BBQ
GAMES
← All app policies

BBQ GAMES / POTICHOK · BROOK · REGATO

Potichok Privacy Policy

Updated: 1 November 2026
Yurii Krasnokutskyi · BBQ Games
poti4ok@bbq-games.com

Potichok (Потічок), also available under the names Brook and Regato, is an IPTV player published by Yurii Krasnokutskyi under the BBQ Games brand. This policy covers the Android/Android TV app, the Windows player and the account and device-activation service. You supply your own media sources.

Local media and settings

Playlist addresses, IPTV provider credentials, channel and programme information, favourites, viewing progress and history, parental controls and player preferences are stored on your device. Local subtitle files and selected media are accessed for playback. These lists, provider credentials and viewing history are not uploaded to the BBQ Games account or licensing server.

The app connects directly to the IPTV, playlist, programme-guide, artwork and media servers you select. They receive your IP address, requested URLs and any provider credentials needed for those requests. Their handling of that data is governed by their own policies. HTTP sources are supported; their traffic is not encrypted. Prefer HTTPS sources.

Accounts and device activation

When you register or sign in, our server processes your email address and account ID. Google sign-in also supplies a Google account identifier and verified email. Email/password sign-in stores a salted password hash, not your password. Verification and password-reset emails are delivered through our email provider.

Licence checks send a device identifier, platform, manufacturer, model, operating-system and app versions. On Android, the identifier is derived from Android ID using a hash; on Windows, a device licence identifier is used. The server stores first and last contact times, trial dates, activation and blocking status, and any account-to-device link. This supports device-specific access and prevents repeated use of the trial or purchase. Hashing does not make an identifier anonymous.

Sign-in and device pairing use session tokens and short-lived pairing codes. The Android app stores its account session in secure platform storage. Our account and licence API uses HTTPS. We do not receive your Google password.

Google Play purchases

Where Google Play billing is available, Google processes the payment. We receive and retain the purchase token, product and order identifiers, account/device association, purchase and refund status, timestamps, and the amount and currency returned by Google. We use these to verify payment, activate the selected device, complete purchase processing and reconcile refunds. We do not receive your full payment-card number or card security code.

Optional online services

If you search for subtitles, OpenSubtitles receives your IP address and the search information, such as a media title or film/series identifier, language, season and episode; downloading sends the selected subtitle file identifier. Your IPTV login and full playlist are not sent to OpenSubtitles by this feature. Downloaded subtitles may be cached locally.

If you use Google Cast, the selected receiver and Google Cast services process connection and playback information. The receiver receives the media URL and metadata needed to play it; a media URL may contain your provider credentials. Demo streams, when played, contact their external media hosts. Google and OpenSubtitles process data under their own policies.

Purposes, sharing and security

We process data to provide playback, accounts, device licences, support and payment handling; protect the service against abuse; and meet applicable legal obligations. Depending on the processing and applicable law, the basis is performance of the requested service, our legitimate interest in security and licence protection, a legal obligation, or consent where required.

Data needed for these purposes is handled by our hosting and email providers, Google services, and services you choose to contact. We may disclose data when required by law. Providers may process data in countries other than yours. We do not sell personal data or use the player for advertising or behavioural analytics. Server and network infrastructure may process IP addresses, request times and technical logs for operation and security. Access to administrative records is restricted.

Retention and deletion

Local data remains until you remove it in the player, clear app data or uninstall, depending on the platform. Removing a source does not necessarily clear all history or cached files. Exported files and copies held by other apps or media providers must be deleted separately.

Account sessions expire after 30 days; email confirmation codes after 15 minutes; TV pairing codes after 10 minutes. Expired account-session and email-code records are removed by the background worker. The account record is retained while the account exists.

Deleting an account removes its email, password hash, Google identifier, sessions and pairing entries. Licence records, account/device links and purchase records remain to maintain device activation, prevent token reuse, handle refunds and resolve payment disputes. A paid activation has no fixed expiry, and the current service does not automatically delete these retained licence and purchase records after a fixed period. Contact us to request review and erasure of data no longer needed; necessary legal, payment or fraud-prevention records may be retained with an explanation. Hosting logs and backups follow the hosting provider’s retention processes.

Your choices and privacy rights

You can delete your account in the player or at poti4ok.bbq-games.com/account/. Clearing app data or uninstalling does not delete a server account, cancel a Google payment or remove records held by external providers.

Contact us to request access, correction, a copy, deletion or restriction of your personal data, or to object to processing where applicable. You may withdraw consent where processing relies on it and complain to your local data-protection authority. We may need proportionate proof of ownership before acting; do not email passwords, full card details or purchase tokens.

Children and changes

The player is not designed specifically for children. A local parental-control feature does not make the service a children’s service. If you believe a child has provided personal data, contact us so we can review and address it.

We update this policy when features or processing change. The date above identifies this version. Privacy and deletion requests: poti4ok@bbq-games.com.