Rabbit IPTV is built the way a privacy-focused player should be: we store the minimum needed to sync your setup across devices, we encrypt the things that matter, and we never look at what you watch.
1. What we store
- Account data — email, hashed password (bcrypt), and the date you joined. Needed so you can sign in on a new TV or phone.
- Profiles — display name, avatar choice, optional PIN hash, and whether it's a Kids profile.
- Playlist connection — your Xtream host / username / password, M3U URL, or Stalker portal. Always encrypted with AES-256-GCM at rest; only decrypted in memory when one of your signed-in clients needs them.
- Watch state — a list of content IDs you've favorited plus resume positions (in seconds) per item per profile. This is what powers "continue watching" across your devices.
- Device registry — a short identifier per signed-in device so we can enforce your plan's device limit (3 on Pro, 6 on Ultra) and let you remotely sign out one.
- Billing metadata — subscription tier and renewal date, plus the anonymous App Store / Google Play purchase token we use to verify the subscription is still active. Payment details (card numbers, bank info, etc.) are held by Apple or Google under their own privacy policies; we never see or store them.
- Basic server logs — standard web access logs (IP, user agent, path) retained for 30 days for abuse and security, then deleted.
2. What we never store
- We do not log which channel, movie, or episode you played. "Continue watching" is computed from resume offsets you yourself ask to keep — we never build a history of what you watched.
- We do not proxy, re-transcode, or cache your provider's streams. When you hit Play, the stream goes directly from your provider to your device; our servers aren't in the loop.
- We do not sell, share, or rent any of your data to advertisers, analytics brokers, or "data partners". There is no third-party tracker on the player.
3. Third parties we do use
- TMDB — we fetch high-quality posters, backdrops, and metadata to enrich your provider's content. We cache results on our side so your device doesn't call TMDB directly.
- Apple App Store & Google Play — handle all paid Rabbit IPTV subscriptions as in-app purchases. They receive your payment details under their own privacy policies (Apple, Google); we only get a subscription receipt / purchase token and its active-until date. We do not run our own checkout.
- Postmark / SES — sends transactional email (sign-in, password reset, account notices). They never receive marketing data because we don't run a marketing list.
- Our hosting provider — we run on dedicated infrastructure in a European data center; they host the servers but can't read the application database.
4. Your rights
- Access. Email support@rabbit-iptv.com and we'll send you a JSON export of everything we have on your account.
- Deletion. Inside the app → Settings → Delete account. Everything — account, profiles, encrypted credentials, watch state, device list — is hard-deleted within 7 days.
- Correction. You can change email, profile names, and avatars directly in the app. For anything else, email us.
5. Security
Your provider credentials are encrypted with AES-256-GCM using keys that never leave our servers, rotated periodically. Passwords are hashed with bcrypt (cost 12). All connections to our cloud use TLS 1.3. Staff access to the database is logged and requires hardware security keys.
6. Children
Rabbit IPTV is not directed to children under 13. The Kids profile mode inside a parent account is intended to be managed by a parent. We do not knowingly collect personal data from children.
7. International transfers
Our primary servers are in Europe. If you use the Service from outside Europe your data will be transferred there; we rely on standard contractual clauses for those transfers where required.
8. Changes
Material changes to this policy will be announced in-app and
posted here at least 14 days before they take effect. You'll
always be able to find the current version at
rabbit-iptv.com/privacy.
9. Contact
Privacy questions or data requests: support@rabbit-iptv.com.