Privacy
Everything we store, why we store it, and how to switch the optional parts off.
Today, before launch
Accounts, sync and payments are not live yet. Until they are, the only personal data we hold is your email if you join the waitlist, and short-lived server logs. You can have your waitlist entry deleted at any time (see The waitlist). Sections marked “when accounts launch” describe what changes on that day; this page will say so when it happens.
The waitlist
If you join, we keep your email address, the screens you ticked and the day you joined. Nothing else, and not your IP address. We use it for one thing: to email you when Galarama opens on a platform you ticked (or, if you ticked none, when it first opens). No marketing list. It is shared only with the providers that store and send it: Cloudflare, which hosts this site and the list, and the email provider that sends that email, which we will name here before the waitlist opens. Our legal basis is your consent, given when you submit the form. You can withdraw it at any time. We delete your entry once we have emailed you about every platform you ticked, or 24 months after you joined, whichever comes first. To be removed sooner, use the unsubscribe link in the email, or write to the contact address on this page from the address you joined with. We delete it within 30 days.
Pairing
A pairing code is a short-lived token linking the companion page to one TV. It expires after 10 minutes or on first use. What you type — a playlist URL, a server address, a username and password — is relayed to that TV over an encrypted connection and held only in memory for the seconds the relay takes. We do not write it to our databases, log it, or keep a copy after delivery.
Once delivered, your source details live on the TV, in the app's storage. Remove them there at any time from Settings → Sources.
What we store When accounts launch
Your email address, your billing record (from our payment provider — never your card number) and the list of screens linked to your account: the name you gave each one, its platform and when it last checked in.
If sync is on (Plus and Pro) When accounts launch
To keep your screens in step we also store your sources — including their credentials — plus favourites, playback positions and recording schedules. Credentials are encrypted, but our service holds the keys, so it can technically decrypt them. You can turn off credential sync in Account → Privacy & data: each screen then keeps its own credentials and we delete our copy.
What we never do
We never proxy or see your streams — playback runs directly between your screen and your source. No ads, no cross-site trackers, and we never sell or rent your data.
Codes and sign-in
TV link and pairing codes last 10 minutes; sign-in codes, once accounts launch, last 15 minutes. Each works once.
This website · diagnostics
Our hosting provider, Cloudflare, processes request data (IP address, timestamp, error codes) for security and debugging; we will state how long it is kept here before the waitlist opens. To stop the waitlist and pairing forms being flooded, we turn your IP address into a one-way hash and count attempts against it for 60 seconds. Neither the address nor the hash is stored with your waitlist entry. The app does not send crash reports today. When crash reporting launches, it will be opt-in, and reports will carry device model, app version and a stack trace — never URLs, credentials or titles.
Export and deletion When accounts launch
Export everything we hold as JSON from your account. Deletion of your account data is immediate; invoices are kept as long as tax law requires.
Türkiye — KVKK
This is our disclosure under Article 10 of Law No. 6698 (KVKK). The data controller's name and address will be published in Contact before the waitlist opens. Today we process only waitlist data (your email address, the platforms you ticked and the day you joined). It is collected electronically through the form on this site, for the single purpose of telling you when Galarama opens on your platform, on the basis of your explicit consent, which you can withdraw at any time. It is stored with Cloudflare and passed to our email provider only to send that email. Both may process it outside Türkiye. Under Article 11 you may ask whether we process your data, request details of it, learn its purpose and who it has been transferred to in Türkiye or abroad, have it corrected or deleted, object to an outcome of automated analysis, and claim compensation for unlawful processing. We reply within 30 days. This section will be updated before accounts or payments collect any other data.
Your rights
Wherever you live, you can ask us for a copy of what we hold about you, and ask us to correct it, delete it, or stop using it. You can withdraw consent at any time; that does not affect anything done before you withdrew. We answer within 30 days. If you are in the EU or UK and are unhappy with our answer, you can complain to your local data-protection authority. In Türkiye you can complain to the Personal Data Protection Authority (KVKK).
Contact
Before the waitlist opens, this section will name the company that operates Galarama and controls the data described on this page, with its postal address and a contact address for everything here.