Privacy Policy
How tescast (DMR LABS LTD) collects and uses personal data under UK GDPR and EU GDPR: purposes, legal bases, processors, transfers, retention and your rights.
This policy explains what personal data tescast collects, why we use it, who we share it with and what rights you have. It follows the UK General Data Protection Regulation (UK GDPR), the UK Data Protection Act 2018 and the EU General Data Protection Regulation (EU GDPR).
1. Who is responsible for your data
The controller of your personal data is DMR LABS LTD, a company registered in England and Wales under company number 16884775. Registered address: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom.
Contact for all privacy questions: support@tescast.app
2. The data we collect
Account. Your e-mail address and a one-way hash of your password. We do not store the password itself. If you sign in with Google, we receive your Google account ID and your e-mail address. We also store the language of your account and the country your connection came from when you created it (from Cloudflare's country header), so that we can see in which countries tescast is used and plan regional channels.
Car. The browser information (user agent) of the car you connect, and the time it was connected and last used.
YouTube account (only if you connect it). Your Google account ID and e-mail address, the channels you subscribe to and the videos you liked. We receive this from Google with read-only permission (the youtube.readonly scope). See section 4.
IPTV. The list address you add, or the Xtream server address, user name and password, and the channels in the list. We store these encrypted. We delete them when you remove the list.
Use of the service. The channels you watched recently, your YouTube search history, and the YouTube videos and channels you watched, liked and followed in tescast.
Payments. Your plan, payment status, amount, currency and billing period. Stripe processes your card details. We never see your card details.
Consent records. The version of each document you accepted, the time, your IP address and your browser information. This covers the Terms of Service, the offer e-mail consent, the checkout confirmations and upgrades.
Playback quality. While a stream plays in the car, the player reports once a minute which channel plays, at which quality (for example 720p) and how many times it stalled. We also store the IP address of the connection with each report. We also record when the page is hidden, closed or reopened during playback, and when the connection drops. If a stream stalls, we also record how long it lasted and its technical cause. If a stream fails, we record the error reason. We use this to find playback problems and keep it for 30 days. We do not record location or speed.
Visits and campaign sources. When you open pages on our website, we record which page you opened, the name of the site that sent you (for example instagram.com or google.com, not the full address) and the campaign tags in the link (utm tags and our own "k" tag). If you accept all cookies in the cookie banner, we use the tc_vid cookie to connect these records to the same browser. If you create an account, this browser number and the first source you came from are saved to your account. If you choose "Necessary only" or make no choice, we do not link your page views to each other or to you in any way: each page view is stored with a random number of its own, so it only adds to our totals. Your account then gets a source only if the link you came with carried our campaign code ("k"). We do not store your IP address for this purpose.
Visitor counting with your consent. If you accept all cookies, we also count unique visitors per day with a pseudonymous daily ID derived from your IP address and browser information. The ID changes every day, needs no cookie and is not stored with your IP address, but it is not anonymous. We use it to count visitors per day and per country, and to link a click on a campaign link to a sign-up on the same day. Without your consent we do not create this ID; we count each page view or link click once, with a random number.
Feedback. If you answer the question "why didn't you buy?" after the free trial, we store your answer and your note with your account.
E-mail records. The type, subject and send time of the e-mails we send you. We also record if you opened an e-mail and if you clicked a link in it. We measure opens with a small invisible image in the e-mail, and clicks with links that pass through tescast.app. We use this only to see which e-mails work. Password reset e-mails are not measured. If your e-mail app blocks images, opens are not recorded. You can leave our campaign e-mails with the link in every one of them.
Invites. Accounts with a paid plan can invite friends with a personal link (tescast.app/r/…). If you create an account with such a link, we store which account invited you. To give the inviter the promised reward, we check the date of your first payment and whether it was refunded or disputed. To stop people from inviting themselves, we compare the browser (tc_vid) and IP address of the new account with the inviter's browsers and the IP addresses the inviter used in the last 30 days. The inviter sees only how many friends joined and paid, not your e-mail address. If you ask for a cash payment of your invite balance, we store the payment details you give us (encrypted) to make that payment.
Security logs. Your IP address and request logs, for a short time, to keep the service secure and to stop abuse.
