MALIMAR TV Privacy Policy
Effective date: [EFFECTIVE DATE]
This policy explains what personal information [COMPANY LEGAL NAME] ("we", "us") collects when you use MALIMAR TV — our website [WEBSITE URL], mobile and TV apps, and related services (the "Service") — how we use it, who we share it with, how long we keep it, and the choices and rights you have. [COMPANY LEGAL NAME] is the data controller. Contact details are in section 15.
The short version: we collect what we need to run your account, stream video, process your subscription, keep chat safe, and support you. We do not sell your personal information, we do not share it for targeted advertising, we do not show ads, and we do not use third-party analytics or tracking SDKs.
1. Information we collect
1.1 Information you give us
| Category | Examples | When |
|---|---|---|
| Account details | Email address, password (stored only in hashed form by our authentication provider), username, display name, preferred language | When you sign up or edit your account |
| Phone number | Your mobile number (US numbers only) and a one-time code sent by text | If you choose to sign in with your phone |
| Google / Apple sign-in data | Name, email address and profile photo URL shared by Google or Apple, and an account identifier | If you choose to sign in with Google or Apple |
| Profile photo | An avatar you choose from our presets or a photo you upload (JPEG/PNG/WebP, max 2 MB) | Optional |
| Preferences | Language (English/Thai), autoplay next episode, episode view, keyboard settings, notification settings | When you change settings |
| Chat and messages | Live chat messages, direct messages, watch-party room names, join requests, and your display name and avatar shown alongside them | When you use these features |
| Reports and blocks | Who you reported or blocked, the reported message and your reason | When you report or block |
| Support | Support tickets, messages and attachments (up to 10 MB); notes our agent writes about a support call (time, duration, summary). Support calls are not recorded. | When you contact support |
| Payment details (web purchases) | Billing name and address if requested, and the last 4 digits, card type and expiry date of your card. Full card numbers are collected and stored by [PAYMENT PROCESSOR], not by us | When you subscribe on our website |
1.2 Information created when you use the Service
| Category | Examples |
|---|---|
| Viewing activity | Titles and episodes you watch, playback position and duration, "watched" markers, recently-watched history (up to 20 items), continue-watching (up to 50), favorites/follows, new-episode alerts |
| Subscription and transactions | Plan, price, status, renewal dates, payments, refunds, referral codes and credits; for Apple/Google purchases, the store's transaction and subscription identifiers (we do not receive your card details from Apple or Google) |
| Device and session | A random session ID for your one active device, device type and name (e.g. "Chrome on Mac", "Android TV"), sign-in times, TV-linking codes |
| Technical data | IP address, browser/app version and user agent, and request logs. Used for streaming, security, rate limiting, fraud prevention and enforcing free-preview limits |
| IP address and approximate location | When you open the website (at most once per browser session) we record your IP address and the approximate location our network provider (Cloudflare) derives from it: country, region, city, postal area, time zone, internet provider/network (ISP/ASN), and city-level map coordinates rounded to about 1 km. If you are signed in we link this to your account, keep your last IP address, first and last seen times and up to 20 distinct recent locations (city level). If you are not signed in we keep only a daily count of visitors per country — no IP address or other identifier. We do not use GPS or your device's location services and never ask for location permission. See sections 2 and 4 |
| Live viewer counts | A random per-tab ID sent every ~25 seconds while you watch a live channel. It is held in memory only and discarded about a minute after you stop |
| Safety data | Moderation actions (mutes, time-outs, bans), automated filter results, and our moderators' notes |
| Push tokens | A device push token, only if you turn on push notifications |
1.3 Camera and microphone
Watch parties and support calls can use your camera and microphone only after you grant permission. Audio and video are sent live and are not recorded or stored by us. In the current version, watch-party video may connect participants directly (peer-to-peer), which means other participants' devices can see your IP address.
1.4 Information we do NOT collect
We do not collect precise (GPS or device) location, contacts, photos library (other than a photo you choose to upload), health or financial account data, and we do not build advertising profiles. We derive an approximate, city-level location from your IP address as described in section 1.2.
