Privacy policy

Who is responsible

Sala IPTV makes Sala and is the data controller for the data described here. For anything about privacy, write to support@salaiptv.com. There is more about us on the About page.

Statistics and crash reports

The app has no advertising, no device id and no install id. Its diagnostic log stays on the device and leaves out logins. It does send us two kinds of anonymous reports, so we can see what is used and fix what breaks.

Usage statistics

The app counts a handful of fixed events:

• the app starting;
• a section opened, such as Live or Movies;
• playback starting, and its kind: live, catch-up, film or episode;
• a film or series page opened, without which title it was;
• the demo chosen;
• a playlist added, and its type: Xtream login, link or file;
• a search made, without what you searched for.

They never include what you watch, what you search for or which provider you use. With them go the app version, the platform (such as LG TV or browser) and the app's language. The app collects events for up to a minute and sends them to our metadata server. The server adds the country, as Cloudflare reads it from the request, and stores each event in Cloudflare Workers Analytics Engine. It keeps no IP address and no identifier, so the counts can't be linked to you or your TV. Analytics Engine keeps them for currently three months. The request itself shows up in Cloudflare's logs like any other request to the server (see below), but not what it contains.

Crash reports

When the app hits an error it didn't expect, it sends a crash report to Sentry (Functional Software, Inc.), which stores it in its EU region in Germany. A report holds the error message and where in the code it happened, the app version, the platform and the browser version. The message can name a web address the app was loading, such as your provider's; logins and tokens in web addresses are removed before it is sent. It carries no identifier, and Sentry is asked not to store the IP address it comes from. The app sends at most ten reports a session, and Sentry keeps them for a limited time, currently up to 90 days.

Turning them off

Both are on by default. Turn off Send anonymous usage statistics in Settings and the app sends neither, and drops any events still waiting to be sent.

Your IPTV provider

Sala plays the playlist you add: an Xtream login or an M3U link from your provider. Your TV talks to the provider directly. It sends your username and password with each request, loads the channel list, the guide and the catalog, and plays the streams.

Your provider sees your IP address and what you watch. That is between you and your provider, under their terms and privacy policy. Many providers use plain http, so the login and the streams cross the internet unencrypted. That depends on the provider's server, not on Sala.

If you add a guide (EPG) link, the TV fetches it from wherever it points. If a stream is protected with DRM, the TV's own PlayReady system contacts the provider's licence server, as it does for any protected stream.

Your login and your playlist never reach our servers.

Our metadata server

To show posters, plots, cast and collections, Sala matches your provider's titles to The Movie Database (TMDB) through our own server, which runs on Cloudflare. It receives:

• Batches of TMDB ids found in your provider's catalog, with the app's language. They describe the catalog as a whole, not your choices.
• When you open a title's page or a person: a request for that title's or person's details. A lookup by name uses the title as your provider lists it, never text you type.
• The anonymous usage statistics above, unless you turn them off.

It doesn't receive your login, your playlist, your provider's address or your viewing history. Its database holds film and series details shared by everyone, plus the shared subtitle timing below. It has no table of users, devices or IP addresses.

Like any server, it sees the IP address each request comes from. It uses it to limit how many requests one address can make, without storing it. Cloudflare's logs record each request: the address asked for, the time, the result and your IP address. So for as long as the logs are kept, they show which titles were looked up from an IP address. Cloudflare keeps them for currently three days, and we use them only to find faults and abuse. Cloudflare also caches the answers to title lookups for a day; the cache holds film details, nothing about you.

If you enter your own TMDB API key in Settings, the TV can also ask TMDB directly with that key. Sala doesn't come with one.

Shared subtitle timing

Online subtitles are often a little early or late. When you correct an online subtitle's timing and close the timing card, Sala sends our server three things: which subtitle file it was (its OpenSubtitles number), a fingerprint of the video copy (a hash of the file, or the TMDB id, episode and running time) and the offset you chose. No account, title name or device id is sent.

The server doesn't store your IP address. It stores a hash of it, made with a secret salt (for IPv6, of your network's /64 prefix), to count how many different homes agree and to limit each home to 30 reports an hour. When two homes agree within a second, other viewers of the same copy get that timing automatically. When you turn on an online subtitle and haven't set a timing of your own, the TV asks the server for an agreed timing, sending the same file and copy fingerprint without an offset.

Because the salt could link the hash back to an IP address, we treat it as personal data. We don't try to make that link, and since we keep no IP addresses, we usually can't tell which entries came from you.

Today there is no setting to turn this off, and entries don't expire. Nothing is shared unless you adjust the timing of an online subtitle, so leaving the timing alone avoids it. To avoid the timing request as well, use the stream's own subtitles instead of online ones.

Services your TV contacts

These services get requests straight from your device, so they see your IP address. Their own privacy policies apply.

• TMDB images (image.tmdb.org). Posters, backdrops, logos and photos load directly from TMDB's image servers, so TMDB sees which images your TV loads.
• OpenSubtitles (opensubtitles.com). When Sala looks for online subtitles, on a title's page or in the player, the TV sends OpenSubtitles the title or its IMDb or TMDB id, the season and episode, your subtitle languages and OpenSubtitles' own fingerprint of the video file, worked out from small parts of it. It uses Sala's key, not an account of yours. When you pick a subtitle, the TV downloads it from them. OpenSubtitles counts downloads per IP address.
• YouTube (youtube-nocookie.com), only when you open a trailer. It plays in YouTube's privacy-enhanced player, and Google's terms, privacy policy and cookies apply while it plays.
• LG. Reminders, notifications and DRM use the TV's own system services. LG's privacy policy covers the TV itself.

