Privacy Policy
Effective date: August 20, 2026
1. Data we collect
We collect information necessary to provide, manage, and secure your account and technical bridge services:
- Account data: Email address and salted password hashes generated with Argon2id. We never store plain-text passwords.
- Source configuration metadata: Upstream URLs, source identifiers, channel names, and mapping rules. Upstream credentials are encrypted at rest using AES-256-GCM and are never stored in plain text.
- Technical telemetry: IP addresses, request timestamps, and user agent strings collected in temporary logs for operational diagnostics and abuse prevention.
- Feedback and communications: Voluntary user feedback, roadmap feature notification registrations, and rights holder notices submitted via our contact or legal forms.
M3U Bridge does not maintain or operate a library of audiovisual content. When protected gateway features are used, network traffic may be transiently relayed through M3U Bridge infrastructure. Technical protocol information may be processed as necessary to route, secure, troubleshoot and monitor those connections. Audiovisual payloads are not retained as a media content library.
2. How we use data
We use the collected data strictly for the following purposes:
- Operating, maintaining, and optimizing the gateway and metadata matching services.
- Processing subscription billing and invoicing via Stripe.
- Delivering essential transactional communications (account verification, password reset, billing receipts, security alerts).
- Detecting and mitigating technical abuse, automated scraping, or security incidents.
- Reviewing and responding to user feedback, roadmap alerts, and compliance or copyright notices.
3. Data sharing
We do not sell, rent, or monetize your personal data. We only share data with trusted technical service providers necessary to operate our platform:
- Payment processing: Stripe handles payment details and subscription billing under PCI-DSS compliance. We never receive or store full payment card numbers.
- Cloud infrastructure: Cloud hosting and compute providers operating secure data center facilities.
- Metadata services: The Movie Database (TMDB) API is used for metadata enrichment (e.g. posters, descriptions) using public media identifiers without transmitting user identity.
4. Data retention
Account data and source configuration metadata are retained for as long as your account remains active. Upon account deletion, configuration data and credentials are permanently purged from active databases within 30 days, subject to statutory retention obligations for financial and tax records.
5. Your rights
You have the right to access, rectify, update, or request the deletion of your personal data at any time. You may also request a copy of your account data in a portable electronic format.
To exercise any of these rights, please contact our team at privacy@m3ubridge.com. We respond to verified requests within statutory timeframes.
6. Security
We implement industry-standard technical and organizational security measures:
- AES-256-GCM authenticated encryption for sensitive upstream source credentials at rest.
- Argon2id cryptographic hashing with unique salts for user authentication.
- TLS 1.3 encryption for all data in transit across public networks.
- Strict tenant isolation ensuring customer data partitions cannot be accessed cross-tenant.
7. Contact
For any questions, requests, or concerns regarding this Privacy Policy or our data handling practices, please contact us at: