Privacy Policy
Last updated September 2026
Who we are
StreamZilla provides EU-hosted, accessible video hosting. We act as the data controller for your account data, as the data controller for the contact details of people who ask us about the product before they have an account, and as a data processor for the content you upload on behalf of your viewers.
Data we collect
Account data (name, email, billing address), the videos and assets you upload, self-collected playback analytics (views, watch-time, coarse device and country), and the contact details of people who enquire about the product without an account (see "People who contact us" below). We do not sell your data.
Where data is stored
All data is hosted within the EU on wind-powered infrastructure. Playback analytics are stored separately from account data.
Analytics & cookies
We store three first-party cookies and no others: one for authentication, one for your chosen language, and one remembering whether you collapsed the sidebar in the signed-in console. None is set before you act, and there is no advertising or third-party tracking. Playback analytics are derived server-side from video delivery (no tracking pixel or beacon), and country is coarse: it is taken from the delivery network when one is in front of playback, and otherwise worked out on our own servers from that address at the moment of the request using a geolocation database held locally, so the address is never sent to anyone. What we store is a one-way hash of the address, used only to tell repeat views apart, and the two-letter country; the address itself is not stored. Analytics are aggregated and attributed to the video owner, never used to profile individual viewers. This product includes GeoLite Data created by MaxMind, available from https://www.maxmind.com
People who contact us
If you ask us about StreamZilla before you have an account, for example on LinkedIn, by email or at an event, we record your name, your email address, your company if you told us, where the enquiry came from and a short note about the conversation, so that we can reply and follow it up. We also record you here when a member of our staff creates your account for you, so that our sales record and your account agree. Our lawful basis is our legitimate interest in responding to enquiries about our own product (GDPR Article 6(1)(f)). We do not buy contact details, we do not add to them from other sources, and we never sell them. Those fields are encrypted at rest, so a copy of our database does not reveal them. We delete the whole record 24 months after our last contact with you, or 24 months after we recorded it if we never spoke. You do not need an account to stop this: write to privacy@streamzilla.tv and we will stop contacting you. If you ask us to stop, we discard the note and your company at once and keep only your name and email address, so that we can be sure not to contact you again, and we delete that too 24 months after you asked. If you ask us to erase the record instead, we delete all of it.
Security logs
We keep a security log of the sensitive actions on the platform, such as signing in, changing a password, an administrator opening or closing an account, and a payment being confirmed. An entry records what happened, when, which account did it, and the IP address and browser the request came from; the address is stored encrypted and never in the clear, and where a sign-in was attempted for an address that has no account, that address is kept encrypted and removed after 90 days. Our lawful basis is our legitimate interest in keeping the service and your account secure (GDPR Article 6(1)(f)). We delete an entry 365 days after it is written, and after 90 days we remove the IP address and the browser, so the older part of the log holds no request details.
Your rights (GDPR)
You can access, export, correct, or delete your data at any time. Account deletion is available self-service from your account settings and erases your personal data subject to legal retention requirements. Encrypted backups of account data and play statistics are kept for at most six months, and of uploaded media for at most a month after a deletion; a deletion takes effect in the live systems at once, and we re-apply it to anything restored from a backup before that data is served again. You do not need an account to exercise any of these rights: if we hold your contact details because you enquired about the product, write to the address under Contact and we will act on your request, including your right to object to being contacted at all.
Sub-processors
We use a small number of EU sub-processors for transcoding, payments (Mollie), and email delivery. A current list is available on request and in your Data Processing Agreement (Enterprise).
Payment pages
No page of StreamZilla loads anything from a third party. Every script, stylesheet, font and image comes from our own EU infrastructure, so no other company can see that you visited us or what you looked at. When you pay, you are taken to the payment page hosted by Mollie to enter your card, which means your card details never reach our servers, and any cookie set there is set on that page rather than on ours.
Contact
For privacy questions or to exercise your rights, contact privacy@streamzilla.tv.