The demo

"Try the demo" on the welcome screen, and the demo at salaiptv.com/demo, use a demo provider on our metadata server with a shared demo login. Its films are public-domain films from the Internet Archive (archive.org), and its channels are public test streams hosted by Mux, Unified Streaming and Google Cloud Storage. Your device loads them from those hosts, which see your IP address. In a browser, some of these files pass through our server.

Adding a playlist from your phone

The TV shows a QR code and a short code that lead to salaiptv.com/add, where you type your playlist on your phone. Your phone encrypts it with a key that exists only on that TV and only while the code is on screen, so our server passes on data it cannot read and deletes it as soon as the TV has collected it, or after 15 minutes. The server sees the code, the TV's public key and the encrypted data, and the IP addresses of the TV and the phone for rate limiting, which it does not keep. The page loads nothing from anyone else and has no statistics.

Setting up from your phone on the same Wi-Fi

On LG TVs, Settings also offers a second way. While Sala is open, the TV runs a small web page on your home network, so you can type a playlist on your phone instead of with the remote. The phone talks straight to the TV over your Wi-Fi. Nothing goes through our servers or the internet.

A pairing code shown on the TV and a one-time token protect the page. The connection is plain http inside your network, so use it on a network you trust. A playlist file you send this way is saved on the TV until you remove it.

What stays on your device

Sala keeps its data in the app's private storage on the TV. None of it is sent to us, and there is no cloud backup. It holds:

• your playlists, including the provider's username and password, stored as you entered them (Sala adds no encryption of its own);
• favourites, watchlist, likes and dislikes, reminders, and your channel names, order and hidden channels;
• watch history, resume positions and recently watched channels;
• settings, and the parental lock's PIN as a salted hash, not the PIN itself;
• caches: channel lists, the guide, the catalog, film details and downloaded subtitles.

To delete it:

• remove a playlist in Settings with its Remove button;
• Settings, Clear Cache removes cached data only;
• Settings, Reset App removes all accounts, sources, preferences, favourites and viewing history from the TV;
• uninstalling Sala removes everything it stored.

In the browser demo, the same kind of data sits in your browser's storage for salaiptv.com, and clearing this site's data in your browser removes it. The desktop app keeps it in its own data folder on your computer; Settings, Reset App removes it there too.

This website

salaiptv.com sets no cookies and shows no ads. Cloudflare hosts it and processes your IP address to deliver the pages and protect the site from attacks. Its pages, fonts and images come from this site.

To count visits we use Simple Analytics, a service based in the EU. It sets no cookies, stores no IP address and collects no personal data. It counts page views and where visitors came from (the referring site), with rough facts such as browser, screen size and country. Your browser loads its script from Simple Analytics' server, which sees your IP address to deliver it but doesn't keep it. What it collects is described in their documentation.

The browser demo is the app itself, so it contacts the services above: our metadata server, TMDB's images and the demo's hosts. It keeps the demo's settings in your browser's local storage, which it needs to run, and remembers whether you hid its key bar.

Email

If you write to support@salaiptv.com, we use your address and your message to answer you, and nothing else. Cloudflare Email Routing forwards the mail to a Gmail mailbox, so Google holds it. We keep it as long as we need to answer you and delete it within 12 months, unless the law requires us to keep it longer.

Who processes data for us

• Cloudflare, Inc. hosts the metadata server, its database, the usage statistics and this website, and forwards our email. It may process data outside the EU under its data processing terms, which include the EU's standard contractual clauses.
• Functional Software, Inc. (Sentry) stores the crash reports in its EU region in Germany, under its data processing terms, which include the EU's standard contractual clauses.
• Simple Analytics B.V., in the Netherlands, counts visits to this website.
• Google holds our email in Gmail.

We don't sell personal data or share it with anyone else.

Legal bases

Under the GDPR we rely on:

• providing the features you use (Article 6(1)(b)), when the app fetches film details or subtitles for you;
• our legitimate interest (Article 6(1)(f)) in keeping the metadata server reliable and safe from abuse, in subtitles that are in time for everyone, in answering your email, in knowing which features are used, in finding and fixing crashes, and in counting visits to this site.

Your rights

You can ask us for access to your data, a copy of it, its correction or its deletion, and you can ask us to restrict it or object to how we use it. Write to support@salaiptv.com and we answer within one month.

We hold no account, name or IP address for you, so we usually can't link server data to you. Where we can't identify you, those rights don't apply to that data (GDPR Article 11), but tell us what you know and we will look. The data on your device is yours to delete at any time, as described above.

You can also complain to the Danish Data Protection Agency (Datatilsynet, datatilsynet.dk) or to the authority where you live.

Children

Sala doesn't ask for anyone's age or identity and isn't aimed at children. Its parental lock helps you keep content from them.

Changes to this policy

When Sala changes what it sends or stores, we update this page and the date at the top. A bigger change, such as a new service that receives your data, appears here before it takes effect.