CTV Coptic Orthodox Channel is made up of the websites www.ctvinternational.org and www.ctvchannel.tv and the CTV mobile app, which share one account system. www.ctvinternational.org is operated by CTV International. www.ctvchannel.tv and the CTV mobile app are operated by CTV in Cairo, Egypt. In this policy, "we", "us" and "our" mean the operator of the service you use, or both operators where the Services are shared (see section 1). This Privacy Policy explains what information CTV Coptic Orthodox Channel collects when you use our websites and our mobile app, how we use, share, protect and keep that information, and the choices you have, including how to delete your account. Section 2 explains exactly what we do with the information we receive from Google when you use Sign in with Google.
If you have any questions about this policy or about your information, please contact us at ctvinternationalorg@gmail.com.
Summary of key points
Who we are. www.ctvinternational.org is operated by CTV International in the United States. www.ctvchannel.tv and the CTV mobile app are operated by CTV in Cairo, Egypt. Each of them is responsible for the personal information of the users of its own service. See Who we are and what this policy covers.
What this policy covers. The websites www.ctvinternational.org and www.ctvchannel.tv and the CTV mobile app for iPhone, iPad and Android. They all use the same account system and the same Sign in with Google setup.
Sign in with Google. If you sign in with Google, we keep only your name and email address from your Google Account. We use them only to provide your account and its features. We never sell them and never use them for advertising. See Google user data.
Donations. Donations are processed by Stripe. Your full card number never reaches our servers.
Public activity. If you comment on, reply to or like a post in our app or on www.ctvchannel.tv, your name and profile photo are shown publicly with that activity.
No selling, no ads. We do not sell your personal information and we do not use it to show you advertising.
CTV Coptic Orthodox Channel brings you CTV, a Coptic Orthodox Christian television channel, on two websites and a mobile app. On our websites and in our app you can watch our TV shows, hymns, sermons and documentaries, read the daily readings, Verse of the Day and Synaxarium, and support our ministry with donations.
This policy applies to the following services (together, the "Services"). The Services have two operators:
www.ctvinternational.org is operated by CTV International, 10S660 Kingery Hwy, Willowbrook, IL 60527, United States ("CTV International"). You can browse and watch without an account. An account lets you save videos, donate, keep your donation receipts and manage your profile.
www.ctvchannel.tv, the CTV Egypt website, is operated by CTV, Galaxo, Berket an Nasr, Al Salam First, Cairo, Egypt ("CTV"). It also offers live TV, show posts and community features such as comments, likes and polls.
The CTV mobile app for iPhone, iPad and Android is also operated by CTV. It appears on your device as "CTV" and is listed as "CTV Egypt" on the Apple App Store and as "CTV" on Google Play. You need an account to use the app.
All of these Services use one shared account system and the same servers (www.api.ctvinternational.org), which hold your account, your donations and your notifications. An account created on one of them works on the others, and all of them use the same Sign in with Google setup. CTV International and CTV share this account system and its servers under a joint arrangement in which each of them is responsible for the personal information of the users of its own service: CTV International for www.ctvinternational.org, and CTV for www.ctvchannel.tv and the CTV mobile app. If you use services of both operators, each of them is responsible for your information in its own service.
Whichever service you use, donations are processed through the same Stripe account, and donation receipts and the emails about your account, such as verification and password-reset codes, are sent in the name of CTV International.
In this policy, "we", "us" and "our" mean the operator of the service you use. Where this policy describes the Services together, or the shared account system and its servers, they mean both operators. Both operators can be contacted at the same email address (see section 16).
This policy is the current description of how we handle your information in all of these Services. If an older privacy notice in one of them says something different, this policy applies.
This policy does not cover services run by other companies that you reach through our Services, such as Google, Apple, Stripe, YouTube or Facebook. Their own privacy policies apply to them.
2. Google user data (Sign in with Google)
In short: If you choose Sign in with Google, Google shares your basic profile information with CTV Coptic Orthodox Channel. We keep only your name and email address. We use them only to provide your account and its features, and we never sell them or use them for advertising.
