Privacy Policy

Effective Date: 01.01.2025

Last Updated: 29.04.2025

Madstream Sp. z o.o. (“MadStream”, “we”, “us”, or “our”) operates general entertainment channels available on Roku and Amazon Fire TV. We also offer advertising technology and related services for our own content and potentially for third-party clients.

This Privacy Policy outlines how we collect, use, and protect your information when you access our streaming applications or engage with ads served via our platform.

MadStream Sp. z o.o. is the data controller under applicable data protection laws, including the EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

1. Information We Collect

We collect the following categories of data:

a. Device and Technical Data

Device type, model, and manufacturer
Operating system and version
CTV platform (e.g., Roku, Fire TV)
Device identifiers (IDFA, GAID, Roku ID, Fire TV ID)
IP address and derived geolocation (city-level precision only)
Language, screen resolution, and system time zone

b. Usage and Engagement Data

Session timestamps and duration
Viewed content titles, durations, and frequency
User interactions such as search queries, channel navigation, pause/play actions
Crash logs and error diagnostics

c. Advertising and Interaction Data

Ad impressions, views, skips, completions
Ad clickthroughs, mute/unmute, fullscreen actions
Campaign metadata (e.g., advertiser, category)
Consent signals (e.g., TCF strings, opt-out preferences)

d. Optional Data You Provide

Email or contact form submissions (e.g., support or feedback)
Survey responses or contest entries (where applicable)

2. How We Collect Data

We collect data through the following methods:

Embedded SDKs from our internal systems and third-party vendors
HTTP requests and secure server-side logs
Consent management platforms (CMPs) for collecting permissions
Tracking pixels and tags embedded in ad creatives (web use)

3. Purposes of Data Processing

We use your information for the following purposes:

Operating and optimizing the CTV service
Personalizing ad content (where permitted by law or consent)
Ad measurement, attribution, and reporting
Fraud detection and security monitoring
Compliance with legal obligations and regulatory requirements
Improving product quality and user experience through analytics

4. Sharing and Disclosure

Your data may be shared with:

Ad Networks and Demand Partners: to deliver targeted or contextual ads
Analytics Providers: to monitor and report usage statistics
CTV Platform Providers: such as Roku and Amazon for platform compliance
Cloud and Hosting Providers: under data protection agreements
Legal or Government Authorities: when required by law or subpoena

5. Legal Bases for Processing

We rely on the following legal grounds:

Consent: for personalized ads and data transfers outside the EU/EEA
Legitimate Interests: to operate and analyze our services securely and effectively
Contractual Necessity: to deliver video content or fulfill agreements
Legal Obligation: when required to retain or share data

6. International Data Transfers

We may transfer your personal data to countries outside the European Economic Area (EEA), including the United States. Where required, we use:

Standard Contractual Clauses (SCCs) approved by the European Commission
Data Privacy Framework certification (EU-U.S., Swiss-U.S.) where applicable
Contractual safeguards with our subprocessors and demand partners

7. Your Rights

You have the right to:

Access your personal data
Request rectification or erasure
Restrict or object to certain processing activities
Withdraw consent at any time (e.g., for personalized ads)
Opt-out of targeted advertising (on-device or via CMP)
Lodge a complaint with your local data protection authority

To exercise your rights, email us at privacy@madstream.net.

8. Data Retention

We retain personal data as long as necessary to fulfill the purposes outlined above, unless a longer retention period is required by law. For example:

Ad event logs: retained for up to 13 months
Device logs: retained for 6–12 months
User support queries: retained for 2 years

9. Security Measures

We implement appropriate technical and organizational safeguards including:

Encrypted communications (HTTPS/TLS)
Access controls and authentication layers
Secure storage and regular penetration testing
Data minimization and anonymization techniques

10. Children’s Privacy

Our services are not directed at children under 13, and we do not knowingly collect data from them. We also honor COPPA and similar rules to avoid targeting minors with behavioral ads. Platforms may use COPPA-compliant tags to enforce age restrictions.

11. Changes to This Policy

We may update this policy to reflect changes in our practices or legal requirements. We will notify users via the app or website when significant updates are made. The “Last Updated” date above will always reflect the current version.

12. Contact Us

For any privacy-related inquiries:

Email: privacy@madstream.net

Postal Address:
Madstream Sp. z o.o.
Chodakowska 55/57 m. 22A
03-816 Warsaw, Poland