PalcoTV Privacy Policy
Version 1.1
Effective Date: March 10, 2026
Last Revised: 2026-02-24
1. Introduction
PalcoTV ("PalcoTV," "we," "us," or "our") operates the PalcoTV mobile application and website at https://palcotv.app (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.
PalcoTV is a live streaming platform for sports reaction content. Streamers broadcast their camera-only reactions while viewers watch sporting events on their own separate applications using Picture-in-Picture (PiP) mode.
Please read this Privacy Policy carefully. By accessing or using the Service, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the Service.
2. Information We Collect
2.1 Personal Information You Provide
We collect information you voluntarily provide when you:
- Create an account: Name, email address, profile photo (via Apple Sign-In or Google Sign-In), and date of birth.
- Use guest access: Date of birth only (stored locally on your device, not transmitted to our servers until you create an account).
- Stream content: Stream key, broadcasting metadata, stream title, category selection.
- Complete streamer verification: Verification status, verification date, and country of identification document. Note: PalcoTV does NOT store your identification document images, full legal name from ID, ID number, or address from ID. These are processed and stored by our verification provider (Stripe Identity) pursuant to their privacy policy.
- Send or receive donations: Transaction amount, timestamp, and associated messages.
- Contact us: Name, email address, and the content of your communication.
2.2 Information Collected Automatically
When you access or use the Service, we automatically collect:
- Device information: Device type, operating system and version, unique device identifiers, device model, screen resolution, and language preferences.
- Usage data: Pages viewed, features used, streams watched, watch duration, in-app interactions, and navigation paths.
- Log data: IP address, access times, referring URLs, browser type (for web access), and crash reports.
- Location data: General location derived from IP address (city/region level). We do not collect precise GPS location.
2.3 Information from Third-Party Services
When you sign in using Apple Sign-In or Google Sign-In, we receive your name, email address, and profile photo (if you choose to share it) from those services.
3. How We Use Your Information
We use the information we collect for the following purposes:
| Purpose | Legal Basis (GDPR) |
|---|---|
| Provide, operate, and maintain the Service | Contractual necessity (Art. 6(1)(b)) |
| Process donations and streamer payouts | Contractual necessity (Art. 6(1)(b)) |
| Verify user age (17+ requirement) | Legitimate interest (Art. 6(1)(f)) / Legal obligation (Art. 6(1)(c)) |
| Verify streamer identity (18+ requirement) | Legitimate interest (Art. 6(1)(f)) / Legal obligation (Art. 6(1)(c)) |
| Enforce Terms of Service and Community Guidelines | Legitimate interest (Art. 6(1)(f)) |
| Content moderation and safety | Legitimate interest (Art. 6(1)(f)) |
| Analyze usage to improve the Service | Legitimate interest (Art. 6(1)(f)) |
| Display advertisements (HomeScreen only) | Consent (Art. 6(1)(a)) or Legitimate interest (Art. 6(1)(f)) |
| Send service-related communications | Contractual necessity (Art. 6(1)(b)) |
| Prevent fraud and abuse | Legitimate interest (Art. 6(1)(f)) |
| Comply with legal obligations | Legal obligation (Art. 6(1)(c)) |
| Maintain moderation audit trail | Legitimate interest (Art. 6(1)(f)) / Legal obligation (Art. 6(1)(c)) |
4. Cookies and Tracking Technologies
4.1 Mobile Application
The PalcoTV mobile application uses the following technologies:
- AsyncStorage (local storage): Used to store your age gate completion status and app preferences locally on your device. This data is not transmitted to our servers unless you create an account.
- Firebase Analytics: Collects anonymous usage data to help us understand how users interact with the Service.
- Google AdMob SDK: Used to display advertisements on the HomeScreen. AdMob may use device identifiers and usage data for ad targeting. See Section 5 (Third-Party Services) for details.
- Crash reporting (Firebase Crashlytics): Collects crash data, device information, and app state at the time of a crash to help us identify and fix bugs.
