Privacy policy

Last updated: 10 November 2026

This Privacy policy describes the processing of the personal data of people who use the GU IPTV apps for TVs and mobile devices (hereinafter, "the Apps"), visit the website https://iptv.guforge.com (hereinafter, "the Website") or contact its owner, in accordance with Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), and Spanish Organic Law 3/2018 on the Protection of Personal Data and the Guarantee of Digital Rights (LOPDGDD).

1. Data controller

The data controller is Fran Beltrán, a self-employed professional trading under the name GuForge, with tax identification number (NIF) 76440940A and address at Calle Real, Huétor Vega, Granada (Spain), who may be contacted at the email address [email protected] (hereinafter, "the Controller"). No Data Protection Officer has been appointed, as one is not required under applicable law.

2. The Apps

The Apps have no user accounts, advertising, advertising identifiers, analytics or crash reporting. The playlist, channels, favorites, viewing history, programme guide and settings are stored only on the user's device; they are never sent to the Controller or to third parties, so the Controller does not process them.

The Apps connect only to the addresses contained in the playlist and guide that the user adds (streams, logos and programme guides). Those servers are chosen by the user and are not providers of the Controller; each of them processes the data it receives under its own terms.

To show news about GuForge products, the Apps download a public file from iptv.guforge.com/api/campaigns. The request contains no identifier and no information about the user or their playlist; as with any web request, the servers receive the IP address and the technical data described in section 3.

The "Import from phone" feature works only within the user's local network: the phone sends the playlist directly to the TV, and nothing passes through the Controller's servers.

3. Data processed

• Contact data: when users write to the Controller by email, their name, email address and the content of the message are processed.
• Technical data: when the Website is visited or the Apps download the news file, the servers and the security network log technical data such as the IP address, browser or device type and the resources requested, which are needed to serve them and protect them against attacks.
• Website usage data: the PostHog analytics tool records the pages visited, the links and buttons clicked, the device and browser type, the referring site and the approximate country. If the user does not accept analytics cookies, visits are counted without storing any identifier in the browser, as described in the Cookie policy. The Apps include no analytics.
• No special categories of data are collected and no profiles are built for advertising purposes. Providing data is voluntary, although an enquiry cannot be answered without an email address.

4. Purposes and legal bases

• Answering enquiries and suggestions, on the basis of the data subject's consent (article 6.1.a GDPR).
• Keeping the Website and the news file available and secure, on the basis of the Controller's legitimate interest (article 6.1.f GDPR).
• Measuring the use of the Website in order to improve it, on the basis of consent where the user accepts analytics cookies (article 6.1.a GDPR) and otherwise of the legitimate interest in knowing the number of visits through an anonymous count without cookies (article 6.1.f GDPR).
• Complying with applicable legal obligations (article 6.1.c GDPR).
• No marketing communications are sent without the data subject's prior consent.

5. Recipients

Data is not disclosed to third parties except where required by law or by a competent authority. The following providers have access to it as processors, and only to the extent necessary to provide their services: Cloudflare, Inc. (content delivery and security network for the Website and forwarding of email addressed to [email protected]); OVH SAS (hosting of the Website on servers located in the European Union); Google LLC (mailbox where messages are received); and PostHog Inc. (usage analytics of the Website, with the data hosted in the European Union).

6. International transfers

Cloudflare, Inc., Google LLC and PostHog Inc. are established in the United States and may process data outside the European Economic Area. In such cases, transfers are covered by the safeguards provided for in the GDPR, such as the EU-US Data Privacy Framework or the Standard Contractual Clauses adopted by the European Commission.

7. Retention periods

Messages are kept for as long as necessary to answer the enquiry and are deleted within one year at most, unless a longer period is required by law. Analytics data is deleted automatically after one year. Data stored by the Apps remains on the user's device until the user deletes it or uninstalls the App.

8. Data subject rights

Data subjects may at any time exercise their rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw any consent given, by writing to [email protected]. Requests will be answered within one month at most. Data subjects also have the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

9. Cookies

The Website only sets analytics cookies if the user accepts them. Detailed information is available in the Cookie policy. The Apps use no cookies or advertising identifiers.

10. Changes

The Controller may amend this Privacy policy to reflect legal or technical changes. Amendments will be published on this page, together with the date of the latest update.