Privacy Policy

You have landed on a page that typically gets skipped more than any other. So let us keep it short: at StreamFix you do not need an account, registration, or password. We do not sell your data, we do not run our own store, and we do not maintain any user database.

The only place where we actively collect your name and email address is the contact form. When you write to us, we store the message so we can reply. Normal browsing of the site is otherwise anonymous. We measure aggregated traffic, a country code (not your full IP address), and within a single session we remember a random ID that does not lead back to you.

The data controller as defined in Article 4(7) of the General Data Protection Regulation (the „GDPR”) is LISTIFY s.r.o., a Czech trading company that operates the StreamFix website.

Given the scope and nature of our processing, we are not required under Article 37 GDPR to appoint a Data Protection Officer (DPO). Privacy questions are handled by company management directly, and emails sent to privacy [at] streamfix.io are answered personally.

Depending on whether you are just browsing or actively using a feature, we process one or more of the following three categories. We keep them clearly separated so you can see exactly where the line runs between anonymity and identification.

A. Anonymous operational data (no identification)

These items are collected every time you open any page on StreamFix. They do not point to any specific person.

B. Contact form data (identifying)

This is the only place on the entire site where we willingly collect data you can be identified by.

C. Security logs (only during specific events)

Short-term records that appear in well-defined situations and serve exclusively to defend against abuse.

Every processing activity has a specific legal basis under Article 6 of the GDPR. Here is the exact mapping.

Every data category has a clearly defined time after which it is automatically deleted or overwritten. No „keeping it just in case we might want it someday.”

Data from the contact form is seen only by us, meaning the management of LISTIFY s.r.o. To run the website, we rely on several technical providers who, in relation to personal data processing, qualify as processors under Article 28 GDPR. We have a Data Processing Agreement (DPA) in place with each of them.

We do not sell personal data. We also do not pass it to data brokers. The only sharing with third parties happens with the marketing pixels above, and only based on your explicit consent.

Whenever possible, data stays in the EU. PostHog runs on the European instance, the Neon database lives in a Frankfurt data center. For providers with servers in the USA as well (Vercel, Resend, Sentry, marketing pixels), data may be transferred outside the European Economic Area.

All of these transfers are covered by two independent safeguards:

For specific guarantees for a specific provider, email us at privacy [at] streamfix.io. We are happy to share a copy of the relevant clause.

Cookies, localStorage, and sessionStorage are technical storage in your browser. We dedicate a separate document to them because they deserve their own table and a full explanation of how the cookie banner behaves by region.

In short: we use four cookie categories.

StreamFix invests in advertising so we can show the right guides and reviews to the right people. When you click an ad, it makes sense that the ad network wants to know whether something came of your visit. That is what marketing pixels do.

If you are in the strict mode (EU, UK, EEA, Switzerland, Brazil) and do not accept cookies, the ad networks receive no data from StreamFix whatsoever. If you later withdraw consent (the 🍪 icon in the footer), the pixels stop loading on your next visit.

As a data subject under the GDPR and Czech Act No. 110/2019 Coll., you have the rights listed below. You can exercise them by email at privacy [at] streamfix.io. We reply within 30 days at the latest, usually within 5 business days.

To verify your identity when you exercise a right, we may ask for an extra detail (such as the original email address the message came from). We do this only so we do not hand your data to a third party. Exercising a right is free, except for manifestly unfounded or disproportionate requests under Article 12(5) GDPR.

We take technical and organizational safeguards seriously. These are not marketing clichés, they are concrete measures we stick to.

If we were to detect a security incident affecting personal data, we follow Articles 33 and 34 GDPR: we notify the supervisory authority within 72 hours and, if the risk is high, we notify you directly.

StreamFix is not directed at people under the age of 16. We do not target minors and do not knowingly collect data about them.

If someone under 16 sends us a message through the contact form, we delete it and any attachments without undue delay once we become aware. If you are a parent or guardian and believe your child has submitted data through our form, email us at privacy [at] streamfix.io. We will delete the data within 5 business days at the latest.

We do not use your data for automated decision-making or profiling within the meaning of Article 22 GDPR. No algorithm on our side decides what price you see, which product you are shown, or which ads you receive based on your identity.

The order of VPN recommendations and the displayed prices are driven only by country, platform, and the general visitor population for that region. They have nothing to do with who you specifically are.

We update this policy regularly, whether because we ship a new feature, switch a processor, or the law changes. The last-updated date is always shown at the top of this page.

For general feedback on the site, the content, or suggestions for new platforms, use the form at streamfix.io/en/contact.