2.1 Where we offer Sign in with Google
You can choose "Sign in with Google" on www.ctvinternational.org, on www.ctvchannel.tv and in our mobile app (iPhone, iPad and Android). Signing in with Google is optional. You can instead create an account with your email address and a password or, in our iPhone and iPad app, use Sign in with Apple.
2.2 What we ask Google for
We request only Google's basic sign-in permissions (called "scopes"):
openid, which lets Google confirm who you are;
email (https://www.googleapis.com/auth/userinfo.email), which lets us see your email address;
profile (https://www.googleapis.com/auth/userinfo.profile), which lets us see your basic profile information.
We do not ask for access to your Gmail, Google Drive, Google Contacts, Google Calendar, YouTube account or any other Google service, and we never see your Google password. Our servers use YouTube's public data service, with our own key, only to look up details of public YouTube videos that our staff add to the Services. This never involves your Google Account.
2.3 What Google shares with us and what we keep
With these permissions, Google can share your name, email address, profile picture and Google Account ID (a number that identifies your Google Account). This is what we do with each of them:
Google user data
Do we keep it?
Email address
Yes. It is stored in your account and becomes your account's sign-in email address.
Name (first and last name)
Yes. It is stored in your account as your name. You can change it in your profile at any time.
Profile picture
No. We do not use or store your Google profile picture. Your profile photo in our Services is only a photo that you choose to upload yourself.
Google Account ID
No. We do not use or store it.
Google sign-in tokens (access token and ID token)
No. They are not saved in our database or in your account (see 2.6).
On our websites, Google's sign-in response first reaches our sign-in software, which runs on our website host, Vercel. That response includes your profile picture address and Google Account ID. They are discarded when the sign-in finishes and are never stored. Our server then asks Google only for your email address and your first and last name. Our mobile app sends our server only the temporary Google access token, and our server uses it to ask Google for the same information.
2.4 How we use Google user data
We use the name and email address we receive from Google only to provide your CTV Coptic Orthodox Channel account and the features you use:
Account and sign-in. The first time you sign in with Google, we create your account. If an account with the same email address already exists, we sign you in to that account. We then keep you signed in.
Your profile. We show your name in your profile, where you can change it.
Emails about your account. We send emails that relate to your account to this address, such as any password-reset codes you request. Donation receipts are sent to the email address that Stripe has for the payment, which can be this address because your Stripe customer record uses it (see 2.5).
Donations. We link your donations and receipts to your account through our payment processor, Stripe (see 2.5).
Community features. If you choose to comment on, reply to or like a post in our app or on www.ctvchannel.tv, we show your name with that activity. When you reply to someone's comment, the notification they receive shows your name.
Support and security. We use this information to answer you when you contact us and to protect your account and our Services.
We do not use Google user data for anything else. In particular, we do not:
sell or rent it, or transfer it to data brokers or information resellers;
use or transfer it for advertising, including personalized, retargeted or interest-based advertising;
use it to decide creditworthiness or for lending;
use it to develop, improve or train generalized artificial intelligence or machine-learning models;
use it for analytics, or send it to Google Analytics. (Crash reports from our app can contain your email address in the addresses of recent requests; see 2.5.)
2.5 Who we share Google user data with
We share the name and email address we receive from Google only when this is needed to run the Services:
The other operator. CTV International (www.ctvinternational.org) and CTV (www.ctvchannel.tv and the CTV mobile app) share one account system (see section 1), so the name and email address we receive from Google are available to both of them, whichever service you sign in to. Authorized staff of both operators can see them in our administration system (see 2.6). Each operator uses them only to provide your account and the Services, as described in 2.4.
Stripe, our payment processor. When your account is first created through Sign in with Google, we create a customer record at Stripe with your name, your email address and your account ID. We do this even if you never donate, so that any donations and receipts can be linked to your account. If you change your name or email address in your profile, we update the Stripe record. When you delete your account, we ask Stripe to delete it.
Other users and the public. Your name is shown publicly only next to the comments and replies you write and the posts you like in our app or on www.ctvchannel.tv. We never show your email address. See section 5.
