Privacy policy

Last updated: October 30, 2026

1. Controller

The controller of personal data processed through UnwindTV (the LG TV app and www.unwindtv.com) is UnwindTV, Poland – contact: support@unwindtv.com. Write to this address about anything in this policy.

2. In short

We store only what is needed to run the licence and to keep your playlists in sync between the TV and your phone. We do not record what you watch, we show no ads and we use no analytics or tracking.

3. What we process, why, on what basis and for how long

Data	Purpose	Legal basis (GDPR)	Kept
Your TV: the LG device ID (stored only as a one-way hash), MAC address, TV model and software version, first and last contact, trial and licence dates	Recognise the TV, run the free trial and the licence, let you sign in on the website with MAC + PIN	Art. 6(1)(b) – the contract (our terms)	While the TV uses UnwindTV. Deleted 2 years after the last contact, unless the TV has a valid paid activation (then kept as long as the activation)
Trial record: MAC address and trial end date	Give each TV only one free trial	Art. 6(1)(f) – our legitimate interest in preventing abuse of the trial	3 years after the trial ended
Playlists you add: name, type, server address or URL, user name and password (encrypted with AES-256-GCM), which playlist is in use, hidden category names, and the category names and counts the TV reports	Show and edit your playlists on the phone and keep the TV and phone in sync	Art. 6(1)(b)	Until you delete them (on the TV, on the Manage page, or all at once with “Delete my playlists from the cloud”), or until the TV record is deleted
Sign-in data: access token of the TV (hashed), website session (cookie, hashed), QR pairing code (hashed), 6-digit PIN	Secure access to your TV's settings	Art. 6(1)(b) and (f) – security	Session 30 days, QR code and PIN 15 minutes
Search text you send from the phone to the TV	Run the search on the TV	Art. 6(1)(b)	Replaced by your next search; deleted with the TV record
IP address	Limit sign-in attempts and new registrations per address; deliver the website and protect it from attacks	Art. 6(1)(f) – security of the service	Rate-limit entries: at most 1 hour (deleted daily once expired). Our host Cloudflare processes IP addresses to deliver the service
Profiles of the TV app: name, picture and colour, kid profile yes/no, app language, and each profile's hidden categories	Keep your profiles when the app is reinstalled, and let you choose categories per profile on the phone	Art. 6(1)(b)	Until you delete the profile on the TV, use “Delete my playlists from the cloud”, or the TV record is deleted
Payment (when you buy)	Sell and confirm the activation	Art. 6(1)(b); 6(1)(c) – tax and accounting law	Stripe sells the activation as merchant of record and is a separate controller for the payment data (see Stripe's privacy policy); card details go only to Stripe. We receive which TV was activated and when, the amount, and the e-mail address and country you gave on the payment page; accounting records are kept as long as tax law requires (in Poland usually 5 years)

4. What stays only on your TV

Favourites, resume positions, Continue watching, Recently viewed, audio and subtitle choices and the app settings – also per profile – are stored only on the TV. We never receive them. Uninstalling the app removes them.

5. Who else receives data

Cloudflare, Inc. – hosting, database and network (our processor). Data may be processed outside the EEA, including in the USA; transfers are covered by the EU–US Data Privacy Framework and the European Commission's standard contractual clauses.
Stripe / Link – sells the activation as merchant of record and processes the payment (separate controller, see Stripe's privacy policy).
Your playlist provider – the TV connects directly to the provider you add; that provider's own privacy policy applies. We do not send your data to providers.
YouTube – only if you open a film trailer; it plays in the YouTube app or player under Google's terms.
LG Electronics distributes the app through the LG Content Store; LG's privacy policy applies to the store and the TV.
Authorities, only when the law requires it.

6. Cookies

The website sets one cookie, nps, only after you sign in to manage your TV. It is strictly necessary to keep you signed in, so no consent is needed. There are no advertising, analytics or third-party cookies. The payment page is run by Stripe on its own website (checkout.stripe.com) and uses Stripe's own cookies. The TV app uses the TV's local storage only for the data listed in section 4.

7. Your rights

You may ask for access to your data, a copy (portability), correction, deletion or restriction of processing, and you may object to processing based on our legitimate interest. Write to support@unwindtv.com and include your TV's MAC address so we can find the record; we answer within one month. You can delete your playlists yourself at any time on the Manage page. You also have the right to complain to the President of the Personal Data Protection Office (Prezes UODO), ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl, or to the authority of the EU country where you live.

8. Security

All connections use HTTPS. Playlist logins are encrypted; device IDs, tokens and session codes are stored only as hashes. Only the controller can access the database.

9. Other information

Giving the data in section 3 is needed to use the cloud features (licence, phone setup, sync); without them the app cannot be activated. We make no automated decisions with legal effect and no profiling (the viewer profiles in the app only separate everyone's lists and settings). The app and the website are meant for adults; a kid profile is set up by a parent or guardian for a child watching on the same TV, and the only data about it is the name, picture and settings the parent chooses. We will publish changes to this policy here with a new date.