Privacy
Last updated: 16 October 2026
Who is responsible
The controller of your personal data is Somatro (Anwar Hasan, sole trader). Geographic address: 20 Firshill Close, Sheffield, S4 7BL, United Kingdom. Email: support@somatro.net. For privacy questions or requests, contact support@somatro.net (see "Your rights" below).
Somatro is registered with the Information Commissioner's Office (ICO), registration number ZC278024.
No account
Somatro has no customer account and no sign-in. We never ask for your name, address or phone number.
What your television sends
To start a trial and check the licence, the Somatro app talks to Somatro's own service. It sends the television's make, model and platform, and identifiers the television reports (such as its Android ID), which our servers store only in a one-way scrambled form. The television is then known by a random Device Reference (shown under Settings › About); that is the only identifier to give support. We keep the television's licence state, trial and licence dates, the history of changes to its licence, and when it last checked in. Each check also records the app version and whether the app passed its integrity check (that record is deleted after 30 days at the most).
Crash reports
If the app crashes, it sends a crash report to Somatro's own servers. It contains only the technical error trace, the app and its version, the device model and its Android version. Web addresses, provider and server names, logins, passwords, tokens and any device or licence identifier are removed first; it never contains your IP address, your Device Reference or anything about your playlists. Reports are deleted automatically after 90 days. Crash reports are on by default; turn them off any time in Settings › Privacy & Diagnostics › Send crash reports (this also deletes reports still waiting on the television).
Payments
Somatro does not store customers' full payment-card details. Payments are processed by Stripe and/or the payment provider used at checkout. Stripe holds your payment details and the email you give at checkout, and any receipt or payment notice comes from Stripe, not from Somatro; Stripe's own privacy policy applies to what Stripe holds.
For each purchase Somatro may keep: a purchase reference, the television it is for, the plan, amount, currency, dates and status, and Stripe's own references for the payment, customer and subscription (transaction IDs, status, amount and date), for accounting, licensing, refunds and disputes. Somatro does not retain the customer's IP address or a shortened/network-part version of it in its production application records. Somatro's purchase records keep no email address.
Your playlists and what you watch
Somatro does not keep your playlists, playlist passwords or viewing history on its servers. If you add a playlist from your phone or browser, its details pass through our servers encrypted and are erased as soon as your TV collects them (never more than 15 minutes).
When you request film or series information, the title and year may be sent to the metadata service so that Somatro can retrieve the requested information. That request goes through Somatro's own service, which may ask third-party metadata providers for the information. Title lookups do not record the Somatro Device Reference. Somatro does not retain the requesting IP address or record the Somatro Device Reference with the title lookup. The result is kept only against the title, year and kind, not against any television, and is deleted when it expires.
One optional feature sends more: managing playlists from a browser (somatro.net/manage-playlists, after you choose Pair with browser on the television). What you type there — for example a playlist link, or an Xtream server, username and password — passes through Somatro's service to your own television. It is held only until your television collects it, and never more than 15 minutes, then erased. While the browser is paired (at most 30 minutes), our service also holds a summary of your television's source list — names, type, on/off, item count and refresh status, but no addresses or logins — so the browser can show it. The pairing record and that summary are deleted within 30 days at the most after the session ends or expires (in practice about a day). The pairing record does not keep your IP address or a shortened/network-part version of it.
Backups you make yourself
If you create a backup on the television, it is stored wherever you choose to put it; Somatro never receives it. A backup can contain your playlist and guide addresses (including any login inside a link). Xtream and MAC Portal sign-in details are included only if you set a passphrase, and are then encrypted with it. Keep backups somewhere private.
Service logs and IP addresses
Somatro does not retain IP addresses in its production application records. That includes the service logs and the payment and pairing records.
To keep Somatro working and secure, our servers keep a short technical log of each request your device or browser makes to Somatro's own services (activation, updates, sports data and the admin console). Each entry records the time, the part of the service that was used, whether it succeeded or the error code if it did not, the app version and package, a coarse location (country and data-centre) and, once your device is recognised, your Device Reference — except for title lookups, which are logged without it.
These logs never contain passwords, tokens or security keys, activation or connection codes, email addresses, or anything about your playlists or providers — including their addresses or logins — and never record what you watch. Logs are kept for at most 7 days and then deleted automatically. They are used only to diagnose faults, protect the service against abuse, and help support answer your questions.
