Effective Date: 27 April 2026
Last Updated: 27 April 2026
Madstream Sp. z o.o. (“MadStream,” “we,” “us,” or “our”) is a company incorporated under the laws of the Republic of Poland, with its registered office at Chodakowska 55/57 m. 22A, 03-816 Warsaw, Poland. MadStream owns, operates, and distributes general-entertainment streaming channels and Free Ad-Supported Television (FAST) applications across Connected TV (CTV) platforms worldwide.
This Privacy Policy applies to all applications and services published by MadStream on any CTV platform, including but not limited to Roku, Amazon Fire TV, Google TV (Android TV), Samsung Smart TV (Tizen), LG Smart TV (webOS), VIDAA, Vizio SmartCast, and any other platform on which our applications may be distributed (collectively, the “Services”).
MadStream is the data controller responsible for processing your personal data under applicable data protection legislation, including the EU General Data Protection Regulation (“GDPR”), the California Consumer Privacy Act and California Privacy Rights Act (“CCPA/CPRA”), the Virginia Consumer Data Protection Act (“VCDPA”), the Colorado Privacy Act (“CPA”), the Connecticut Data Privacy Act (“CTDPA”), the UK Data Protection Act 2018, Brazil’s Lei Geral de Proteção de Dados (“LGPD”), and all other applicable privacy and data protection laws.
By accessing or using any of our Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the practices described herein, please discontinue use of our Services immediately.
We collect the minimum information necessary to operate, improve, and monetize our Services. We do not require user accounts, login credentials, or registration to use our applications. The categories of data we collect are described below.
We do not collect: names, postal addresses, phone numbers, financial or payment information, biometric data, precise geolocation, health data, Social Security numbers, or any government-issued identifiers through our CTV applications.
We process personal data for the following purposes:
Where the GDPR or UK GDPR applies, we rely on one or more of the following legal bases:
We may share your data with the following categories of recipients, and only to the extent necessary for the stated purposes:
We do not sell personal data as defined under the CCPA/CPRA. We do not share personal data for cross-context behavioral advertising except where you have provided affirmative consent or where such sharing is performed through mechanisms that do not constitute a “sale” or “share” under applicable law.
Your personal data may be processed in countries other than the country in which you reside, including the United States and other jurisdictions where our partners and infrastructure providers operate. When transferring personal data outside the European Economic Area (EEA), Switzerland, or the United Kingdom, we implement the following safeguards:
If you are located in the EEA or the United Kingdom, you have the right to: access your personal data; request rectification of inaccurate data; request erasure (“right to be forgotten”); restrict processing; object to processing based on legitimate interests; receive your data in a portable format; withdraw consent at any time without affecting the lawfulness of prior processing; and lodge a complaint with your local supervisory authority (for Poland: Urząd Ochrony Danych Osobowych, UODO).
California residents have the right to: know what personal information is collected and how it is used; request deletion of personal information; opt out of the sale or sharing of personal information; limit the use of sensitive personal information; and not be discriminated against for exercising privacy rights. We do not use or disclose sensitive personal information for purposes other than those permitted under the CPRA.
Residents of Virginia, Colorado, Connecticut, and other states with applicable privacy legislation may have similar rights to access, correct, delete, and opt out of targeted advertising and profiling. We will honor all verifiable consumer requests in accordance with the requirements of each applicable jurisdiction.
Brazilian users may exercise rights including confirmation of processing, access, correction, anonymization, portability, deletion, and revocation of consent under the LGPD.
To exercise any of the above rights, please contact us at privacy@madstream.net. We will verify your identity before processing any request and will respond within the time frames required by applicable law (generally 30 days under the GDPR and 45 days under the CCPA/CPRA). You may also exercise certain rights directly through the privacy settings on your CTV device or through the in-app consent management interface.
You can manage your advertising preferences through several mechanisms:
When we detect a LAT flag or receive a valid opt-out signal, we will cease serving personalized advertisements and will not pass your advertising identifier to demand partners for interest-based targeting. You will continue to receive contextual (non-personalized) advertisements.