4.2 Website (palcotv.app)
Our website may use cookies and similar tracking technologies. We will update this section when the website launches with additional functionality.
4.3 iOS App Tracking Transparency
On iOS 14.5 and later, PalcoTV will request your permission before tracking your activity across other companies' apps and websites for advertising purposes, in compliance with Apple's App Tracking Transparency (ATT) framework. You can change your tracking preferences at any time in your device settings.
5. Third-Party Services
We use the following third-party services to operate the Service. Each has its own privacy policy governing how it handles your data:
| Service | Purpose | Data Shared | Privacy Policy |
|---|---|---|---|
| Firebase (Google) | Authentication, database, analytics, crash reporting, hosting | Email, name, usage data, crash data | https://firebase.google.com/support/privacy |
| Google AdMob | Advertising (HomeScreen banner only) | Device identifiers, IP address, usage data | https://policies.google.com/privacy |
| Stripe | Payment processing (donations, streamer payouts) | Payment information, transaction data, payout details | https://stripe.com/privacy |
| Stripe Identity | Streamer identity verification | Government ID images, selfie (processed by Stripe, NOT stored by PalcoTV) | https://stripe.com/privacy |
| Apple Sign-In | Authentication | Name, email (as authorized by you) | https://www.apple.com/legal/privacy/ |
| Google Sign-In | Authentication | Name, email, profile photo (as authorized by you) | https://policies.google.com/privacy |
6. Data Sharing and Disclosure
We do not sell your personal information. We may share your information in the following circumstances:
6.1 With Other Users
- Your display name and profile photo are visible to other users.
- If you are a streamer, your stream metadata (title, category, viewer count) is publicly visible.
- Donation messages are visible to the streamer and, if displayed on stream, to other viewers.
6.2 With Service Providers
We share information with third-party service providers who perform services on our behalf, as described in Section 5. These providers are contractually obligated to use your information only to provide services to us and in a manner consistent with this Privacy Policy.
6.3 For Legal Reasons
We may disclose your information if required to do so by law or in the good-faith belief that such action is necessary to:
- Comply with a legal obligation, subpoena, court order, or legal process;
- Protect and defend the rights or property of PalcoTV;
- Prevent or investigate possible wrongdoing in connection with the Service;
- Protect the personal safety of users of the Service or the public;
- Protect against legal liability.
6.4 Business Transfers
If PalcoTV is involved in a merger, acquisition, or sale of all or a portion of its assets, your personal information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our Service of any change in ownership or uses of your personal information.
7. Data Retention
We retain your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.
| Data Type | Retention Period |
|---|---|
| Account information (name, email, DOB) | Duration of account + 30 days after deletion request |
| Stream content and metadata | Duration of stream session |
| Donation transaction records | 7 years (tax and financial reporting obligations) |
| Streamer verification status | Duration of account + 7 years (financial compliance) |
| Moderation actions and audit trail | Indefinite (legal protection and compliance) |
| Usage analytics (aggregated) | 26 months (standard analytics retention) |
| Crash reports | 90 days |
| IP address logs | 90 days |
| Guest age gate data (local) | Until app is uninstalled (stored on device only) |
8. Your Rights -- General Data Protection Regulation (GDPR)
If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, you have the following rights under the General Data Protection Regulation (Regulation (EU) 2016/679) ("GDPR") and, where applicable, the UK GDPR:
- Right of Access (Art. 15): You have the right to request a copy of the personal data we hold about you.
- Right to Rectification (Art. 16): You have the right to request correction of inaccurate or incomplete personal data.
- Right to Erasure (Art. 17): You have the right to request deletion of your personal data, subject to certain exceptions (such as legal obligations or the exercise of legal claims).
- Right to Restriction of Processing (Art. 18): You have the right to request that we restrict the processing of your personal data under certain circumstances.
- Right to Data Portability (Art. 20): You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit it to another controller.
