Privacy Policy

In short

Your provider links, username and password, playlists, profiles, My List, watch history and downloads stay on your device. They never reach Route servers, and we never relay your streams.

The data we process is limited to what your Route account needs: your email address, sign-in and session records, and technical details needed for security.

Controller

The controller is Astalyne Studios. The operator's full name, address and contact details are in the Imprint.

For any privacy request, write to our privacy address. We have not appointed a data protection officer, as none is legally required.

Your Route account

Data: email address, a normalised copy of it for matching, language preference.

Purpose and legal basis: creating your account and performing our contract with you (GDPR Art. 6(1)(b); KVKK Art. 5(2)(c)).

Retention: until you delete your account.

Sign-in links and sessions

Data: hashed sign-in and session keys, device name, platform, installation ID, timestamps; for security, IP address and browser or app details.

Purpose and legal basis: signing you in (GDPR Art. 6(1)(b); KVKK Art. 5(2)(c)) and protecting your account from misuse (legitimate interest, GDPR Art. 6(1)(f); KVKK Art. 5(2)(f)).

Retention: sign-in requests 7 days; sessions unused for 30 days expire and their records are deleted 30 days later.

Sign-in emails

We send sign-in links through Amazon Simple Email Service (AWS, Frankfurt data centre). This processes your email address and delivery details (GDPR Art. 6(1)(b); KVKK Art. 5(2)(c)).

This website

routeiptv.com uses no cookies, analytics or third-party tracking and stores nothing on your device.

The site is hosted on TransIP servers (Netherlands) and delivered through Cloudflare. In the process your IP address and request details are processed briefly to keep the site secure and available (legitimate interest, GDPR Art. 6(1)(f); KVKK Art. 5(2)(f)).

Support emails

When you email us, we process your email address and message to solve your request (GDPR Art. 6(1)(b) or (f); KVKK Art. 5(2)(c) or (f)). Our email runs on Zoho Mail (EU data centres). We keep the conversation for up to 2 years after your request is closed.

Store purchases

Apple and Google sell subscriptions under their own responsibility and process the payment; we never see card details. We only receive subscription and transaction references so we can unlock your plan in the app (GDPR Art. 6(1)(b); KVKK Art. 5(2)(c)).

Ads

Before ads start in the free plan, we will update this section, name the ad partner and ask for your explicit consent in the app for personalised ads (GDPR Art. 6(1)(a); KVKK explicit consent). You can withdraw consent at any time.

Service providers and international transfers

Providers that process data on our behalf: TransIP (hosting, Netherlands), Amazon Web Services (email delivery, Frankfurt), Cloudflare (site delivery and security), Zoho (support email). We have data processing agreements with all of them.

Where data may reach their US companies, the EU-US Data Privacy Framework or the EU Standard Contractual Clauses apply.

Your rights

You have the right to access, correct and delete your data, to restrict processing and to data portability. You can withdraw any consent at any time.

Right to object: you can object, on grounds relating to your situation, to processing based on legitimate interest.

You can complain to a data protection supervisory authority. The authority responsible for us is that of the German federal state where we are established.

Notice for users in Turkey (KVKK)

Under Turkish Law No. 6698 on the Protection of Personal Data, the controller is Astalyne Studios (see Imprint). Your data is collected electronically through the app and website for the purposes and on the legal bases above, and is only shared with the service providers listed.

Under Article 11 KVKK you can ask whether your data is processed and request information about it, learn the purpose and whether it is used accordingly, know the third parties it is transferred to, request correction or deletion and that recipients be told, object to an adverse result produced only by automated analysis, and claim compensation.

Send requests to our privacy address; we answer free of charge within 30 days. You may also complain to the Personal Data Protection Board.

Children

Route accounts are for people aged 16 and over. We do not show personalised ads to anyone we know is under 16.

Deleting your account

To delete your account, email "delete my account" to our privacy address from the address on your account; deletion inside the app is being added.

Your account and session records are deleted within 30 days and we confirm when it is done. Records we must keep by law (if any) are kept only for that period.

Deleting your account does not cancel a store subscription; cancel it first in the App Store or Google Play subscription settings. Data on your device is removed when you sign out of or uninstall the app.

Changes

When we update this policy we change the date above and announce significant changes in the app or by email.