2. How we use information, and our legal bases
| Purpose | Legal basis (GDPR / UK GDPR / Thailand PDPA) |
|---|---|
| Create and secure your account; let you sign in | Performance of our contract with you |
| Stream video, remember where you stopped, show history and favorites, enforce one device per account | Contract |
| Process subscriptions, renewals, refunds and referral credits; prevent payment fraud | Contract; legitimate interests (fraud prevention); legal obligation (tax/accounting) |
| Apply regional content licensing and free-preview limits | Legitimate interests; contractual obligations to our licensors |
| Run chat, direct messages, watch parties and calls | Contract |
| Moderate content, handle reports and blocks, prevent abuse and spam | Legitimate interests (user safety); legal obligation where applicable |
| Customer support | Contract; legitimate interests |
| Send service emails (receipts, renewal and price-change notices, security alerts) | Contract; legal obligation |
| Send new-episode alerts by email or push | Consent (you can turn this off at any time) |
| Protect the Service: bot detection, rate limiting, security logs | Legitimate interests |
| IP address and approximate location: account security (spotting sign-ins from unusual places or shared accounts), fraud prevention, applying regional content licensing, and internal aggregated analytics (which countries and cities we serve). Viewed only by authorised staff in our internal admin tools; not used for advertising and not sent to analytics or error-tracking providers | Legitimate interests (security, fraud prevention, understanding our audience); contractual obligations to our licensors. You can object — see section 5 |
| Comply with law and respond to lawful requests | Legal obligation |
Where we rely on consent, you can withdraw it at any time in settings or by contacting us; this does not affect prior processing. We do not make decisions with legal or similarly significant effects about you solely by automated means. Automated chat filters may block a message; you can contact us if you think a block was wrong.
3. Who we share information with
We share personal information only as described here. We do not sell or "share" (for cross-context behavioral advertising) personal information.
Service providers (processors) who act on our instructions and are contractually required to protect your information to the same standard as this policy:
- Google (Firebase / Google Cloud) — authentication, database, file storage, push notifications (Firebase Cloud Messaging), and app integrity/bot protection (Firebase App Check with reCAPTCHA Enterprise, which processes device and interaction signals). See policies.google.com/privacy.
- Cloudflare — content delivery, API hosting, security and rate limiting (processes IP addresses and request data), and storage of the IP address and approximate-location records described in section 1.2.
- Framer — hosting of our website.
- [VIDEO DELIVERY / CDN PROVIDER] — video streaming delivery (processes IP address and request data).
- [PAYMENT PROCESSOR] — web subscription payments and card storage.
- [EMAIL PROVIDER] — sending service and alert emails.
- Apple and Google — when you sign in with them or buy through the App Store or Google Play, they process your data under their own privacy policies.
Other people on the Service: your display name, avatar and messages are visible to others in chat rooms and watch parties you join; direct messages are visible to the recipient; in video calls, other participants see and hear what you share.
Casting devices: when you cast to a Chromecast, Google TV or AirPlay device, the title information and a temporary playback link are sent to that device.
Legal and safety: to comply with law, court orders or lawful requests; to protect the rights, property or safety of our users, the public or us; and to report child sexual abuse material to the relevant authorities.
Business transfers: to a successor if we are involved in a merger, acquisition or sale of assets, with notice to you.
4. How long we keep information
| Data | Retention |
|---|---|
| Account, profile, preferences, viewing history | Until you delete your account (history lists are capped and older items are replaced automatically) |
| Live chat messages and direct messages | Deleted automatically after 30 days |
| Reports and moderation logs | Deleted automatically after 90 days |
| Bans | For the duration of the ban; records of permanent bans for abuse may be kept to prevent re-registration |
| Free-preview usage records (session ID / IP) | Short-term; cleared automatically (hourly sweep after the cooldown ends) |
| Live viewer-count IDs | In memory only, about 1 minute |
| Support tickets and call notes | [24 months] after the ticket closes |
| Transactions, invoices, refunds | [7 years] or as required by tax and accounting law |
| Fraud-prevention records (e.g. hashed device/session identifiers, card fingerprint) | [24 months] |
| Security logs | [90 days] |
| Account activity log (sign-ins, sign-outs, profile/address/phone/password changes, subscription and billing events, device changes, titles you play and free previews used (with a rough duration band), "viewing history cleared" markers). We record which fields changed, never the new values; phone numbers are shown only as the last 2 digits. Used for account security, customer support and billing disputes, and visible only to authorized MALIMAR TV staff | Account and billing events 365 days; sign-in and playback events 90 days; deleted automatically by a daily cleanup |
| Staff action audit log (which staff member viewed or changed your account, and when) | Kept as a tamper-evident security record; not deleted automatically |
| IP address and approximate location (signed-in users) | 90 days after you were last seen; deleted automatically by a daily cleanup, and immediately when you delete your account |
| Visitor counts by country (signed-out visitors, no IP) | 90 days, then deleted automatically |
When you delete your account, we delete or anonymize your personal information within [30] days, except what we must keep for the reasons in the table above (billing records, fraud prevention, legal claims, or safety). Backups are overwritten on a rolling basis within [35] days.
5. Your rights and choices
Everyone: you can view and edit your account details, change your language and notification settings, unfollow series, turn off direct messages from people you don't know, block users, and delete your account at any time. Members can clear their viewing history (all of it, or one title at a time) from Account → Viewing history; this also clears Continue Watching and Recently Watched on all your devices.
EEA, UK and Switzerland (GDPR): you have the right to access, rectify, erase, restrict or object to processing, data portability, and to withdraw consent. You can complain to your local data protection authority.
