1. Data Controller & Contact
The controller responsible for data processing on this website (alcatrazplayer.com) and within the desktop and TV applications is:
Alcatraz Player Project
Email: support@alcatrazplayer.de
2. Core Principle: Privacy by Design & Local Storage
The Alcatraz Player software has been engineered according to the principle of data minimization:
- IPTV Credentials & Playlists: Your server URLs, Xtream passwords, M3U playlist files, and channel favorites are stored exclusively on your own local device. At no point are these credentials transmitted to or stored on our servers without your explicit cloud-sync action.
- Zero Viewing Habit Tracking: We do not track, log, or analyze which television channels, movies, or series you watch.
3. Peer-to-Peer "Watch Together" Feature (WebRTC)
When you initiate the co-streaming feature (Watch Together), an end-to-end encrypted Peer-to-Peer connection (WebRTC) is established directly between your device and the computers of your invited friends:
- Direct Transmission: Video and audio streams flow directly between participating devices. No media streams are recorded, intercepted, or cached on our servers.
- Signaling Server: To initiate the P2P connection, devices temporarily exchange connection metadata (such as IP addresses and ports) via a signaling server. This data is discarded immediately after the peer handshake is established.
- Credential Protection: Only the already decoded video and audio frames are transmitted over the P2P connection. Your IPTV provider credentials or playlist URLs are never sent to viewers.
4. License Verification & Hardware Identification (HWID)
To safeguard the 7-day trial and the 19 € Lifetime PRO license against fraudulent abuse (such as repeated reinstall loops), the desktop software generates an anonymized, one-way Hardware Identification Hash (HWID) derived from non-reversible system characteristics (motherboard UUID).
The legal basis for this processing is Art. 6(1)(f) GDPR (legitimate interest in preventing software piracy and license fraud). This hash cannot be reversed to reveal your personal identity.
5. Secure Payment Processing via Stripe
To process payments for the Alcatraz PRO Lifetime License (19.00 EUR), we use the PCI-DSS certified payment service provider Stripe Payments Europe, Ltd. (1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland).
During checkout, your payment data (such as credit card numbers or billing details) is transmitted encrypted directly to Stripe. We do not store or have access to full credit card details on our servers at any time. For further information, please refer to Stripe's Privacy Policy: https://stripe.com/privacy.
6. Email Inquiries & Customer Support
When you send us an email at support@alcatrazplayer.de, your email address and the content of your message are stored for the purpose of processing your inquiry and addressing follow-up questions. We do not share this data with third parties without your consent. Legal basis: Art. 6(1)(b) GDPR.
7. Your Rights Under the GDPR
As a data subject, you have the right to exercise the following rights at any time regarding your personal data:
- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure / "Right to be forgotten" (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object to processing (Art. 21 GDPR)
To exercise any of these rights, simply contact us via email at: support@alcatrazplayer.de.