Privacy policy
Last updated 9 September 2026
tvplayer.cc is a media player you install on your television. It has no accounts and no servers of ours behind it, so most of what follows is about this website rather than about the app.
Who is responsible
Gracias a la Playa, S.L. operates tvplayer.cc and is the controller for the personal data described on this page.
For anything to do with this policy or with your data, write to hola@graciasalaplaya.es or use the contact form on this site.
The app collects nothing
The Android TV app has no account, no login and no cloud component. It does not send your playlists, your viewing, your device identifiers or anything else to us, because there is no server of ours for it to send them to.
Your playlists, favourites, settings and downloaded programme guide live in the app's own storage on the television, and are gone when you uninstall it.
When you play a channel, the app connects to whatever address your playlist contains. That connection runs between your device and your provider; we are not part of it and cannot see it. The same is true of any XMLTV guide source you configure.
- If you installed from Google Play, Google reports crash traces and anonymous usage statistics for the app. That is Google's collection under Google's terms, and we only ever see aggregate figures.
- If you connect Trakt, the app talks to Trakt directly with a token kept on the television. What is shared is governed by Trakt's own privacy policy, and disconnecting in the app's settings ends it.
This website
The site is a set of static pages. There is nothing to register for and nothing to log in to.
Our web server keeps ordinary access logs: the requesting IP address, the page asked for, the time, the referring page and the browser's user agent string. We use them to run the site and to investigate faults and abuse, and we do not combine them with anything else.
Measurement and advertising
We load Google Tag Manager and, through it, Google Analytics and — while a campaign is running — conversion tags from Google Ads and from Meta. They tell us how many people reach the site, which pages get read and which downloads get started.
This runs under Google Consent Mode. Before you choose, analytics storage, advertising storage, advertising personalisation and ad user data are all set to denied, and the tags fall back to sending nothing that identifies you. Accepting switches them to granted; rejecting leaves them denied for good.
Google Tag Manager itself is fetched from Google's servers either way, which means Google sees your IP address as it would for any file you download from it. No analytics or advertising data is sent unless you accept.
For measurement, Google acts as our processor. For advertising, Google and Meta also act as controllers in their own right over what they receive. Their policies apply alongside this one: policies.google.com/privacy and facebook.com/privacy/policy.
The contact form
If you write to us through the form on this site, we receive the name, email address and message you type, and we use them to answer you. They are not used for marketing and are not passed on.
The message arrives in our mailbox and stays there while the conversation is still useful, then is deleted.
Legal basis
- Serving the pages and keeping server logs: our legitimate interest in operating and securing the site, Article 6(1)(f) GDPR.
- Measurement and advertising cookies, and the data they generate: your consent, Article 6(1)(a) GDPR together with the national law implementing Article 5(3) of the ePrivacy Directive.
- Answering a message you send us: our legitimate interest in replying to you, Article 6(1)(f) GDPR.
Changing your mind
Use the button below, or the cookie settings link in the footer of every page. Withdrawing is no harder than giving, and costs you nothing on the site.
Rejecting after having accepted stops any further collection. It does not retroactively delete what Google or Meta already hold — for that, ask them directly. You can also block or delete cookies in your browser, and Google publishes an opt-out add-on for Analytics.
Where the data goes
The site is hosted in the European Union. Google and Meta are US companies and may process data outside the EEA; both rely on the European Commission's standard contractual clauses and on the EU–US Data Privacy Framework. If you reject, nothing beyond the request for the tag file itself reaches them.
How long things are kept
- Server access logs: rotated and deleted on a rolling basis; they are not kept as a long-term archive.
- Contact form messages: for as long as the exchange is live, and then deleted.
- Analytics and advertising data: for the retention period configured at Google and Meta, which is at most 14 months for Google Analytics event data.
Your rights
Under the GDPR you may ask us for a copy of the personal data we hold about you, to have it corrected or deleted, to restrict or object to how we use it, and to receive it in a portable form. Where we rely on consent you may withdraw it at any time, without affecting what was lawful before you did.
Write to hola@graciasalaplaya.es and we will answer within one month. If our answer does not satisfy you, you may complain to the supervisory authority where you live; in Spain that is the Agencia Española de Protección de Datos, at aepd.es.
Children
Neither the site nor the app is directed at children under 18, and we do not knowingly collect personal data from them. If you believe a child has sent us personal data, write to us and we will delete it.
Other sites
Links from here — to Google Play, to Trakt, to the download host — lead to services we do not run. Once you leave, their own privacy policies apply, and we have no control over what they do.
Changes to this policy
We update this page when what we do changes, and the date at the top says when that last happened. Anything material will be announced on the site before it takes effect.