Thailand (Personal Data Protection Act B.E. 2562 (2019) — PDPA): you have the right to be informed, to access and obtain a copy, data portability, to object, to erasure, to restrict use, to rectification, and to withdraw consent. You may complain to the Personal Data Protection Committee (PDPC). Our representative in Thailand is [THAILAND PDPA REPRESENTATIVE — name and contact].
California (CCPA/CPRA) and other US states with privacy laws: you have the right to know what personal information we collect, use and disclose; to access and delete it; to correct it; and not to be discriminated against for exercising your rights. We do not sell or share personal information for cross-context behavioral advertising and do not use sensitive personal information for purposes beyond those permitted by law, so there is nothing to opt out of. The categories we collect are: identifiers; customer records; commercial information (subscriptions and purchases); internet activity (viewing history and logs); approximate geolocation (city level, derived from IP address — not precise geolocation); audio/visual information (live calls, not recorded; profile photos); and inferences limited to content recommendations. You may use an authorized agent.
How to make a request: email [PRIVACY EMAIL] from the address on your account. We may need to verify your identity. We respond within the time required by law (generally 30 days under GDPR and PDPA, 45 days under the CCPA). If we decline, we'll explain why and how to appeal.
6. Deleting your account
- In the app or website: Account › Delete my account. Your request is reviewed by the MALIMAR TV team and approved requests are completed within 30 days. You can keep using your account, or cancel the request, while it is pending.
- Without the app: go to [ACCOUNT DELETION URL] or email [PRIVACY EMAIL] from your account email.
- Cancel store subscriptions first. Deleting your account does not cancel a subscription bought through Apple or Google; cancel it in the App Store or Google Play. A website (PayPal) subscription is cancelled when your deletion request is approved. There's no refund for the remaining time, except a payment you ask us to refund within 7 days of it (see the Terms).
Deletion removes your account and sign-in methods, profile and photo, preferences, viewing history, favorites and alerts. Chat and direct messages you sent are deleted within 30 days by automatic expiry. We keep limited records as described in section 4. Full details: [ACCOUNT DELETION URL].
7. Children
MALIMAR TV accounts are for people 18 and older. The Service is not directed to children under 13, and we do not knowingly collect their personal information. If we learn we have collected information from a child under 13 (or under the age requiring parental consent where you live, including under 20 for consent purposes in Thailand where applicable), we will delete it. Parents can contact [PRIVACY EMAIL].
8. Security
We use measures designed to protect your information, including encryption in transit (HTTPS/TLS), access controls that limit each user to their own data, short-lived signed playback links, bot and abuse protection, and restricting staff access to what they need, with an audit log of staff actions. No system is perfectly secure. If a breach affects your personal information, we will notify you and regulators as required by law (for example, within 72 hours to regulators where GDPR or the PDPA requires).
9. International transfers
We are based in [COUNTRY], and our providers process data in the United States and other countries. When we transfer personal information from the EEA, UK, Thailand or other regions with transfer rules, we use appropriate safeguards, such as the European Commission's Standard Contractual Clauses (and UK addendum), our providers' data processing terms, or other mechanisms permitted under PDPA sections 28–29. You may request a copy of the relevant safeguards.
10. Cookies and local storage
We do not use advertising or analytics cookies. We use your browser's local storage and similar technologies that are strictly necessary to run the Service, for example to:
- keep you signed in and remember your one active device session;
- remember the email address for an email sign-in link until you finish signing in;
- remember your profile, language and playback position;
- remember watch-party audio settings;
- remember a referral code from a friend's link for up to 30 days.
Our sign-in and bot-protection providers (Google Firebase, reCAPTCHA Enterprise) and casting SDKs may set their own cookies or storage necessary for security and functionality. You can clear site data in your browser, but some features will stop working.
11. Push notifications and emails
We send push notifications only if you allow them in your device or browser; the Service works fully without them. You can turn them off in your device settings or in your alert settings in the app. Service emails (receipts, renewal and price-change notices, security) are required for your account; new-episode and marketing emails can be turned off in settings or by using the unsubscribe link.
12. Tracking
We do not track you across other companies' apps or websites, and we do not use advertising identifiers.
13. Third-party links and services
Google Cast, AirPlay, Google and Apple sign-in, app stores and payment processors are operated by third parties under their own privacy policies.
14. Changes to this policy
We will post updates here and change the effective date. If changes are material, we will notify you by email or in the app before they take effect, and ask for consent where required.
15. Contact us / Data Protection Officer
[COMPANY LEGAL NAME]
[COMPANY ADDRESS]
Privacy and data requests: [PRIVACY EMAIL]
Data Protection Officer: [DPO NAME AND CONTACT]
EU/UK representative (if required): [EU/UK REPRESENTATIVE]
Thailand representative (if required): [THAILAND PDPA REPRESENTATIVE]
A Thai translation of this policy is available. If there is any conflict, the English version governs to the extent permitted by law.