Privacy policy

Scope and controller

Last updated: 28 October 2026. This notice covers the CouchPotato Suite website, its administration and the app update and download services. It does not replace the separate privacy notices for CouchPotatoPlayer. The controller is:
BW-Tech GmbH
IT-Service für Systemintegration und Datensicherheit
Albert-Bassermann-Straße 31
68782 Brühl
Germany
Email: info@bw-tech.de
Telephone: +49 6202 95323 00

Privacy contact

Please send privacy enquiries to BW-Tech GmbH at the postal address above or by email to info@bw-tech.de.

Website operation and technical logs

BW-Tech operates and hosts the website itself using WordPress and Plesk on its own infrastructure. Delivering pages and files requires processing your IP address and technical request data. Access and error logs may contain the request time, requested URL, method, response status, data volume, referrer and browser/device information. We process these data to provide the website, investigate faults and prevent abuse. The legal basis is Article 6(1)(f) GDPR, our legitimate interest in reliable and secure operation. Website and update-service logs are retained for up to 90 days. Backups are retained for up to 90 days.

App updates and downloads

Android update checks send technical selection information such as platform, runtime version, update channel, Mobile/TV target and current update identifier. We use this information to select a compatible update. Already installed Windows and macOS apps may continue to request the previous desktop update addresses. New desktop downloads are currently unavailable. Feed and download requests transmit your IP address and ordinary HTTP request data. These endpoints do not ask for your IPTV provider credentials, playlists or viewing history. This processing serves delivery and protection of the update services under Article 6(1)(f) GDPR. Other app functions and voluntarily submitted diagnostics are described in the separate app privacy notices.

Cookies and browser storage

The public website uses no analytics, advertising cookies or embedded third-party tracking. Its privacy information panel does not enable optional tracking. Only after you select “Understood” do we store a versioned acknowledgement in your browser’s localStorage, expiring after 90 days. Closing the details or pressing Escape does not store an acknowledgement. This remembers your action and is not used to identify you across websites. You can reopen the privacy information or remove the acknowledgement by clearing this website’s browser storage. Polylang can use the first-party cookie pll_language to remember the language you select for up to 90 days; language versions are also available through their URLs. Storage strictly necessary to provide a function you expressly request is based on section 25(2)(2) TDDDG. Associated personal-data processing serves these functions under Article 6(1)(f) GDPR.

Login and administration

WordPress uses authentication and administration cookies when you access its login or administration area. These include wordpress_test_cookie, wordpress_sec_… and wordpress_logged_in_…. Normal login validity is two days; “Remember me” extends it to 14 days, with a technical browser-cookie grace period. wp-settings-… and wp-settings-time-… can retain administrator preferences for one year; wp_lang remembers the login language for the session. These are separate from the public information-panel acknowledgement. Necessary requested login storage is covered by section 25(2)(2) TDDDG; secure administration is based on Article 6(1)(f) GDPR.

Contact and recipients

If you contact us, we process your contact details, message and related correspondence to answer you. Email is handled on BW-Tech’s own Exchange server. The legal basis is Article 6(1)(b) GDPR for contractual or pre-contractual enquiries, otherwise Article 6(1)(f) GDPR for responding to enquiries. Contact enquiries are retained for up to 90 days. Access is limited to people who need the data for these purposes. Data may be disclosed to public authorities or other recipients where legally required, or where necessary to establish, exercise or defend legal claims. Mandatory retention requirements or such claims can require longer retention of the relevant records.

External links

Links to app stores and other websites are ordinary links. Following them sends request data to the destination operator, whose privacy information then applies. Merely displaying these links does not load an embedded store service.

Your rights

Subject to the applicable conditions, you may request access, rectification, erasure, restriction of processing and data portability under Articles 15–20 GDPR. You may object under Article 21 to processing based on legitimate interests because of your particular situation. You may withdraw consent for future processing where processing is based on consent. Contact us using the details above. You can complain to a supervisory authority, including the Baden-Württemberg data protection authority. We do not use automated decision-making producing legal or similarly significant effects.

Contacting us by email is voluntary. We need the contact information and message you choose to provide to answer your enquiry. Without an address for a reply, we cannot respond. Technical connection data are necessary to deliver and protect the website; no user account is required.