WorthyStream privacy policy

The short version

We collect what a form needs in order to set up and support a subscription, plus a small amount of technical context that comes with any web request and is used to spot fraud and duplicate trials. We do not sell data, we do not run advertising trackers, and we do not fingerprint your browser.

Who is responsible

WorthyStream operates worthystream4k.com and is responsible for the information described here. For anything in this policy, write to contact.provideriptv@gmail.com.

Information you give us

Through the order, free trial and contact forms:

• Your name, email address and phone or WhatsApp number.
• The country you are in, and the countries whose channels you want.
• Your device type and the application you intend to watch in, and — only where the device or app requires it — a MAC address and a device key.
• Your plan choice, whether adult categories should be enabled, whether this is a new line or a renewal, and the existing username where it is a renewal.
• Anything you choose to write in a notes or message field.

Every one of these is used to set up the line you asked for, or to answer the question you asked. Fields marked optional can be left blank without affecting the outcome.

Technical information collected automatically

When you submit a form, our server records the following. This is the ordinary context of an HTTP request plus one value your browser volunteers; none of it is read off your device beyond what a normal request already carries.

• IP address, and the approximate country our network layer associates with it.
• User agent, and the browser, operating system and device type we derive from it.
• Browser timezone and language, reported by the browser itself.
• Referring page, where your browser sends one.
• Timestamp of the submission.
• A VPN or proxy indication, where one is available. This is a signal, not a verdict: plenty of honest customers use a VPN and we do not reject a request because of it.

Why: to stop the same person taking repeated free trials, to spot automated submissions, and to give us something to look at when an order does not add up. That is our legitimate interest in preventing abuse of a service we give away for free at the trial stage.

What we deliberately do not do: no canvas, font, audio or WebGL fingerprinting, no advertising or analytics trackers, no cross-site tracking, no profiling that produces a decision without a person involved, and no collection of anything from your device beyond the request itself.

Cookies and local storage

This site sets no cookies of its own. Your light or dark theme choice is kept in your browser’s local storage on your own device, so the site remembers it on your next visit; it never reaches our server and it is not used to identify you. Clearing your browser data removes it.

The live chat widget is provided by Tawk.to and does set its own cookies and storage in order to keep a conversation together across pages. Those are Tawk.to’s, governed by their privacy policy, and are only set once the widget loads. If you never open the chat, you can still block it with any standard content blocker.

Third parties

• Tawk.to — live chat. Anything you type into the chat window is processed by them on our behalf.
• Google (Gmail SMTP) — the mail service that carries our notification and confirmation emails.
• WhatsApp — only if you choose to message us there. That conversation is governed by WhatsApp’s own terms.
• Our hosting provider — which processes requests in order to serve the site, and keeps ordinary server logs.
• An IP reputation service — optional and off unless configured. Where it is enabled, only the IP address is sent; never a name, an email address or a message.

We do not sell personal information and we do not share it for advertising.

How long we keep it

• Order and trial requests: for as long as you are a customer and for up to 24 months afterwards, so we can answer questions about a past subscription.
• Contact messages: up to 12 months after the conversation ends.
• Abuse-prevention records (IP, user agent, timestamp): up to 12 months, which is long enough to recognise a repeated free-trial pattern.
• Server logs: as long as our hosting provider retains them in the ordinary course, typically a matter of days to weeks.

When a retention period ends, the record is deleted. We do not keep data indefinitely on the basis that it might one day be useful.

Security

• The whole site is served over HTTPS.
• Form submissions are validated and sanitised on the server, not merely in your browser, and are rate limited by address.
• Mail credentials and any other secrets live in server-side environment variables. They are never sent to the browser.
• No payment card details are collected anywhere on this website, so there are none to lose.

Your rights

Depending on where you live, you may have the right to ask for a copy of the information we hold about you, to have it corrected, to have it erased, to restrict or object to how we use it, and to receive it in a portable form. Where we rely on consent, you can withdraw it at any time.

Write to contact.provideriptv@gmail.com and we will respond within 30 days. We may need to confirm the request really comes from you before acting on it. If you are in the UK or the EU and you are not satisfied with our answer, you may complain to your national data protection authority.

Children

The service is not intended for anyone under 18, and adult categories are disabled unless an adult explicitly asks for them. If you believe a child has sent us personal information, tell us and we will delete it.

Changes

If this policy changes, the date at the top of the page changes with it. Material changes will be flagged on the site. Continuing to use the service after a change means the updated policy applies.

See also our terms of service and our DMCA policy.