Privacy
Z4IPTV is made by Z4. This page explains what the apps and this website keep, where, and for how long.
Last updated: 31 October 2026. Questions or deletion requests: admin@z4iptv.com.
On your device
- Your line details (server address, username, password or playlist link), your settings, favourites, watch history, resume points and programme reminders are stored on the device itself (on this website: in your browser's storage). Programme reminders never leave the device.
- This website (z4iptv.com) sets no cookies, shows no ads and loads no analytics or third-party scripts. Its pages come only from our server.
- While you watch, the app connects straight to your IPTV provider for channel lists, the TV guide and streams. Posters and logos are loaded through our server by default, and some movies are converted there; both are explained below.
On our server
Where your data is stored: the Netherlands (our server) and the United States (backup copies in Dropbox). All the data in the table below that we keep is stored on our own server in the Netherlands. Every night the whole server is backed up, and the two newest backups are kept, both on the server itself and in our Dropbox cloud storage (Dropbox stores them in the United States). These backups contain copies of everything in the table, including the web server logs and the link statistics, so whatever is deleted on the server, by itself or by hand, stays in the backups for about two more days (longer only if a nightly backup fails). What the apps and the Add via Web pages send to our server passes through Cloudflare's network on the way, and Cloudflare keeps copies of the resized posters and logos (see below).
| What | Why | Kept for |
|---|---|---|
| Device registry: a hashed device id, the platform, app version, language, time zone, your notification settings (such as quiet hours), your Z4Keys account number when you are signed in, and when the app first and last checked in. Recorded even while notifications are switched off. | To deliver in-app notifications and count active devices per app and version. | 180 days after the device was last seen |
| Notification statistics: totals of notifications delivered, shown and opened. | To see whether a message reached people. | Totals only, with nothing that identifies you |
| Playback statistics: anonymous daily totals such as how fast streams start and how often they fail, by platform, app version, device type and stream format. | To find and fix playback problems. | Daily totals; no address, channel, line, IP address or device id is ever stored with them |
| Z4Keys account (optional, only when you sign in with one): your name, e-mail address and password (the password only as a one-way hash), the lines saved in the account (server address, username and password), and the devices you signed in on (device name, platform and app version). On this website, when the player moves you to its compatible address (live.z4iptv.com), our server keeps a one-time copy of the chosen saved line and of the app's device identity, so that page can open it. | To sign you in, show your saved lines on your devices, and let you see and remove your signed-in devices. | Until you remove the line or the device, or delete the account. The one-time copy: until it is used, and it cannot be used after 5 minutes (it is then deleted at the next check) |
| Category report (Server Login lines): when the app loads your line's Live, Movies and Series categories, it sends your provider's server address, without your username or password, the names and numbers of those categories, and which app it is (for example LG). This happens once per line each time the app starts or you switch lines; with the app's cache on, an unchanged list is sent at most once a day. | So categories can be hidden in the apps (for example adult ones): by us for everyone on that provider, or by a Z4Keys customer for their own line. | Only the provider's server name, the category names and numbers, and when each was last reported are stored, not linked to you, your line or your device. They stay until we clear the list; they are not deleted automatically |
| Line check: when the app starts, when you switch lines and when you press Refresh, it sends your provider's server address and your line's username (for a playlist line: the whole playlist link, which usually contains the username and password). | So our server can send back the categories hidden for that line. | Not stored: used only to answer, and not written to our logs |
| Sound and subtitle helper: every time a movie or an episode starts, the app sends its stream address to our server. The address contains your line's username and password. Our server then reads the stream from your provider: it looks for subtitles stored inside the file and, when your TV or browser cannot play the sound or the file, converts it while you watch. Live channels are sent too when the TV cannot play them; in the web player on this website this can happen for every channel. Current app versions normally send the address inside the request, so our web server log does not record it. If that request fails (for example on a network error), the app tries once more with the address in the web address, and the web server log then records it, username and password included; the same can happen to the subtitle requests. Older app versions always sent it in the web address, so our web server logs from before 12 October 2026 contain such addresses. | TVs and browsers cannot play some sound formats and file types, or show subtitles stored inside a movie file. | The stream address, the subtitles and the converted copy are deleted within 4 hours of the last use; a copy caught by a nightly backup stays there about two days more. A stream address written to the web server logs stays as long as those logs (see "Web server logs" below) |
