Last updated: 19 October 2026
This English version is a translation of the German privacy policy (Datenschutzerklärung) and is provided for convenience only. In the event of any discrepancy between this translation and the German version, the German version shall prevail.
The protection of your personal data is of particular importance to us. We process your data exclusively on the basis of the applicable statutory provisions (the General Data Protection Regulation (GDPR), the Austrian Data Protection Act (Datenschutzgesetz, DSG) and the Austrian Telecommunications Act 2021 (Telekommunikationsgesetz 2021, TKG 2021)). In this privacy policy we inform you about the most important aspects of data processing in connection with our streaming platform.
The controller responsible for data processing on this website is:
UncutTV GmbH
Kalchgruben 4/11
6094 Axams
Email: office@uncuttv.at
When you use our streaming platform, we collect the following personal data:
Legal basis: Art. 6(1)(b) GDPR (performance of a contract) and Art. 6(1)(f) GDPR (legitimate interests)
We use the Veriff service for the age verification required by law (18+). For this purpose, identity document data and a photograph are processed in order to verify that you are of legal age. Processing takes place exclusively for the purpose of age verification, and the data are not stored permanently by us once verification has been completed successfully.
Provider: Veriff OÜ, Väike-Paala 2, 11415 Tallinn, Estonia
Privacy policy: www.veriff.com/privacy-policy
Legal basis: Art. 6(1)(c) GDPR (legal obligation)
Payments are processed by the payment service provider Stripe. Your payment data (e.g. credit card number) are processed exclusively by Stripe and are not stored on our servers. Stripe is PCI DSS certified.
Provider: Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Dublin 2, Ireland
Privacy policy: stripe.com/privacy
Legal basis: Art. 6(1)(b) GDPR (performance of a contract)
We use a professional video infrastructure provider to deliver our video content. In doing so, technical data such as IP address and device information are processed for quality assurance and to optimise delivery. Videos are accessible exclusively to logged-in users with an active subscription and are delivered via signed, time-limited URLs.
Legal basis: Art. 6(1)(b) GDPR (performance of a contract)
Our platform is hosted by Vercel (Vercel Inc., 340 Pine Street, Suite 900, San Francisco, CA 94104, USA). The database and authentication are provided by Supabase on servers in the EU (Frankfurt, eu-central-1). Data processing agreements pursuant to Art. 28 GDPR are in place with both providers.
Legal basis: Art. 6(1)(f) GDPR (legitimate interests)
We store the playback duration and the most recent playback position for each film. This information is linked to your user account.
It serves two purposes: the “Continue watching” feature, so that you can resume a film where you left off, and the settlement of accounts with the rights holders whose films are in the catalogue.
We pass on to rights holders only values aggregated per film. No user-related data are transmitted in the process.
If you delete your account, the information for “Continue watching” is deleted. The entries required for the settlement of accounts with rights holders are retained, but are permanently separated from your account: the link to your account is replaced by a random value. The entries can then no longer be attributed to you; the values aggregated per film remain unchanged.
Legal basis: Art. 6(1)(b) GDPR (performance of a contract)
Our platform uses technically necessary cookies for authentication and session management. These cookies are strictly necessary for the operation of the platform and cannot be deactivated.
We set marketing cookies only if you have selected “Accept all” in the cookie banner. Section 10 explains which cookies these are and what they are used for. We store your choice in the “cookie_consent” cookie and in your browser’s local storage. You can change it at any time via “Cookie settings” at the bottom of every page.
Legal basis for necessary cookies: Art. 6(1)(b) GDPR (performance of a contract) and Art. 6(1)(f) GDPR (legitimate interests). Legal basis for marketing cookies: Art. 6(1)(a) GDPR (consent) in conjunction with Section 165(3) of the Austrian Telecommunications Act 2021 (TKG 2021).
In order to measure the reach and the success of our advertising on Facebook and Instagram, we use the Meta Pixel and the Meta Conversions API. This allows us to recognise whether someone who has seen or clicked on one of our advertisements registers, starts a trial period or takes out a subscription.
Provider: Meta Platforms Ireland Ltd., Merrion Road, Dublin 4, D04 X2K5, Ireland
Privacy policy: www.facebook.com/privacy/policy
Meta may attribute the transmitted information to a Facebook or Instagram account and use it for its own purposes. We and Meta are joint controllers (Art. 26 GDPR) for the collection of the data and their transmission to Meta; Meta is the sole controller for the subsequent processing.
Meta Pixel (in your browser)
We load the Meta Pixel only if you have selected “Accept all” in the cookie banner. Without your consent it is not loaded, and no connection to Meta is established. With your consent, the pixel transmits the following information to Meta:
Meta Conversions API (from our server)
Independently of your browser, our server notifies Meta when you register, when you start a trial period and when the first payment for a subscription is received – in each case together with the time, the plan and the amount. In doing so, we send your email address and your user ID exclusively as a hash value (SHA-256), not in plain text.
