1. Scope and contact
This notice describes how BoxLinkTV handles information on this website when you browse public pages or submit a trial, renewal, player activation, custom order, or support request. It does not describe the separate privacy practices of a player app, payment provider, network provider, or other third party you choose to use.
Privacy questions and requests can be sent through the contact form or to [email protected].
2. Information you provide
Request forms collect the fields needed for the selected workflow. Depending on the request, this can include an email address, account username, name, device, player, country, language, content preference, activation identifier, plan, device count, payment-method preference, subject, and message.
Do not submit an account password, complete playlist URL, payment-card number, wallet secret, or other credential. The website records a payment preference for renewal planning but does not collect full card details or complete payment credentials in its public forms.
3. Technical and security information
When a request reaches the website and its Cloudflare-hosted intake service, technical context can include the IP address, browser user agent, approximate country or city supplied by the network edge, page path, referring origin, request time, form completion time, and anti-abuse challenge result. This information is used to deliver requests, troubleshoot failures, protect forms, and investigate abuse.
Public forms use Cloudflare Turnstile. The challenge runs in the browser and its token is validated by the intake service before a request is accepted. Cloudflare may process browser and network signals as part of that anti-abuse service.
4. Attribution and site measurement
For the current browser session, the site stores a first-touch landing path, referring-site origin, capture time, and only these campaign fields when present: utm_source, utm_medium, utm_campaign, utm_term, and utm_content. When you submit a public form, the current page path is added to that request. Queries and fragments are removed from submitted page and referrer URLs. The site does not create a random visitor or advertising identifier for this attribution.
Cloudflare Pages may inject its privacy-focused Web Analytics performance beacon. It reports page and performance measurements and is not used by BoxLinkTV for cross-site advertising profiles. Attribution is joined to a request only when you submit one of the public forms, so we can understand which landing pages or campaigns lead to completed request flows.
5. Browser storage
Session storage holds first-touch attribution until the browser session ends. Local storage can retain the light or dark theme preference on that browser. Cloudflare security services may use their own short-lived browser mechanisms when needed to deliver a challenge. This website code does not set advertising cookies or create an advertising identifier.
6. How information is used
- Receive, validate, route, and respond to the request you submit.
- Prepare trial, renewal, activation, custom-order, or support next steps.
- Prevent spam, fraud, abuse, and unsafe credential exposure.
- Diagnose delivery failures and improve the public request flow.
- Measure which landing pages and campaigns lead to completed requests.
- Meet applicable recordkeeping or legal obligations.
7. Service providers and disclosures
Information is processed by providers needed to host and secure the website, validate Turnstile, store and route request records, deliver support notifications, and handle any later payment selected by the customer. Information may also be disclosed when required by law or when necessary to protect the website, customers, or other people. This notice does not independently certify every downstream provider's business practices; questions about a specific request can be sent through the contact paths above.
8. Retention and security
The website does not expose a verified, fixed deletion schedule for all request, notification, and delivery systems. You can ask about a specific record or submit a deletion request through the contact paths above; the response depends on the systems involved and applicable legal or operational requirements.
The site uses HTTPS, access controls, input limits, honeypot fields, Turnstile validation, and restricted administrative endpoints. No internet transmission or storage system can promise absolute security.
9. Your choices and rights
You can avoid submitting a form, clear session or local storage in your browser, and contact BoxLinkTV about information linked to your request. Depending on where you live, applicable privacy law may provide additional rights. A response may require enough information to identify the relevant request and verify that the requester is authorized; this notice is not legal advice or a determination of which law applies.
10. International processing and children
Website and support providers may process data in more than one country. The site is intended for adults arranging an IPTV service or support request and is not directed to children. If you believe a child has submitted personal information, contact us so the report can be reviewed.
11. Changes to this notice
This notice will be updated when the public data flow or a material privacy practice changes. The date above identifies the current published version.
