Privacy Policy

1. Who we are

RolloTV Media SARL, established in Morocco, publishes RolloTV IPTV Player and operates rollotv.com and rollotv.store. For data protection purposes we are the controller of the personal data described here.

Contact: privacy@rollotv.com, or 13 Rue Ibn Benna, Résidence Lina 2 IMM C APPT 2, Kénitra 51000, Morocco.

2. The short version

RolloTV contains no advertising, no analytics SDK, no crash-reporting SDK, no marketing trackers and no Google Play Services. We do not build advertising profiles, we do not sell data, and we do not share it with data brokers.

We deliberately do not say "we collect nothing", because that would not be true. The app contacts our license server to run the free trial and verify activation, and several optional features contact third parties. Everything that leaves your device is listed in section 4.

The app requests no location permission, no camera, no microphone, no contacts and no storage permission. It never asks for your name, email address or telephone number.

3. What you give us directly

Using the app requires no account. You can install RolloTV, add a source and use it without telling us anything about yourself.

Two things are optional:

• An activation code. Entering one sends the code and your device identifier to our license server so it can be verified.
• A portal account at rollotv.store. If you create one, we hold your email address and a hashed password so you can sign in and see your codes and devices. You can use activation codes without ever creating an account.

4. What the app sends, service by service

4.1 Our license server (rollotv.store)

When the app starts, checks or performs an activation, it sends:

• A device identifier. An Android-generated value that identifies this app on your device, not you. It survives reinstalling the app and changes after a factory reset. It is not your advertising ID, hardware serial or IMEI.
• The app version.
• Your connection type. Wi-Fi, Ethernet, or mobile data. Not your network name.
• Your activation code, when you are activating.

Our server additionally records the IP address the request came from and derives an approximate country from it, which is standard for any web request.

The first time the app contacts the server from a device, this check also starts that device's free trial. The server keeps the device identifier with the trial's start and end dates, so that reinstalling the app does not start a second trial.

4.2 Playback reporting

When you start watching, the app tells our license server that a device is playing. It sends the same four things every time, on the free version and the premium one alike:

• the device identifier we already hold;
• the event: playback started, still playing, or stopped;
• the kind of content: live, movie, series or catch-up; and
• your connection type: wifi, ethernet or mobile.

While playback continues the app repeats this about once a minute, which is how the panel knows a device is online.

We store the device identifier, the kind of content, the start time and how long it ran. We keep that for 30 days and then delete it.

We never store what you watched or where it came from. The channel or movie name and the stream URL are not saved. That matters, because an Xtream stream URL contains your provider username and password. Current app versions still send those two fields, and the server discards them the moment they arrive, before anything is written to the database. A later app version will stop sending them at all.

4.3 Your own source provider

When you play something, your device connects directly to the server in your own playlist or Xtream login. That connection necessarily carries whatever credentials your provider issued you, because that is how their service authenticates you.

This traffic goes from your device to them. It does not pass through us, and we cannot see what you play. Your provider's own privacy policy governs what they do with it. We have no relationship with them and no influence over their practices.

4.4 Artwork and metadata (TMDB)

Where your source leaves a description, poster or cast list empty, the app can look the title up at The Movie Database to fill the gap. Those requests contain only a title and year, or a database identifier. No device identifier and no account information is sent.

4.5 Subtitles (OpenSubtitles)

Only if you choose to sign in with your own OpenSubtitles account. Your username and password are sent to OpenSubtitles to authenticate, and are stored on your device encrypted using the Android keystore. Subtitle searches send a title, year and episode number. We never see your OpenSubtitles credentials, and the download quota belongs to your account rather than ours.

4.6 The weather line on the home screen

The clock and weather line on the app's home screen works out an approximate location from your public IP address, using a third-party lookup service, and then requests current conditions from a weather service. No location permission is requested and GPS is never used. The result is cached and the feature fails silently if either service is unavailable.

We are reviewing this feature, including the option to ask you for a city once instead of looking it up, which would remove the IP lookup entirely.

4.7 Your local network

Where the app discovers or sends media to another device on your own home network, that traffic stays on your local network and never reaches us or any third party.

5. This website

rollotv.com is a static website. It sets no cookies, runs no analytics and embeds no third-party trackers or fonts. Our hosting provider keeps standard server logs, including IP addresses, for security and troubleshooting.

6. What we store, and for how long

7. What we never collect

• Your playlists, M3U URLs or Xtream credentials are stored on your device, and are not uploaded to us as part of setting up a profile
• Your name, postal address or telephone number
• GPS or precise location
• Contacts, photos, files, camera or microphone
• Advertising identifiers
• Payment card details. No payment is taken in the app

8. Legal basis (GDPR)

Where the GDPR applies to you, we rely on:

• Contract. Verifying your activation and running your portal account. Without this the licensed features cannot work.
• Legitimate interests. Security, fraud prevention, supporting the app, and making sure each device gets only one free trial, balanced against your rights.
• Consent. Optional features you switch on yourself, such as signing in to OpenSubtitles. You can withdraw it by signing out.

9. Sharing

We do not sell personal data and we do not share it for advertising. We share it only with service providers who host our infrastructure, and where we are legally required to.

10. Where data is held

Our license server and its database are located in France, inside the European Union. We are established in Morocco, so we reach that data from outside the European Economic Area. Where personal data is transferred outside the European Economic Area, we rely on appropriate safeguards.

11. Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict or object to the processing of your data, to receive a copy in a portable form, and to complain to your data protection authority.

Email privacy@rollotv.com. Please include your Device ID, shown on the Premium screen in the app, so we can locate the right records. Without it we often cannot identify which data is yours.

12. Security

Traffic to our servers uses HTTPS. Portal passwords are stored hashed, never in plain text. No system is perfectly secure, and we do not claim otherwise.

13. Children

RolloTV is not directed at children and we do not knowingly collect data from them. The app includes an optional profile PIN, but that is a convenience for households and not a certified parental-control system.

14. Changes

We will update this policy as the app changes. The date at the top reflects the current version, and material changes will be signposted.

15. Contact

privacy@rollotv.com for anything on this page, or the contact page for general support.