What this service does
CLUB IPTV is a self-hosted media player, playlist manager and programme-guide backend. It stores enough information to recognize a device, deliver that device’s settings and playlists, and maintain the EPG catalogue selected by the service administrator.
It does not provide television subscriptions or claim ownership of playlist content. Playlist URLs and credentials may be sensitive; only add sources you trust.
Information the backend stores
- Device identity: generated UID/private ID, browser UUID, available wired or wireless MAC address, and device shortcut code.
- Device details: brand, model, platform/vendor information, app version, IP address and last-seen time.
- Preferences: encoded app settings, theme, language, parental-control state, custom restricted names and changed PIN data.
- Content: playlist text, stream and artwork URLs, groups, catch-up settings and favorites saved for that device.
- Pairing: temporary connection codes and the browser session used by the Playlist Editor.
- EPG: source URLs, channel identifiers, programme titles, descriptions, times and artwork imported by the administrator.
- Operational records: application and EPG-refresh logs used to diagnose failures.
Why this information is used
Data is processed to authenticate app requests, reconnect the correct device, synchronize settings and playlists, match channels with EPG, provide administrative maintenance, prevent misuse and troubleshoot errors. The default client configuration disables analytics event tracking.
Browser data
The website uses an encrypted Laravel session cookie for the Playlist Editor and administrative login. The browser version of the player stores a persistent private UUID locally so it remains the same device after normal browser updates. Clearing site storage may remove that identity or disconnect the editor session.
No advertising cookie or analytics cookie is required by the default deployment.
Third parties and content providers
The app contacts playlist, stream, logo and external EPG URLs configured by the user or administrator. Those servers receive normal request information such as IP address, user agent and referrer. The client may contact ip-api.com to estimate country, city and network provider during setup. That service applies its own privacy terms.
Playback normally occurs directly between the device and the media origin; this backend is not intended to proxy public video traffic.
How long data remains
Device and playlist records remain until the administrator deletes them. Pairing codes expire and are removed after use. Imported programme records older than seven days are cleaned up by the scheduled EPG task. Daily application logs are retained for up to thirty days under the default configuration.
Administrative access and playlist sessions should only be served over HTTPS in production. No system can guarantee absolute security; protect the admin password, server, database and backups.
Access, correction and deletion
You can edit or remove playlists through the connected Playlist Editor and disconnect its browser session at any time. Requests to inspect, correct or delete the remaining device record should be sent to the operator of the server where this instance is hosted.
If this deployment is offered publicly, its operator should add a business identity, jurisdiction, contact address and any additional disclosures required by applicable law before launch.
Policy updates
This page may be updated when storage, integrations or legal requirements change. The effective date at the top identifies the current version.