3. Why we use your data and our legal basis
| Purpose | Legal basis |
|---|---|
| Create your account, connect your car, provide the service, manage payments and your plan, show recommendations and your "continue watching" list | Performance of our contract with you |
| Keep payment, tax and consumer law records | Legal obligation |
| Keep consent records and use them as evidence in disputes and chargebacks | Legitimate interests (to establish, exercise or defend legal claims) |
| Security, abuse prevention, detection of account sharing, counting page views and campaign codes without identifiers | Legitimate interests (to keep the service secure and fair, and to understand which channels bring users) |
| The tc_vid analytics cookie (browser visit history and first source) and the pseudonymous daily visitor ID | Your consent (cookie banner) |
| Account country (regional demand) | Legitimate interests (to decide which countries' channels to add) |
| Find and fix playback problems | Legitimate interests (to keep the service working well) |
| Offer and discount e-mails | Your consent |
| Measuring e-mail opens and link clicks | Legitimate interests (to know which e-mails are useful and send fewer, better ones) |
| Give the invite reward and stop abuse of invites | Performance of our contract with the inviter (the invite terms), and legitimate interests (to keep the invite program fair) |
| Offers shown in the app (for example when your free trial ends) | Legitimate interests. These are not e-mails. |
Offer e-mails. We send offer and discount e-mails only if you gave your separate consent. The consent is optional. You can withdraw it at any time with the unsubscribe link in each offer e-mail or on your account page. If you give this consent, your free trial is 10 minutes instead of 5. The free trial works without this consent.
Abuse prevention. We link the browsers you use to sign up, sign in, reset your password and connect your car to your account, through the tc_vid number. For these actions we set tc_vid as a necessary cookie, also without your consent to analytics cookies. If we close an account because it broke our Terms of Service, the browsers linked to that account cannot create a new account or start a free trial. We also look for signs of abuse, for example one account used in two places at the same time, many accounts from one IP address, or very long daily watch time. Security checks can automatically refuse a sign-up or a free trial from a browser linked to a closed account. Decisions to close an account are made by a person, who reviews the alerts first. We do not make decisions with legal or similar effects about you by automated means only.
Where we rely on legitimate interests, you can object (see section 9).
4. YouTube account data
- If you connect your YouTube account, we use your subscriptions and liked videos only to show you recommendations and lists in the YouTube section in your car.
- We do not share this data with anyone. We do not use it for advertising.
- We store the access key encrypted.
- You can disconnect at any time on your account page (tescast.app/en/account) or at https://myaccount.google.com/permissions. When you disconnect on your account page, we delete the access key, ask Google to revoke it, and delete at once the subscriptions and liked videos that came from your YouTube account. If you revoke access only at Google, write to support@tescast.app and we delete that data within 7 days. Likes and follows you made yourself in tescast stay.
- We do not send your YouTube data to any other service, including AI services.
- Google processes this data under the Google Privacy Policy (https://policies.google.com/privacy).
- tescast's use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.
5. Who we share your data with
We use these service providers. They process data for us under contracts.
- Stripe: card payments, invoicing and subscription management.
- Google: sign-in with Google (only if you use it) and the YouTube API.
- Hosting providers: our main server, which stores account data, is in Istanbul, Turkey. Parts of the service, for example the delivery of some streams, run on our servers in other countries.
- Cloudflare: all traffic to our website passes through the Cloudflare network. Cloudflare also sends our e-mails and stores our daily data backups (Cloudflare R2).
- Public authorities: only when the law requires it.
We do not sell your data. We do not share it for advertising.
6. International transfers
DMR LABS LTD is based in the United Kingdom. Your account data is stored on our server in Turkey. Stripe, Google and Cloudflare provide their services from infrastructure in several countries, including the United States.
Turkey and some of these countries do not have an adequacy decision from the UK or the EU.
- Stripe, Google and Cloudflare: their data processing terms include the EU Standard Contractual Clauses and the UK transfer addendum, and they are certified under the EU-US Data Privacy Framework and the UK-US data bridge where it applies.
- Our hosting provider in Turkey: we are putting the EU Standard Contractual Clauses and the UK International Data Transfer Addendum in place with this provider.
You can ask us for a copy of the safeguards at support@tescast.app.