- Right to Object (Art. 21): You have the right to object to the processing of your personal data based on legitimate interests, including profiling and direct marketing.
- Right to Withdraw Consent (Art. 7(3)): Where processing is based on consent, you have the right to withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
- Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory authority in the EU member state of your habitual residence, place of work, or place of the alleged infringement.
To exercise any of these rights, please contact us at [email protected].
We will respond to your request within thirty (30) days. We may request additional information to verify your identity before processing your request.
EU/EEA & UK GDPR Representatives (Article 27)
If you are located in the EU or UK and have questions or concerns regarding your personal data, you may contact our GDPR representative:
EU Representative:
Euverify Ltd (Ireland), Unit 3D North Point House, North Point Business Park, New Mallow Road, Cork, T23 AT2P, Ireland
Email: [email protected]
UK Representative:
Euverify Ltd (UK), 3rd Floor, 86-90 Paul Street, London, EC2A 4NE, United Kingdom
Email: [email protected]
To submit a Data Subject Access Request (DSAR), data deletion request, or any other GDPR-related inquiry, you may contact our representatives above.
9. Your Rights -- California Consumer Privacy Act (CCPA/CPRA)
If you are a California resident, you have the following rights under the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (collectively, "CCPA/CPRA"):
- Right to Know: You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources from which we collected it, the business purpose for collecting it, and the categories of third parties with whom we share it.
- Right to Delete: You have the right to request that we delete personal information we have collected from you, subject to certain exceptions.
- Right to Correct: You have the right to request that we correct inaccurate personal information we maintain about you.
- Right to Opt Out of Sale/Sharing: You have the right to opt out of the sale or sharing of your personal information. PalcoTV does not sell your personal information. However, when you have granted permission through Apple's App Tracking Transparency (ATT) prompt, the use of Google AdMob may constitute "sharing" under the CCPA/CPRA for cross-context behavioral advertising purposes. If you have not granted ATT permission, AdMob serves only non-personalized ads and your data is not shared for cross-context behavioral advertising. You may change your ATT preference at any time in your device Settings > Privacy & Security > Tracking.
- Right to Limit Use of Sensitive Personal Information: You have the right to limit our use of sensitive personal information to purposes necessary for providing the Service.
- Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights.
Categories of Personal Information Collected
In the preceding twelve (12) months, we have collected the following categories of personal information:
| Category | Examples | Collected | Sold | Shared for Advertising |
|---|---|---|---|---|
| Identifiers | Name, email, IP address, device identifiers | Yes | No | Only if ATT consent granted |
| Personal records | Date of birth | Yes | No | No |
| Commercial information | Donation history, transaction records | Yes | No | No |
| Internet/network activity | Browsing history, search history, app interaction data | Yes | No | Only if ATT consent granted |
| Geolocation | General location from IP address | Yes | No | Only if ATT consent granted |
| Audio/visual | Stream video content (streamers only) | Yes | No | No |
| Inferences | User preferences, interests (for content recommendations) | Yes | No | No |
To exercise your rights, please contact us at [email protected].
We will verify your identity using information associated with your account. We will respond to verifiable requests within forty-five (45) days.
10. Your Rights -- Texas Data Privacy and Security Act (TDPSA)
If you are a Texas resident, you have the following rights under the Texas Data Privacy and Security Act ("TDPSA"):
- Right to Know: You have the right to confirm whether we are processing your personal data and to access such data.
- Right to Correct: You have the right to correct inaccuracies in your personal data.
- Right to Delete: You have the right to delete personal data you have provided to us or that we have obtained about you.
- Right to Data Portability: You have the right to obtain a copy of your personal data in a portable, readily usable format.
- Right to Opt Out: You have the right to opt out of the processing of your personal data for purposes of targeted advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects concerning you.
How to Exercise Your TDPSA Rights
To exercise your rights, please contact us at [email protected]. We will respond to your request within forty-five (45) days. If we need additional time, we will inform you of the extension and the reason within the initial 45-day period.