| Posters and logos (LG and Samsung TV apps, the web player on this website and the desktop app; on by default, the "Load posters through" switch in the app's Settings turns it off): the address of each poster, logo and picture the app shows goes to our server, which downloads the picture, makes it smaller for your screen and sends it back. | So pictures load faster and use less memory on TVs. | The downloaded picture: 1 hour. The smaller copy: in our cache until newer pictures push it out (the cache has a fixed size), up to 30 days at Cloudflare and 7 days on your device. The picture's address itself is kept only in the web server logs |
| Add via Web (optional): when you add a line on the page www.z4sh.com/iptv-add, our server stores what you type there: the line's server address, username and password, or the playlist link (which usually contains them) with a name, together with your TV's pairing code (the Device Code shown on the TV's Add via Web screen). The TV asks our server with that code and signs in. The Device Code is the only key to the stored line: anyone who has the code can fetch the line from our server, so do not share it. If the form shows an error, what you typed (password included) is also kept in your browser session on our server so the form can be filled in again; those session files are deleted once a day when they have not been used for 3 hours. | So you can add a line without typing it with the remote. | Until you ask us to delete it (see "Your choices" below). It is not deleted automatically, not even after the TV has signed in |
| Add via Web link: www.z4sh.com is our own link shortener, on the same server. When you open www.z4sh.com/iptv-add (typed, or through the QR code on the TV), it records the visit in its link statistics: your IP address, the country and city worked out from it, your browser, system and language, the page you came from, and the time. It then forwards you to the Add via Web form with your Device Code. It also sets its own session cookie. | To count the visits of our links. | Not deleted automatically |
| Problem reports you choose to send: the platform, app version, your line's server address and username (never its password), the app's device id, your Z4Keys account number when you are signed in, and short technical details. | To answer and fix your report. | Until the report is handled |
| Crash reports (Android apps, optional, only if switched on): technical details of the crash, with personal data and addresses removed. | To fix crashes. | 90 days |
| Sync (optional, Z4Keys accounts only, off until it is switched on): favourites, resume points, watched marks and recent channels, stored as stream numbers, positions, titles and picture links, never stream addresses or passwords. | To carry them between your devices. | Until you delete them or your account; data not used for 400 days is deleted |
| Web server logs: IP address, time and the address requested, as on any website. The address requested includes the picture addresses of posters and logos, the Add via Web page's address with your TV's Device Code, and in the cases explained under "Sound and subtitle helper" a stream address with your line's username and password. | Security and troubleshooting. | Rotated by size, not by date: today the oldest entries are about 15 months old |
Other services
- Movie trailers, when you open one, play from YouTube.
- The Apple apps check Apple's public App Store lookup at most once a day for a newer version. No identifier is sent.
- Push notifications on Android are delivered through OneSignal and Google, only on app versions that support them.
- The Add via Web form (where www.z4sh.com/iptv-add takes you) loads its font from Google Fonts, so Google sees your IP address when you open it, and it uses a session cookie for its form.
- The nightly backups of our server are stored in Dropbox (see "Where your data is stored" above).
Your choices
- Signing out or removing a line deletes its details from that device.
- Notification, sync, crash-report and poster ("Load posters through") switches are in the app's Settings where your provider allows them.
- "Delete my account" (in the app under Settings, About, or on this page) asks us to remove your Z4Keys account with its devices and synced data. The same page can also ask us only to clear the data collected about you. We complete every request within 7 days.
- Lines added with Add via Web stay on our server until you ask us to delete them. Write to admin@z4iptv.com with the Device Code shown on your TV's Add via Web screen; for a Server Login line (on the form: server, user and password) you can also send the line's username on the delete page. We delete them by hand within 7 days.
- To have device records, Add via Web link visits or reports deleted, write to admin@z4iptv.com.
- The category report and the playback and notification statistics are not linked to you, so there is nothing in them to delete for one person. The sound and subtitle helper and the poster cache delete their own copies by themselves (see the table); what reached the web server logs stays until those logs are rotated.
- Whatever is deleted on our server, by itself or by hand, stays in the nightly backups (on the server and in Dropbox) for about two more days, until newer backups replace them.