Who we are
Orbit is run by its founder, a sole trader based in the United Kingdom who trades as Orbit and decides how your data is used (the "controller"). Orbit is being set up as a company; when it is, we'll name the company and its registered address here. For anything about your data, email privacy@orbit-iptv.com.
What stays on your TV
Orbit keeps these on the device it's installed on, and doesn't send them to us:
- Your providers' addresses and logins, and the addresses of the streams you play.
- Channel lists, films, series and the TV guide downloaded from your providers.
- Settings, your parental PIN (stored as a salted hash, not the PIN itself), your own channel lists, reminders and recordings.
- Profiles, favourites, watch history, Continue watching and recommendations, unless the TV is signed in to your Orbit account (see Your account).
When you set Orbit up from your phone, your phone talks to the TV directly over your home network; what you type there goes to the TV, not to us. A backup you make in Settings › Backup is a file on your phone. It includes your provider logins so it can restore them, so keep it safe.
What Orbit sends, and to whom
Your IPTV providers
Orbit connects directly to the services you add, to download your lists and play streams. Those services see your IP address and what you play, as with any player. What they do with your data is covered by their own terms.
TMDB
To show artwork, genres, cast, sequels and recommendations, Orbit looks up film and series titles on The Movie Database (TMDB): the titles you watch and the ones it suggests. It never sends your name, email, provider, logins or history. Like any web request, TMDB sees your TV's IP address.
Updates
Every few hours Orbit checks a small file on GitHub to see whether a new version is available, and downloads it from there if you choose to update. GitHub sees your IP address, as with any web request.
Your account
A TV that's signed in checks with our server when Orbit starts and every few hours, to see whether your plan is active, and sends its Orbit version. See Your account for what's kept.
Diagnostics
Crash and freeze reports are kept on the TV. They only leave it when you choose Send diagnostics, which puts a report on your phone for you to send to us; logins and server addresses are removed first.
Your account
For your Orbit account we keep your email address, your password (as a secure hash, never the password itself), your plan and its status and dates, and the TVs you've linked (the name and model they report, their Orbit version and when each last checked in), so you can sign in and we can provide what you've paid for. If you sign in with Google, we also get the name and profile picture link on your Google account (see Signing in with Google). So that each TV gets one free trial, we keep a one-way code made from each linked TV's device ID; the ID itself can't be read back from it. We also keep when you agreed to these terms, any offer or friend's link you signed up through, and whether you've earned referral rewards. The first time you're signed in on the website, we note which country you're connecting from (worked out by Cloudflare from your connection); we keep only the country, not your IP address or anything more precise. Together with the billing country Stripe gives us for paying customers, it lets us see which countries Orbit is used in.
While a TV is signed in, each profile's name and colour, what it has watched and how far (titles, episodes and positions), Continue watching, My List, thumbs up or down, favourite channels, and its viewing sessions (what and when, which Orbit works recommendations out from) are kept with your account, so every TV you sign in shows the same. Artwork links come along so other TVs can show them. Your providers' addresses, logins and stream addresses are never sent: each TV finds the titles in its own lists. Recommendations only choose what Orbit suggests to you; they're never used to make decisions about you.
Clearing a profile's history or deleting a profile in Orbit removes it from your account too; we keep only a short marker naming what was removed, so your other TVs remove it as well. Your account is stored in the UK (London) with our database provider, Supabase.
Payments are handled by Stripe, which takes your card details, the name on the card and your billing address (at least the country and postcode, to work out VAT) and sends receipts; we never see or store your full card details. We keep the link between your account and your Stripe customer record, your plan and its dates, and whether a checkout wasn't finished (so we can remind you once). Stripe also uses your payment details to prevent fraud and meet its own legal duties, as explained in Stripe's privacy policy. If you pay another way that checkout offers, such as Apple Pay, Google Pay, PayPal or a bank payment, that company also handles the payment under its own privacy policy, and Stripe gets the payment details from it instead of from a card.
Signing in with Google
If you choose Sign in with Google, Google asks you to let Orbit see your basic profile, and nothing else. From Google we receive only:
- your email address, and whether Google has confirmed it;
- the name on your Google account and a link to its profile picture;
- a Google account number that tells us it's the same person next time you sign in.
We use these only to create your Orbit account, sign you in, show you which account you're signed in to, and send the account emails described below. Orbit never asks for access to your Gmail, contacts, Drive, calendar, YouTube or any other Google data, and never gets your Google password. We don't sell this information, share it with anyone except the companies that run Orbit for us (listed under Who we share it with), use it for advertising, or use it to train AI models.
Orbit's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
This information is kept with your account until you delete it on your account page, which removes it straight away. You can also remove Orbit's access at any time in your Google account at myaccount.google.com/connections; you can then still sign in to Orbit with your email address.