Notification delivery services. When you reply to someone's comment, we send that person a notification that includes your name. It is delivered through Expo, Firebase Cloud Messaging (Google), Apple Push Notification service or the push service of their web browser.
Sentry, the crash-reporting service of our app. When our app sends an error report, the report includes the addresses of the app's recent requests to our servers. These addresses can contain your email address and, if you signed in with Google shortly before, the temporary Google access token (see 2.6). We use these reports only to find and fix problems in our app.
Service providers that host and run our Services for us. These are Vercel (our websites and website sign-in), DigitalOcean (our servers), our database hosting provider and Google's Gmail (which sends our emails). We use them only to provide these services to us.
Legal reasons and safety. We may share it if the law or a valid legal process requires us to, or if it is necessary to protect the rights, property or safety of our users, the public, CTV International or CTV, or to prevent fraud or abuse.
In any other case we will ask for your permission first. If the Services are ever transferred to another organization, for example in a merger, we will ask for your explicit consent before we transfer your Google user data.
2.6 How we store and protect Google user data
Your name and email address are stored in your account record in our database, on servers that our hosting providers operate for us. Our server also keeps a copy of your account record in its cache until the record changes or is deleted, or until the server restarts. Our request logs replace email addresses with a placeholder, but your email address can be recorded in our web server's error log when a request fails (see 3.3).
All connections between your device, our websites, our servers and Google are encrypted with HTTPS (TLS).
We do not save Google access tokens or ID tokens in our database. Our app keeps them only in your device's memory while you sign in. The access token gives access only to the basic profile information described in 2.3, and Google makes it expire after about one hour. Our websites send this token to our server inside the content of the sign-in request, not in its address. Our app currently sends it inside the address of the sign-in request. Our request logs leave out that part of the address, but the token can be recorded in our web server's error log if the sign-in request fails (see 3.3), and it may appear in app error reports (see 2.5).
On our websites, your sign-in session is kept in an encrypted cookie that your browser sends only over HTTPS. The session does not contain your Google tokens.
Only authorized staff of CTV International and CTV can see account records in our administration system. They use this access only to provide support, manage donations and receipts, respond to your requests and keep the Services secure.
Section 10 describes our other security measures.
2.7 How long we keep Google user data and how to delete it
We keep your name and email address for as long as your account exists. We do not automatically delete inactive accounts.
You can delete your account at any time. See section 9 or https://www.ctvinternational.org/how-to-delete-your-account. When you do, we delete your account record immediately, including the name and email address we received from Google, and we ask Stripe to delete your customer record.
Some records are kept after deletion: records of any donations you made (which include your name), Stripe's own payment records, copies of emails we sent you, and technical logs and backups until they are deleted or overwritten. See section 8.
You can also ask us to delete your data. Email ctvinternationalorg@gmail.com from the email address of your account. We handle these requests by hand and delete the same information as when you delete your account yourself (see section 9).
You can remove CTV Coptic Orthodox Channel's access to your Google Account at any time at https://myaccount.google.com/permissions. This removes the access you gave us. If you choose Sign in with Google again later, Google will ask for your permission again. Removing access does not delete your account or the information we already have; to delete those, delete your account as described above.
2.8 Limited Use
CTV Coptic Orthodox Channel's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
3. Information we collect
In short: We collect the information you give us, information from the sign-in service you choose, and some technical information that our websites, app and servers collect automatically.
3.1 Information you give us
Account information. If you register with email, we collect your name, email address and password. On our servers, we store your password only in hashed (scrambled) form. To confirm your email address, we email you a six-digit code that is valid for one hour. Our app and www.ctvchannel.tv also send us your device or browser language (English or Arabic) when you register or sign in, and we use it to choose the language of your notifications. If we have not received it, we use Arabic unless you choose a language in your settings.
Optional profile information. You can add your birthdate, gender (male or female) and country, and you can upload a profile photo. We store your photo as a small round image with our media provider, Cloudinary. You can change these details and remove your photo in your profile at any time. If you want us to remove your birthdate or another detail that you cannot clear yourself, email us.