Providers. Somatro's website and servers run on Cloudflare, which necessarily handles network information, such as IP addresses, to deliver traffic and protect against attacks, under its own terms. Stripe may collect information such as your IP address and device details at checkout for payment security and fraud prevention, under its own privacy policy. That is processing by those providers; Somatro does not store it in its own application records.
Emails to support
If you email support, we keep your email address, what you write and anything you attach (for example your Device Reference, a payment receipt or a screenshot), so we can answer you and deal with any refund or complaint. Mail to support@somatro.net is delivered through Cloudflare Email Routing to a Gmail mailbox, run by Google.
Why we use your data (lawful bases)
| What | Lawful basis |
|---|---|
| Starting a trial, activation, binding a licence to a television, licence status, taking payment, refunds, support about your licence or a payment, managing playlists from a browser | Contract — to provide what you asked for (for a trial, the steps you ask for before buying) |
| Tax, accounting and transaction records, and answering lawful requests from authorities | Legal obligation |
| Preventing fraud and abuse (including one trial per television), security and app-integrity checks, handling disputes, and basic operational protection such as service logs and finding crashes | Legitimate interests — keeping Somatro secure and working |
We do not use legitimate interests for analytics. If Somatro ever adds analytics or telemetry that needs your consent, we will ask before collecting it. Where we rely on legitimate interests, you can object (see "Your rights").
Who receives your data
- Cloudflare — runs Somatro's servers, database, logs and support email routing, on our behalf (a processor).
- Stripe — takes payments. For some purposes, such as fraud prevention and its own legal obligations, Stripe decides how it uses your data itself, under its own privacy policy.
- Google (Gmail) — holds the support mailbox, so it receives your support emails.
- Metadata providers — when you ask for film or series information, the title and year may reach the third-party providers Somatro uses for that information (see "Your playlists and what you watch").
We do not sell your data or share it for advertising. We may disclose data where the law requires it.
Where your data is held
Somatro's own database (devices, licences, purchases and crash reports) is held in the European Union. Some service providers used by Somatro may process information outside the United Kingdom. Where data-protection law requires safeguards for an international transfer, Somatro uses or relies on appropriate lawful safeguards provided for under UK data-protection law.
How long we keep it
General rule: we keep the minimum data, and delete or anonymise it when it is no longer needed.
| What | How long |
|---|---|
| Purchase and accounting records (no card data) | 6 years — from the end of the UK tax year in which the last payment was made |
| Full device and licence record (scrambled identifiers, make and model, Device Reference, licence state, dates, history) | while the trial or licence is active, and 12 months after it ends |
| After that, a minimal record only: the Device Reference, a scrambled device identifier, trial and licence status and dates, and whether the television has been blocked for abuse — to allow one trial per television, to continue a licence after a reinstall, to prevent abuse and to answer disputes about an earlier licence. It holds no playlist contents, titles or other device data | up to 3 years after the trial or licence ends; where Somatro still keeps a purchase record for that television, until that purchase record is deleted; longer only if a dispute needs it |
| App-integrity check records | 30 days at the most |
| Crash reports | 90 days, deleted automatically |
| Playlist details typed in a browser | until the television collects them, at most 15 minutes |
| Browser pairing records and source-list summary | within 30 days at the most after the session expires or completes (in practice about a day) |
| Temporary activation sessions and activation codes | 30 days at the most after they expire or complete. Where a session led to a purchase, the minimal fields that became part of the purchase record are kept with that record (6 years, as above); everything else in the session goes at 30 days |
| Cached film and series information (title, year and kind only; not linked to a television) | until it expires, then deleted daily |
| Service logs | at most 7 days |
| Support emails | 2 years after the last message, unless a dispute is open or the law requires us to keep them longer |
What Stripe, Cloudflare and Google keep is set by their own privacy policies.
Your rights
You can ask to see the data we hold about your television or purchase, to correct it, to delete it, to restrict how we use it, to object to how we use it, and to receive a copy in a portable form. Email support@somatro.net with your Device Reference (Settings › About). Because there is no account, we may ask for your payment receipt to check the request is yours. We answer within one month.
Deleting a television's licence record ends its licence. We may need to keep purchase records for as long as the law requires.
If you are unhappy with how we handle your data, please tell us first. You also have the right to complain to the Information Commissioner's Office (ICO): ico.org.uk, or 0303 123 1113.