This is a draft based on the site’s current features. The operator’s legal identity and jurisdiction still need to be confirmed before these documents are treated as final policies.
Who this notice covers
This notice describes the iStreams website, its browser-installed app and the streaming library operated through this site. The operator details and contact route appear below. This notice covers visitors, account holders and people who send support requests.
Information you provide
We store your account name, email address, password hash, approval status and profile names. You may upload a profile photo, choose a country when that setting is enabled, and create supervised kids profiles. We also store saved titles, ratings, playback positions and viewing records used for recommendations and most-watched lists.
If you enable two-factor authentication, we store an encrypted authenticator secret and protected recovery-code records. Passkey registration stores public-key credentials and technical verification records. The website does not receive your fingerprint, face scan or device passkey private key.
Contact requests include the name, reply email, subject, topic and message you submit. Please do not send passwords, authentication codes, payment details or unnecessary sensitive information.
Technical information and country detection
The server receives your IP address and ordinary browser/request information when you visit or stream. Server access logs and short-lived login-attempt records support delivery, security and troubleshooting. Contact abuse controls use a keyed hash of your IP address.
Where IP-country rules are enabled, the server looks up an approximate country using a local GeoIP database. This is not GPS tracking and can be inaccurate, particularly with VPNs or shared networks. The country lookup itself does not send your IP address to MaxMind. The administrator may connect MaxMind separately to download database updates.
Why we use this information
We use account and security data to sign you in, review access requests and protect the service. Profile and viewing data support saved lists, resume playback, age-rating filters and library discovery. Country information applies the operator’s content availability rules. Support messages let the administrator investigate issues and handle privacy or content-rights requests.
Cookies, browser storage and the installed app
A first-party session cookie supports sign-in and request security. Browser storage can remember appearance, playback preferences and resumable-upload state. Signing out, clearing site data or changing account settings can remove or reset some of these preferences.
The installed web app caches an explicit set of public branding and reconnect-page assets. Its service worker does not cache account/session responses, private catalogs, profile photos or videos. Streaming needs an internet connection. The current application does not include advertising analytics or cross-site advertising trackers.
Who can receive information
Authorized administrators can manage accounts, content, viewing-related records and support requests. Hosting and connected storage providers process traffic and stored information needed to run the service. Authorized technical operators may access server logs or backups.
External artwork, cast images or directly hosted media can cause your browser to contact their providers, which then receive ordinary network information. TMDB metadata lookup and MaxMind database downloads are optional administrator integrations. External links have their own privacy practices. Information may also be disclosed where applicable law requires it or where necessary to address abuse or a verified rights complaint.
Retention, backups and security
Account, profile and viewing records generally remain while the account and associated records remain in the library. Support requests remain in the private inbox until the administrator removes them. Administrator activity records store the administrator, action and time for 90 days; passwords, tokens, request bodies and IP addresses are excluded. Audience reports aggregate existing qualified viewing records. Server-log and backup retention are managed separately by the operator; a removed live record may remain in an earlier backup until that backup is retired.
HTTPS, access controls, password hashing and protections for security secrets help safeguard information. They cannot guarantee that every system or connection is free of risk. Do not share your sign-in credentials or recovery codes.
Your choices and requests
You can edit your name and profile photo, manage profiles, remove saved titles, and manage available account-security options. For access, correction, export, deletion or a retention question, use the Contact page and choose Privacy request. The administrator may need to verify your identity before acting.
The rights and response requirements that apply depend on your location and the operator’s applicable law. This notice does not limit those rights. You may also have a right to complain to your local data-protection authority.
Children and supervised profiles
Children should use a supervised profile on an adult-managed account. A kids profile applies catalog age-rating filters; it is not age verification or proof of parental consent. Adults should avoid adding a child’s full name or other unnecessary personal details to profile names or messages. A parent or guardian can contact the administrator about a child’s information.
Changes to this notice
We update this page when the service or its information practices change. Check the updated date. Material changes should be explained before new uses of personal information take effect where applicable law requires this.
Operator & contact
- Service
- iStreams · istreams.in
Use the Contact form to reach the site administrator.