Settings. We store your language (English, Arabic or your device's language), your theme (light, dark or your device's setting) and whether notifications are turned on.
Community activity (app and www.ctvchannel.tv). We store comments and replies you write, posts you like and your votes in polls. You can edit or delete your own comments and replies.
Saved items and followed shows. We store the videos and posts you save, and the shows you follow together with the type of notifications you chose for each show (all, posts, live or none).
Donations. When you donate, we record the amount and currency, the date, the payment status and, if you donated to a specific campaign post, that post. You enter your card details directly into Stripe's secure payment form, or you pay with Apple Pay in our iPhone and iPad app, or with Apple Pay or another payment wallet that your browser supports on www.ctvchannel.tv. When you pay with a wallet on www.ctvchannel.tv, the wallet also gives Stripe your name and email address. Stripe processes the payment and tells us the card brand, the last four digits of the card and the receipt number. We never receive or store your full card number, expiry date or security code. You need an account to donate. Donation receipts are sent in the name of CTV International, whichever service you donate on (see section 1).
Messages you send us. Our contact forms collect your name, email address and message. In our app and on www.ctvchannel.tv you can also give a phone number (optional) and send a "live message" to the program that is on air. You do not need an account to send a message.
Apple (iPhone and iPad app only). If you use Sign in with Apple, Apple gives us an identifier for your Apple Account and a sign-in token. We use the token only to confirm your sign-in and accept it only while it is valid. We do not save it in our database. The first time you sign in, Apple also gives us your name and email address. If you choose to hide your email address, Apple gives us a private relay address that forwards to your email. We store the Apple identifier, your name and your email address in your account. If you do not share your name, we use "Apple User". Because Apple shares your name and email only the first time, our app also keeps them in your device's secure storage so that they can be sent again later.
Accounts created with Facebook. Earlier versions of our Services offered Facebook Login. We have removed it, and we no longer receive information from Facebook. If you created your account with Facebook, the name and email address we received from Facebook remain part of your account information until you change them or delete your account. You can still use your account: sign in with Google or, in our iPhone and iPad app, use Sign in with Apple (choose Share My Email), with the same email address. You can also use Forgot Password? to set a password, then sign in with your email address and that password. If you cannot sign in, email us at ctvinternationalorg@gmail.com from the email address of your account.
3.3 Information collected automatically
Push notification tokens and device identifiers. Our app, and www.ctvchannel.tv in your browser, ask for your permission to send notifications. If you allow them while you are signed in, we store:
a push token (an Expo push token in the app, or a web push subscription in your browser);
your notification language;
a device identifier that prevents duplicate registrations. On Android this is the Android ID. On iPhone and iPad it is a random identifier that our app creates. On www.ctvchannel.tv it is a browser identifier generated by our provider Fingerprint.
Server logs. When your browser or app connects to our servers, we automatically record:
your IP address;
the date and time;
the address of the request, without its query string (the part after "?") and with any email address in it replaced by a placeholder, so your email address, one-time verification codes and the sign-in tokens that our app sends are not recorded in these logs;
the result and response time;
in our web server's logs, your browser or app type.
If a request fails, our web server's error log can also record the full address of that request, including any email address in it and its query string, which can contain a one-time verification code or a sign-in token that our app sends. We keep server logs for up to about two weeks (see section 8). We also use IP addresses, and a count of failed sign-ins for each account's email address that we keep for up to about 15 minutes, to limit repeated failed sign-in attempts.
Website analytics. Both websites use Google Analytics. It collects the pages you visit, how you arrived at our site, your browser and device type, your approximate location (based on your IP address) and identifiers stored in Google Analytics cookies. The page addresses it receives do not contain your email address or the codes that identify your payments and your customer record at Stripe.
App crash reports and session replays. Our app uses Sentry to diagnose crashes and errors. When something goes wrong, Sentry receives error details, your device model, operating system and app version, a record of recent activity in the app (such as screens visited, taps and addresses of network requests) and may receive your IP address. Sentry also records a replay of the app screens in about 10% of sessions and in sessions where an error occurs. Text and images in these replays are masked.