Right to Appeal
If we decline to take action on your request, you may appeal our decision by contacting us at [email protected] with the subject line "TDPSA Appeal." We will respond to your appeal within sixty (60) days. If you are not satisfied with our response to your appeal, you may file a complaint with the Texas Attorney General at https://www.texasattorneygeneral.gov/consumer-protection/file-consumer-complaint.
Sensitive Data
Under the TDPSA, "sensitive data" includes personal data revealing racial or ethnic origin, religious beliefs, mental or physical health diagnosis, sexual orientation, citizenship or immigration status, genetic or biometric data processed to identify a specific individual, personal data collected from a known child, and precise geolocation data. We will obtain your consent before processing any sensitive data, as required by the TDPSA.
11. Children's Privacy
PalcoTV is NOT intended for users under the age of seventeen (17). We do not knowingly collect personal information from children under 17.
All users, including guests, must pass a date-of-birth verification gate before accessing any content on PalcoTV. Users who indicate they are under 17 are immediately blocked from accessing the Service, and no personal information is collected from them.
If we learn that we have collected personal information from a child under 17, we will take steps to delete that information as quickly as possible. If you believe we have inadvertently collected information from a child under 17, please contact us immediately at [email protected].
COPPA Statement
The Children's Online Privacy Protection Act ("COPPA") applies to operators of websites and online services directed at children under 13 or who have actual knowledge of collecting information from children under 13. PalcoTV is not directed at children under 13 (or under 17). Our 17+ App Store age rating, combined with our mandatory date-of-birth gate for all users, ensures we do not knowingly collect personal information from children.
Because PalcoTV's 17+ age gate is designed to ensure we have no actual knowledge of any user under 13, PalcoTV does not believe it is a covered operator under COPPA. However, we monitor regulatory developments and will update our practices as necessary to ensure ongoing compliance.
12. International Data Transfers
PalcoTV is based in the United States. If you are accessing the Service from outside the United States, including from the European Economic Area (EEA), the United Kingdom, or any other jurisdiction, please be aware that your information will be transferred to, stored, and processed in the United States, where our servers are located and our central database is operated.
The data protection laws of the United States may differ from those of your jurisdiction. For transfers of personal data from the EEA, the United Kingdom, and Switzerland to the United States, we rely on Standard Contractual Clauses (SCCs) adopted by the European Commission as the lawful transfer mechanism under GDPR Article 46(2)(c). Our third-party processors that receive personal data — including Google (Firebase, AdMob), Stripe, and Stripe Identity — each maintain SCCs or equivalent transfer safeguards covering data flows from the EEA and UK to the United States. You may request information about the applicable transfer safeguards by contacting us at [email protected].
13. Data Security
We implement commercially reasonable technical and organizational measures designed to protect your personal information from unauthorized access, use, alteration, or destruction. These measures include:
- Encryption of data in transit (TLS/SSL);
- Firebase Authentication for secure account access;
- Access controls limiting employee and contractor access to personal information;
- Regular security reviews;
- Secure payment processing through Stripe (PCI-DSS compliant).
However, no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security.
Texas Data Breach Notification
In accordance with the Texas Identity Theft Enforcement and Protection Act, if we become aware of a breach of system security resulting in the unauthorized acquisition of computerized data that compromises your sensitive personal information, we will notify you and the Texas Attorney General within sixty (60) days of discovering the breach.
14. Do Not Track Signals
Some web browsers transmit "Do Not Track" (DNT) signals to websites. Because there is no uniform standard for how DNT signals should be interpreted, PalcoTV does not currently respond to DNT signals. However, you can manage your privacy preferences through the controls described in this Privacy Policy and your device settings.
15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting a notice within the Service, updating the "Effective Date" at the top of this Privacy Policy, or sending you an email. Your continued use of the Service after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.
We encourage you to review this Privacy Policy periodically for any changes.
16. Contact Information
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:
Website: https://palcotv.app
This Privacy Policy was last updated on March 10, 2026.