We retain personal data only as long as necessary for the purposes described in this Policy or as required by law. Our standard retention periods are:
Data Category | Retention Period |
Ad event logs (impressions, clicks, completions) | Up to 13 months |
Device and session logs | 6–12 months |
Aggregated analytics data | Up to 24 months (anonymized) |
Consent records and opt-out preferences | Duration of service relationship + 3 years |
User support correspondence | Up to 2 years after resolution |
Fraud and IVT investigation records | Up to 3 years |
After the applicable retention period, personal data is securely deleted or irreversibly anonymized.
We implement appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction, including:
Our Services are general-entertainment channels intended for a general audience. They are not directed at children under the age of 13 (or the applicable age of digital consent in your jurisdiction, such as 16 in certain EEA member states).
We do not knowingly collect personal data from children. We comply with the Children’s Online Privacy Protection Act (COPPA) in the United States, the Age Appropriate Design Code in the United Kingdom, and equivalent protections under the GDPR for minors.
Where required by platform policies, our applications transmit COPPA-compliant flags (e.g., coppa=1 in ad requests, childDirected tags in platform manifests) to ensure that no behavioral or interest-based advertising is served to child audiences. We do not engage in interest-based advertising targeting known child audiences under any circumstances.
If we learn that we have inadvertently collected personal data from a child, we will promptly delete such data. If you believe we may have collected data from a child, please contact us at privacy@madstream.net.
Our applications run on CTV platforms operated by third parties (Roku, Amazon, Google, Samsung, LG, and others). Each platform operator has its own privacy policy governing data it collects through its operating system, app store, and device services. We are not responsible for the privacy practices of these platform operators. We encourage you to review the privacy policies of the relevant platform.
Our Services may contain links to third-party websites or services (for example, advertiser landing pages). We are not responsible for the content, privacy practices, or security of any third-party site or service.
We may use automated processes to determine which advertisements to display based on contextual signals (content genre, time of day, geographic region) and, where consented, device-level interest signals. These processes do not produce legal effects or similarly significant effects on you. You have the right to object to such processing or to request human review as described in Section 7.
We recognize and honor Global Privacy Control (GPC) signals transmitted by your browser or device as valid opt-out requests for the sale or sharing of personal information under applicable state privacy laws. We also honor platform-specific Limited Ad Tracking (LAT) settings. At present, there is no uniform standard for Do Not Track (DNT) signals in the CTV environment; however, we respect equivalent opt-out mechanisms provided by each platform.
To the fullest extent permitted by applicable law, MadStream, its directors, officers, employees, agents, and affiliates shall not be liable for any indirect, incidental, special, consequential, or punitive damages, including without limitation loss of profits, data, goodwill, or other intangible losses, arising out of or relating to:
This limitation applies regardless of the legal theory under which damages are sought (contract, tort, strict liability, or otherwise), even if MadStream has been advised of the possibility of such damages. In jurisdictions that do not allow the exclusion or limitation of certain damages, our liability shall be limited to the greatest extent permitted by law.
By using our Services, you agree to indemnify, defend, and hold harmless MadStream, its parent companies, subsidiaries, affiliates, officers, directors, employees, agents, licensors, and service providers from and against any claims, liabilities, damages, losses, costs, expenses, or fees (including reasonable attorneys’ fees) arising out of or relating to your violation of this Privacy Policy, your misuse of the Services, or your violation of any applicable law or the rights of a third party.
This Privacy Policy and any dispute arising out of or in connection with it shall be governed by and construed in accordance with the laws of the Republic of Poland, without regard to its conflict-of-law provisions. Any disputes shall be submitted to the exclusive jurisdiction of the competent courts in Warsaw, Poland, except where mandatory consumer protection laws of your jurisdiction provide otherwise.
Nothing in this section limits your right to lodge a complaint with a data protection supervisory authority in the EEA member state of your habitual residence.
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or for other operational reasons. When we make material changes, we will update the “Last Updated” date at the top of this Policy and, where feasible, provide notice through the application interface or other reasonable means.
We encourage you to review this Privacy Policy periodically. Your continued use of our Services after any changes constitutes your acceptance of the revised Policy. If a change materially and adversely affects your rights, we will use commercially reasonable efforts to notify you in advance.
For any questions, concerns, or requests regarding this Privacy Policy or our data processing practices, please contact:
Madstream Sp. z o.o.
Data Protection Inquiries
Chodakowska 55/57 m. 22A
03-816 Warsaw, Poland
Email: privacy@madstream.net