App updates. When our app starts, it asks Expo's servers whether an update is available. Expo receives standard technical information about this request, such as your IP address, your device platform and the app version.
your precise (GPS) location, your contacts, or recordings from your camera or microphone;
your full payment card number, expiry date or security code;
your Google, Apple or Facebook password;
any content of your Gmail, Google Drive, Google Contacts, Google Calendar or YouTube account.
Our app does not use your location, contacts, camera or microphone. When you choose a profile photo, the app opens your device's photo picker, and we receive only the photo you select.
4. How we use your information
In short: We use your information to provide the Services, to process donations, to communicate with you about your account, and to keep the Services working and secure.
Accounts and sign-in. We create and manage your account, sign you in with email and password, Google or Apple, confirm your email address, and let you reset your password or change your email address.
Features. We let you watch and save videos, follow shows, comment, reply, like, vote in polls, and manage your profile, language and theme.
Donations. We use your information to:
process your donations;
email you receipts and let you download PDF receipts;
show your donation history;
track the progress of donation campaigns;
tell you when a donation succeeded or when a campaign you supported reached its goal.
Notifications. We keep your 10 most recent notifications in your notification list in the Services. If you allow notifications on your device or browser, we also send them there. Notifications cover:
new posts from shows you follow;
a reminder about 10 minutes before a followed show goes live;
replies to your comments;
the end of polls;
donation updates;
announcements from CTV Coptic Orthodox Channel.
Messages. We read and answer your contact messages and live messages.
Service emails only. We send email verification codes, password-reset codes and donation receipts. We do not send marketing emails or newsletters.
Improving the Services. We use Google Analytics to understand how our websites are used and Sentry to find and fix problems in our app.
Security. We use your information to protect accounts, prevent fraud and abuse, and investigate problems. Stripe also uses payment information to prevent fraud.
Legal obligations. We use your information to keep financial records of donations, to comply with the law and to enforce the terms of the service you use: the Terms of Use of www.ctvinternational.org, or CTV's Terms and Conditions for www.ctvchannel.tv and the CTV mobile app.
We do not sell your personal information. We do not use it to show you advertising, and we do not place advertising networks in our websites or app. YouTube videos are played in YouTube's own player, and YouTube may show its own ads in them (see section 7). We do not make decisions about you that are based solely on automated processing and have legal or similarly significant effects.
5. What other people can see
In short: Comments, replies and likes in our app and on www.ctvchannel.tv are public and show your name and profile photo.
Comments, replies and likes. When you comment on, reply to or like a show post in our app or on www.ctvchannel.tv, we store your name, your profile photo (if you have one) and your account ID with it. Anyone who views the post can see your name and photo, including people who are not signed in. Your account ID is included in the post data that our websites and app download.
Replies. When you reply to a comment, the author of that comment receives a notification with your name and profile photo.
Poll votes. Our websites and app show only vote totals. However, the post data they download includes the account IDs of voters, and your account ID is also included, together with your name, with any comment, reply or like you have made (see the first point).
Profile details of an account. Our websites and app do not show your birthdate, gender or country to other users, and our servers do not give them to other users.
Profile photos. Your profile photo is stored by Cloudinary at a public web address.
Not shown with your activity. Your email address is never shown to other users. Your birthdate, gender and country are not shown with your comments, replies or likes. Donor names are not shown publicly.
You can edit or delete your comments and replies, remove your likes and remove your profile photo at any time.
6. Who we share your information with
In short: We share information only with the other operator of the shared account system, with the service providers that help us run the Services, with the public when you post publicly, and when the law requires it. We do not sell it.
We use these service providers. Each receives only the information it needs for the job described:
Provider
What it does for us
Information it receives
Stripe
Processes donations (cards; Apple Pay in our iPhone and iPad app; Apple Pay and other browser payment wallets on www.ctvchannel.tv) and keeps customer records.