Emails
We email you about your account: confirming your address, sign-in codes, password resets and payment receipts. While you get started, and now and then afterwards, we also send a few helpful emails: setup help if no TV is linked yet, when your trial starts and ends, a reminder if a checkout wasn't finished, a one-time discount after a trial, and news about friends you've invited. Every one of these has an unsubscribe link, and you can also ask us to stop at any time; unsubscribing doesn't stop account emails. We keep a note of which of these emails we've sent you, so you don't get the same one twice. Our emails are sent by Resend, which handles your email address for us.
This website
If you allow it, this site uses Google Analytics to count visits and see which pages people use and how they found the site. It only loads after you choose Accept on the cookie banner, sets Google's _ga cookies, and doesn't run on your account pages; page addresses are sent without any codes or details after them. Google processes this data on our behalf. You can change your choice at any time with Cookie settings at the bottom of every page. The site has no advertising, and fonts and the site's own scripts are served from this site.
To keep bots from misusing the sign-up and sign-in forms, those forms use Cloudflare Turnstile, which checks your browser (including your IP address) without setting advertising cookies. The site is hosted by Netlify, whose servers see your IP address and the pages you ask for, as with any website.
Your browser also keeps a few things for this site that aren't used for tracking: your cookie choice, your sign-in session so you stay signed in, an offer or friend's code you arrived with until you sign up, a note that this browser has already told us your country, and, while you're setting up a TV from your phone, that TV's address on your home network.
Why we use your data, and on what basis
Data protection law asks us to say which legal reason we rely on for each use:
- To provide Orbit and your account (signing in, linking TVs, syncing profiles, plans and payments, account emails): because it's needed for our contract with you.
- To keep Orbit safe and fair (one trial per TV, stopping bots and fake accounts, preventing misuse of trials, offers and referrals, and a record of changes we make to accounts): our legitimate interest in protecting the service and our users.
- Seeing which countries Orbit is used in (the country you first signed in from, and your billing country if you pay): our legitimate interest in understanding where our users are, so we can decide which languages, prices and payment methods to offer.
- Helpful emails and offers to people who've signed up: our legitimate interest in telling you about Orbit, which you can stop at any time with the unsubscribe link.
- Google Analytics: your consent, which you can withdraw at any time in Cookie settings.
- Payment and tax records: our legal obligations, such as keeping VAT records.
Who we share it with
We never sell your data or share it for advertising. We use these companies to run Orbit, and they only use your data to provide their service to us (except where noted):
- Supabase: our database, accounts and server (data stored in London).
- Stripe: payments, receipts and tax (also uses data for its own fraud prevention and legal duties).
- Apple, Google, PayPal or your bank, only if you choose to pay that way at checkout: the payment itself, under their own privacy policies.
- Resend: sending and receiving our emails.
- Netlify: hosting this website.
- Cloudflare: Turnstile bot checks on the sign-up and sign-in forms.
- Google: Google Analytics, if you accept it, and Google sign-in, if you use it.
Your TV also talks directly to your providers, TMDB and GitHub, as described in What Orbit sends. We may also share data if the law requires it, or to protect our rights or someone's safety.
Some of these companies are based in the United States or keep data there. When your data leaves the UK or EEA, it's protected by the UK–US data bridge or the EU–US Data Privacy Framework where the company is certified, or otherwise by the standard data protection contracts approved by the UK and the EU.
How long we keep it
- Your account, linked TVs and everything synced with them: until you delete your account, or until you remove them sooner (unlinking a TV, deleting a profile, clearing history).
- Payment and VAT records: 6 years, as tax law requires. Stripe keeps its own records for as long as the law requires it to.
- Our record of changes we've made to an account (for example free time we've given), with the email address it was for: up to 6 years, so we can deal with any questions or disputes.
- The one-way code made from a TV's device ID: for as long as Orbit offers free trials, without any link to you once your account is deleted. It's what stops a TV from getting a second trial.
- Security logs at our providers, such as sign-in attempts and IP addresses: for a short time, normally days or weeks.
- Google Analytics data: up to 14 months.
Deleting your account on your account page cancels any subscription and removes your account and everything kept with it straight away, apart from the records listed above that we must or need to keep.
Your rights
Under UK and EU data protection law you can ask us for a copy of the data we hold about you, ask us to correct it or delete it, to limit how we use it, or to give it to you in a form you can take elsewhere, and you can object to our use of it based on our legitimate interests, including any marketing. Where we rely on your consent, you can withdraw it at any time. Email privacy@orbit-iptv.com from the address on your account; we'll answer within one month.
If you're unhappy with how we've handled your data, please tell us first. You can also complain to your data protection authority: in the UK, the Information Commissioner's Office; in the EU, the authority where you live.
Data on your TV is yours to delete: uninstalling Orbit or clearing its data removes it. You can delete your account, and everything kept with it, on your account page.
Children
Orbit accounts are for adults: you need to be 18 or over to create one. Children can watch on a profile in your household, and Orbit's parental PIN lets you control what they see. We don't knowingly collect data from children; if you think a child has created an account, tell us and we'll delete it.
Changes
If this policy changes, we'll update this page and the date below. If a change matters, we'll also tell you by email or in Orbit before it applies.
Last updated: 27 October 2026.