Security & Privacy
Your data is yours.
No content hosting, no behavioral tracking, no reselling channels. Here is exactly what we store and how we protect it.
End-to-end encrypted sync
Your playlist credentials are encrypted before leaving your device. We store only ciphertext — we cannot read your provider username or password.
No content hosting
zabb is a player and sync layer. We never proxy, cache, or re-stream your IPTV content. Your streams go directly from your provider to your device.
Bring your own content
You provide your own M3U/Xtream subscription. We have no relationship with your provider, and we take no commission on content. We explicitly prohibit use for piracy in our Acceptable Use Policy.
Delete anytime
You can delete your account and all associated data from Settings → Account → Delete account. Deletion is immediate and permanent.
What we store
- Your email address (account identity)
- Encrypted playlist credentials (M3U URLs, Xtream usernames/passwords)
- Favorites, watch history, and EPG preferences
- Device identifiers (to enable sync and pairing)
- Subscription and billing status (not card details — handled by Stripe)
What we never store
- ✕Channel streams or content — we never proxy or cache video
- ✕Unencrypted provider credentials in our database
- ✕Persistent IP address logs beyond rate-limiting windows
- ✕Behavioral advertising profiles
Security questions?
Found a vulnerability? Have a question about data handling? Email security@zabb.app.