📌 TL;DR — In Plain English
M3U Edit is built privacy-first. Most of our tools run entirely in your browser — your playlists never even reach our servers. When you choose to host a playlist with us, it's encrypted at rest and only accessible to you.
- � We don't sell your data — to anyone, ever.
- � We don't read your hosted playlists.
- � We don't track you across other websites.
- � You can delete everything with one click.
- � We're GDPR & CCPA compliant.
1. What We Collect
👤 Account Data (when you sign up)
- Username — chosen by you
- Email address — for account recovery and notifications
- Encrypted password — hashed with bcrypt, we never see plaintext
- Country & language preference — optional, helps localize
📋 Content You Create
- Hosted playlists — only what you choose to upload/host
- Tool sessions — saved work you opt to keep for later
- Settings & preferences — theme, notification choices
📊 Usage Data (anonymous)
- Tool usage logs — which tools you used (without content)
- IP address — for rate limiting and abuse prevention
- Browser type — for compatibility debugging
- The contents of files you process in client-side tools
- Personal info from URLs you validate
- Payment details (handled by crypto processor — we get only confirmation)
- Cross-site behavior, social media, or third-party data
2. How We Use Your Data
We use collected data only for these purposes:
- 🔐 Authentication — keep your account secure
- 📧 Communication — password resets, account notifications, support replies
- 🛠️ Service delivery — running tools, hosting playlists, processing credits
- 📊 Improvement — anonymous aggregate stats to make tools better
- 🚫 Abuse prevention — detecting fraud, spam, or bot attacks
- ⚖️ Legal compliance — only when required by law (e.g. court order)
5. Data Storage & Security
- 🔐 Encryption at rest — Hosted playlists encrypted with AES-256
- 🔒 Encryption in transit — All connections use HTTPS/TLS 1.3
- 🔑 Password hashing — bcrypt with strong salt (we can't see your password)
- 🌍 Server location — EU-based VPS, daily backups
- ⏰ Retention — Account data kept while account is active; deleted within 30 days of account deletion
- 📋 Tool logs — Anonymized after 90 days, fully deleted after 1 year
6. Your Rights (GDPR & CCPA)
You have complete control over your data. Request any of these by emailing [email protected]:
We respond to all requests within 30 days (usually within 48 hours).
7. Children's Privacy
M3U Edit is not intended for users under 16 years old. We do not knowingly collect data from children. If you believe a child has provided us with personal data, please contact us at [email protected] and we'll delete it immediately.
8. Changes to This Policy
We may update this policy as our service evolves. When we do:
- � We'll update the "Last updated" date at the top
- 📧 For material changes, we'll email registered users
- 🔔 A banner will appear on the site for 30 days highlighting the change
9. Contact Our Privacy Team
Questions about your data, this policy, or our practices?
- 📧 Email: [email protected]
- 📨 Use our contact form (select "Security" or "General")
- 🕒 Response time: usually within 24 hours