7. How long we keep your data
| Data | How long |
|---|---|
| Account, car, use, IPTV and YouTube data | While your account is open. If you ask us to delete your account, we delete it within 30 days. |
| IPTV list and YouTube connection | Until you remove them, or until your account is deleted |
| Payment records | As long as tax and accounting law requires |
| Consent records | At least 3 years. If you withdraw your offer e-mail consent, we keep that record for 1 year after you withdraw. |
| Playback quality reports (with IP address) | 30 days |
| Page and connection events during playback | 30 days |
| Visit and campaign source records, visitor counts per country | 400 days (deleted in regular clean-ups) |
| Counting events (page views, link clicks, sign-up steps) | 365 days |
| E-mail send records (type, subject, time, opened, clicked) | While your account is open |
| Invite records (who invited whom, payment date, reward, balance and payment requests) | While both accounts are open |
| Browsers linked to your account (abuse prevention) | While your account is open |
| Account country | While your account is open |
| Security logs | A short time |
8. Cookies and local storage
When you first open our website, a cookie banner asks for your choice. "Accept all" allows the analytics cookie. "Necessary only" allows only the necessary cookies. Both choices are equally easy, and the website works with either choice. If you make no choice, we use only the necessary cookies. You can change your choice at any time with the "Cookie settings" link at the bottom of every page. The car app does not show the banner and sets no analytics cookie.
We do not use advertising cookies or third-party tracking cookies.
Necessary cookies. These do not need your consent, because the service cannot work or stay secure without them.
| Cookie | Purpose | Duration |
|---|---|---|
| tescast_sid | Keeps you signed in. Contains only a random session number. | 30 days on your phone or computer, 1 year in your car. It is renewed while you use tescast. |
| tescast_demo | Records that a free trial was used in this browser, so that it is not repeated. | 1 year |
| tc_lang | Remembers your language choice. | 1 year |
| tc_consent | Remembers your cookie choice ("all" or "necessary"). | 12 months |
| tc_ref | Set when you open an invite link. Holds only the invite code, so that we can give the inviter the reward if you create an account. | 7 days |
| tc_vid (security) | Set when you sign up, sign in, reset your password or connect your car. Contains only a random number. We use it to prevent abuse: browsers of an account closed for breaking our Terms cannot create a new account or start a free trial (see section 3). | 180 days |
Analytics cookie. Only with your consent ("Accept all").
| Cookie | Purpose | Duration |
|---|---|---|
| tc_vid (analytics) | First-party measurement cookie with the same random number. With your consent, the page views of your browser are linked with it, so that we can measure which sources bring sign-ups and plans. If you create an account, the number and your first source are saved to your account. We do not share it with third parties. | 180 days |
Without your consent, each page view is counted once with a random number of its own; nothing links your views (see section 2).
When you sign in with Google, Google uses its own sign-in cookies.
We also keep some preferences in your browser's local storage, for example the volume level and your recently watched channels.
E-mails. Our e-mails contain a small invisible image that records the open, and their links pass through tescast.app to count the click (see section 2). Password reset e-mails have neither.
You can also delete or block cookies in your browser settings. If you block tescast_sid, you cannot stay signed in.
9. Your rights
You have these rights under UK GDPR and EU GDPR:
- Access: ask for a copy of your personal data.
- Rectification: ask us to correct wrong or incomplete data.
- Erasure: ask us to delete your data.
- Restriction: ask us to limit how we use your data.
- Portability: ask for the data you gave us in a machine-readable format.
- Objection: object to the use of your data based on legitimate interests. You can always object to direct marketing.
- Withdraw consent: withdraw any consent at any time. This does not affect the use of your data before you withdrew it.
To use these rights, write to support@tescast.app from the e-mail address of your account. We reply free of charge within one month. We can ask you to confirm your identity.
Some rights have legal limits. For example, we must keep payment records for the period the law requires, even if you ask us to delete your account.
10. Complaints
If you are not happy with how we use your data, write to us first. You can also complain to a data protection authority:
- In the United Kingdom: the Information Commissioner's Office (ICO), https://ico.org.uk
- In the European Union: the data protection authority of the country where you live or work, or where the problem happened.
11. Children
tescast is not for people under 18. We do not knowingly collect data from children.
12. Changes to this policy
We can update this policy. If a change is important, we tell you by e-mail or in the app before it applies.
13. Contact
E-mail: support@tescast.app
DMR LABS LTD, 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom.