlist URL.
• To send service updates (URL refreshes, planned maintenance, renewal reminders).
• To process your payment safely.
• To reply when you reach out to support.
• To spot abuse or fraud and keep our streams stable for honest subscribers.
• To meet legal obligations when they apply.

We don't sell your personal data to anyone. We don't run automated profiling that makes legal decisions about you. That's not our business.

4. Legal Basis (GDPR)

If you're in the European Union or UK, here's the lawful basis we rely on:

• Contract — we process your email so we can actually deliver the M3U URL you paid for.
• Legitimate interests — fraud prevention and improving the service.
• Consent — analytics and marketing cookies. You can withdraw consent any time.
• Legal obligation — where local law tells us we have to keep certain records.

5. Your GDPR Rights (EU & UK)

If you live in the European Economic Area or the United Kingdom, you've got these rights:

• Access — ask for a copy of everything we hold about you.
• Rectification — get inaccurate data fixed.
• Erasure — ask us to delete your data ("right to be forgotten").
• Restriction — ask us to pause certain types of processing.
• Portability — receive your data in a machine-readable file.
• Object — push back on processing we base on legitimate interests.
• Withdraw consent — flip cookie consent off any time on this site.

To use any of these, drop us a line via the contact page. We'll respond within 30 days.

6. CCPA Rights (California Residents)

California residents can:

• Know what personal info we've collected and why.
• Request that we delete it.
• Opt out of any sale of personal information (we don't sell it in the first place).
• Not be discriminated against for exercising any of these rights.

Send a CCPA request through our contact page and we'll handle it.

7. LGPD Rights (Brazil Residents)

If you're in Brazil, the Lei Geral de Proteção de Dados gives you the right to access, correct, delete, or port your data, plus the right to be told how it's used. Reach out via the contact page and we'll process your LGPD request.

8. Who We Share Data With

We only share your data with:

• Payment processors (Stripe, PayPal, crypto gateways) so transactions actually clear.
• Analytics providers (Google Analytics) — anonymised, and only when you've accepted analytics cookies.
• Law enforcement — only when a valid legal order forces our hand.

9. How Long We Keep It

Your email sits in our system for as long as your subscription's active, plus 90 days after it ends — unless you ask us to delete it sooner. Payment records stick around as long as tax law requires (usually 7 years).

10. Cookies

We use a small set of cookies. The full breakdown of which ones we set and how to switch them off lives on our Cookies Policy page.

11. Security

All data moves over HTTPS encryption. Subscriber records are locked down to staff who need access for support or billing. We review our security setup regularly and patch what needs patching.

12. Changes to This Policy

We can update this policy when the service or the law changes. The "Last updated" date at the top will always reflect the latest version. For anything material, we'll email active subscribers before it kicks in.

13. Get in Touch

Questions about your data, or want to file a privacy request? Use our contact page. We aim to reply within 48 hours.