If you have given your consent in the cookie banner, the cookie identifiers “_fbp” and “_fbc”, your IP address, the browser identifier and the campaign parameters are added. Without consent we do not transmit this information.
So that we can attribute the conclusion of the subscription after the end of the trial period, we store this information until then with our payment service provider Stripe on the subscription record, and delete it there as soon as the first payment has been reported.
Legal bases
For the Meta Pixel, the marketing cookies and all information that we transmit only with your consent: Art. 6(1)(a) GDPR (consent) in conjunction with Section 165(3) of the Austrian Telecommunications Act 2021 (TKG 2021).
For the transmission of the hashed email address and user ID by our server: Art. 6(1)(f) GDPR. Our legitimate interest lies in measuring the success of our advertising. You may object to this processing at any time (Art. 21 GDPR); to do so, write to office@uncuttv.at.
Transfer to the USA
Meta Platforms Ireland may transfer data to Meta Platforms, Inc. in the USA. Meta Platforms, Inc. is certified under the EU-US Data Privacy Framework; the transfer is based on the adequacy decision of the European Commission (Art. 45 GDPR).
Withdrawal of consent and storage period
You may withdraw your consent at any time with effect for the future via “Cookie settings” at the bottom of every page. When you do so, we delete the cookies “_fbp”, “_fbc” and “utv_attr”.
The cookies “_fbp”, “_fbc” and “utv_attr” are stored for a maximum of 90 days, the “cookie_consent” cookie for one year. How long Meta stores the transmitted data is set out in Meta’s privacy policy.
We count how many visitors access our pages using our own measurement, which works without cookies. In doing so, we do not store anything on your device and do not read anything from it – no cookie, no local storage. The measurement runs independently of the cookie banner. We do not pass this data on to advertising or analytics services such as Meta or Google.
What we record
IP address and daily identifier
We do not store your IP address for this measurement. In order to count each visitor only once per day, we create a hash value (SHA-256) from the IP address, the browser identifier (user agent) and a random value that changes daily. We delete the random value at the end of the day. After that, the hash value can neither be traced back to you nor linked to visits on other days.
Logged-in users
If you are logged in, we additionally record on which days your account used which of our services – this platform, the shop at uncuttv.at and UncutTV Social. This allows us to see how many accounts use more than one of our services. This is evaluated only in aggregated figures, not for individual persons.
Storage period
We delete individual page views after 90 days. The record of the days on which an account used which service is deleted after 400 days. Only aggregated daily figures that do not relate to any person are kept permanently. The data is stored in our database at Supabase (Section 7).
Legal basis and objection
Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest lies in measuring the use of our services and improving them. You may object to this processing at any time (Art. 21 GDPR); to do so, write to office@uncuttv.at.
If you subscribe to our newsletter, we use your email address solely to send you news from UncutTV: new films, new apps and offers. Subscribing is voluntary; you can unsubscribe at any time via the link in every email or by writing to office@uncuttv.at.
We use a double opt-in procedure: after you enter your address, you receive an email with a confirmation link. Only when you click that link is your address added to the list. Without confirmation nothing is stored and no newsletter is sent. As proof of consent we record the time of the signup and of the confirmation.
We send the newsletter with Ghost (Ghost Foundation, Singapore), which stores your email address and the time of your subscription. The list is the same as for the newsletter of our shop uncuttv.at; one subscription covers both. Transfers to a third country are based on the EU Commission's standard contractual clauses.
Legal basis: Art. 6(1)(a) GDPR (consent). After you unsubscribe, we delete your address from the list.
If you allow notifications in the app, we send you push notifications. There are two types, which you can switch on and off separately:
Data processed: a device-specific push token, the operating system (iOS or Android), the app version, the app language, your device's country (derived from your device's language settings or, where available, roughly from your IP address), the time the token was registered and last used, the link to your user account and your notification preferences. We use the country so that you only receive notices about films that are available in your country.
The legal basis is your consent (Art. 6(1)(a) GDPR), which you give through your device's notification permission and the switches in the app settings. You can withdraw it at any time with effect for the future by turning off the switches in the app or notifications in your device settings.
We use the following service providers as processors for delivery:
The push token and the content of the notification are transmitted in the process. Transfers to the USA are based on the EU-US Data Privacy Framework where the recipient is certified, and otherwise on the EU Standard Contractual Clauses.
Retention: We store the push token until you log out, the delivery service reports the token as invalid or you delete your account. If you turn off notifications in the app, the token remains stored, but we no longer send you notifications of that type. We log which notification was sent when to which account and whether delivery was successful. We delete these entries after 90 days. We keep a summarised history (time, text, number of recipients and delivery errors) with no link to individual users for longer, for troubleshooting.
Under the GDPR you have the following rights:
To exercise your rights, please contact: office@uncuttv.at
Austrian Data Protection Authority (Österreichische Datenschutzbehörde)
Barichgasse 40–42, 1030 Vienna
www.dsb.gv.at