opencream TV

Privacy policy

Last updated: 1 November 2026

This policy covers two things: the website opencream.tv, and the opencream.tv app on your TV. The short version: the website counts visits without cookies unless you agree to more, and the app has no analytics at all.

Who is responsible

Opencream SASU, Bâtiment G, 15 avenue Marie-Amélie, 60500 Chantilly, France, RCS Compiègne 933 709 990, is the controller for the data processed on this website.
Contact for anything about your data: legal@opencream.ai
Opencream has not appointed a data protection officer.

The website

When you visit a page

Our server, which we run ourselves on hardware rented from Hetzner Online GmbH in Germany, receives what every web server receives: your IP address, the page you asked for, the date and time, and your browser’s user agent. We use these server logs only to deliver the site and to keep it secure.

  • Legal basis: our legitimate interest in running a secure website (Art. 6(1)(f) GDPR).
  • Kept for: at most 90 days, then deleted.

Fonts, images and scripts are served from our own server. One of those scripts is third-party code: PostHog’s analytics library, which we host ourselves. It sends the visit data described below to PostHog’s servers in the EU. No other third-party script runs on this site.

Analytics before you choose, or if you refuse

We use PostHog to count visits. Until you click “Accept” in the cookie banner, PostHog runs in a reduced mode:

  • no analytics cookies and nothing stored in your browser by PostHog (only the cookie that remembers a refusal, described below);
  • no profile of you, no identifier that follows you from one visit to the next;
  • only page visits are counted (which page, when it was opened and left, the referring site, browser and device type, and the approximate country derived from your IP address).

PostHog receives your IP address with each request, as any server does. We have set PostHog not to store it.

  • Legal basis: our legitimate interest in knowing how many people visit which pages (Art. 6(1)(f) GDPR).
  • Kept for: at most 25 months, then deleted.

Analytics if you click “Accept”

If you accept, PostHog also:

  • stores an identifier in a cookie and in your browser’s local storage, so that your later visits are linked to the same anonymous visitor;
  • records clicks automatically (which link or button, on which page).

There is no session recording on this site, with or without your consent.

We use this to see which parts of the page help people install the app and which confuse them.

  • Legal basis: your consent (Art. 6(1)(a) GDPR).
  • Kept for: at most 25 months, then deleted. The PostHog cookie expires after 12 months.
  • You can withdraw your consent at any time with the “Cookie settings” link at the bottom of every page. Withdrawing does not affect what was processed before.

Your choice in the banner itself is saved in a small cookie named cookie_consent, so we do not ask again on every page. It holds only “accepted” or “rejected” and expires after 12 months, when the banner asks you again.

Who receives the data

  • PostHog (PostHog Inc., United States) processes the analytics data on our behalf, under a data processing agreement. We use PostHog’s EU Cloud, hosted in Frankfurt, Germany. If PostHog staff or sub-processors access data from outside the EU, that access is covered by the safeguards in its data processing agreement.
  • Hetzner Online GmbH (Germany) provides the server hardware. It does not use the data for its own purposes.

We do not sell your data and we do not use it for advertising.

If you tip Matthias a coffee

The support page sends you to Stripe or PayPal to pay. They handle your payment details under their own privacy policies; we never see your card number. We receive your name, email address, the amount and the date, and keep them for 10 years because French accounting law requires it (article L123-22 of the Commercial Code). Legal basis: carrying out the payment you asked for and our legal obligation (Art. 6(1)(b) and (c) GDPR).

The site links to GitHub, Stripe, PayPal and Apps2Samsung. When you follow a link, that site’s own privacy policy applies. If you open an issue on GitHub, it is public and handled under GitHub’s terms.

When you email us

If you write to us, we use your email address and message to answer you, and delete them 3 years after the conversation ends. Legal basis: our legitimate interest in answering you (Art. 6(1)(f) GDPR).

The app on your TV

The app has no analytics, no account and no tracking. Opencream receives no data from it. The app talks only to these services:

  • Your IPTV service. Your login is stored on the TV. It is sent only to the server you entered, to play what you subscribe to.
  • Open-Meteo, for the weather. During setup, the town name you type is sent to Open-Meteo to find it. After that, the app sends that town’s coordinates to get the forecast. Like any web request, Open-Meteo also sees your TV’s IP address. Nothing else is sent.
  • ip-api.com, only if you press “Use my internet location”. Your TV’s IP address is then sent to ip-api.com to estimate your town. This request is not encrypted (plain HTTP). If you do not press the button, ip-api.com is never contacted.

Where your IPTV login is kept depends on how you installed the app:

  • Typed on the TV: only on the TV.
  • Installed with Apps2Samsung: also in Apps2Samsung’s settings on your computer, so it can fill in the form on updates.
  • Installed with a coding agent (such as Claude Code or Codex): also in the file local/config.local.js on your computer, and it passes through the AI provider you use with that agent. If you prefer, skip this step and type the login on the TV instead.

Your rights

You can ask us for access to your data, its correction or deletion, a restriction of its use, or a copy in a portable format. You can object to processing based on our legitimate interest. Write to legal@opencream.ai. We answer within one month.

Because the default analytics keep no identifier, we usually cannot find which records belong to you. If you accepted cookies, you can reset everything by clearing this site’s cookies and local storage in your browser.

If you think we handle your data unlawfully, you can complain to the CNIL, the French data protection authority: cnil.fr/fr/plaintes.

No decision about you is made automatically.

Changes

If we change how we handle data, we update this page and the date at the top. If a change needs your consent, the banner asks you again.