Privacy Policy

1. What We Collect

👤 Account Data (when you sign up)

• Username — chosen by you
• Email address — for account recovery and notifications
• Encrypted password — hashed with bcrypt, we never see plaintext
• Country & language preference — optional, helps localize

📋 Content You Create

• Hosted playlists — only what you choose to upload/host
• Tool sessions — saved work you opt to keep for later
• Settings & preferences — theme, notification choices

📊 Usage Data (anonymous)

• Tool usage logs — which tools you used (without content)
• IP address — for rate limiting and abuse prevention
• Browser type — for compatibility debugging

2. How We Use Your Data

We use collected data only for these purposes:

• 🔐 Authentication — keep your account secure
• 📧 Communication — password resets, account notifications, support replies
• 🛠️ Service delivery — running tools, hosting playlists, processing credits
• 📊 Improvement — anonymous aggregate stats to make tools better
• 🚫 Abuse prevention — detecting fraud, spam, or bot attacks
• ⚖️ Legal compliance — only when required by law (e.g. court order)

3. Data Sharing — We Don't, Mostly

We never sell, rent, or trade your personal data. The only times we share data:

• 🔧 Service providers — limited data with hosting (VPS), email delivery, and crypto payment processors. They're bound by strict confidentiality.
• ⚖️ Legal requirement — if compelled by valid court order or law enforcement (we'll notify you when legally allowed).
• 🛡️ Protect our service — to investigate fraud, security threats, or violations of our Terms.
• ✅ With your consent — anything else only with your explicit permission.

4. Cookies & Local Storage

We use a minimal set of cookies and browser storage:

We do NOT use:

• ❌ Google Analytics or any 3rd-party trackers
• ❌ Advertising cookies (currently)
• ❌ Cross-site tracking pixels
• ❌ Social media trackers

📖 See our full Cookie Policy for details.

5. Data Storage & Security

• 🔐 Encryption at rest — Hosted playlists encrypted with AES-256
• 🔒 Encryption in transit — All connections use HTTPS/TLS 1.3
• 🔑 Password hashing — bcrypt with strong salt (we can't see your password)
• 🌍 Server location — EU-based VPS, daily backups
• ⏰ Retention — Account data kept while account is active; deleted within 30 days of account deletion
• 📋 Tool logs — Anonymized after 90 days, fully deleted after 1 year

6. Your Rights (GDPR & CCPA)

You have complete control over your data. Request any of these by emailing [email protected]:

We respond to all requests within 30 days (usually within 48 hours).

7. Children's Privacy

M3U Edit is not intended for users under 16 years old. We do not knowingly collect data from children. If you believe a child has provided us with personal data, please contact us at [email protected] and we'll delete it immediately.

8. Changes to This Policy

We may update this policy as our service evolves. When we do:

• 📅 We'll update the "Last updated" date at the top
• 📧 For material changes, we'll email registered users
• 🔔 A banner will appear on the site for 30 days highlighting the change

9. Contact Our Privacy Team