For every account with a confirmed email address (including accounts created with Google or Apple): your name, email address and account ID. For donations: amount and currency, plus the card details you enter directly into Stripe's form. Stripe sends us back the card brand, last four digits and receipt number. If you pay with a wallet on www.ctvchannel.tv, the wallet also gives Stripe your name and email address. Stripe's script collects information about your browser and device to prevent fraud and sets fraud-prevention cookies. It runs on every page of www.ctvchannel.tv and on the donation pages of www.ctvinternational.org.
Google
Sign in with Google; Google Analytics on our websites; Gmail, which sends our emails; Firebase Cloud Messaging, which delivers app notifications on Android; the YouTube video player; Google Fonts.
Sign-in information (section 2). Website usage information. The email address, name and content of emails we send you. Push tokens and notification content. Your IP address and device information when videos or fonts load.
Apple
Sign in with Apple and Apple Push Notification service (iPhone and iPad app), and Apple Pay (iPhone and iPad app, and www.ctvchannel.tv in supported browsers).
Sign-in identifiers and tokens, payment authorization, push tokens and notification content.
Vercel
Hosts our websites and runs website sign-in.
Website traffic, including your IP address. Sign-in information on its way to our servers. Session cookies.
All information sent to our servers, including your IP address and our server logs.
Our database hosting provider
Stores our database.
The account and Service information described in this policy.
Cloudinary
Stores and delivers profile photos and other images and videos.
Your profile photo, and your IP address when images load.
Expo
Delivers app notifications and app updates.
Push tokens and notification content, which can include another user's name and photo. Technical information when the app checks for updates.
Sentry
App crash reports and masked session replays.
Error details, device and app information, recent app activity (including the addresses of recent requests to our servers, which can contain your email address, a one-time verification code or a temporary sign-in token), masked screen recordings and possibly your IP address.
Fingerprint
Identifies your browser on www.ctvchannel.tv when you turn on notifications.
Browser and device characteristics and your IP address.
Web browser push services (for example Google, Mozilla, Apple and Microsoft)
Deliver notifications on www.ctvchannel.tv.
Your push subscription address and encrypted notification content.
Live-stream host (ctv.icopts.app)
Streams our live TV channels in our app and on www.ctvchannel.tv.
Your IP address and device or browser information.
Mailjet and Amazon Web Services
Host images shown in our emails.
Your IP address and email app information when your email app loads the images.
For legal reasons and safety. When the law, a court order or another valid legal process requires us to, or when it is necessary to protect the rights, property or safety of our users, the public, CTV International or CTV, or to prevent fraud or abuse.
If our organization changes. If the Services are transferred to another organization, for example in a merger, your information may be transferred as part of that change. It will continue to be protected as described in this policy. For Google user data, we will ask for your explicit consent first (see 2.5).
With your consent. In any other case, we will ask for your permission first.
CTV International and CTV share one account system (see section 1), so the information in it is available to both of them, whichever service you use. Authorized staff of CTV International and CTV can see account, donation and message records in our administration system. They use this access only to run the Services, provide support and respond to your requests.
7. Cookies and similar technologies
In short: We use cookies to keep you signed in and to protect sign-in, Google Analytics uses cookies to measure website use, and Stripe, Fingerprint and YouTube set their own cookies. We do not use advertising cookies ourselves, but YouTube may use its cookies for advertising.
Cookies on www.ctvinternational.org and www.ctvchannel.tv:
Cookie
Set by
Purpose
How long
__Secure-next-auth.session-token
Us
Keeps you signed in. The cookie is encrypted and is sent only over HTTPS.
About 30 days, or until you sign out
__Host-next-auth.csrf-token
Us
Protects sign-in against cross-site request forgery.
Protect Sign in with Google against forgery while you sign in.
15 minutes
_ga, _ga_<ID>
Google Analytics
Tell visits apart and measure how our websites are used.
Up to 2 years
__stripe_mid, __stripe_sid
Stripe
Prevent fraud. Set on every page of www.ctvchannel.tv and on the donation pages of www.ctvinternational.org.
Set by Stripe
_vid
Fingerprint
Identifies your browser so that your notification registration is not duplicated. Set only on www.ctvchannel.tv, after you turn on notifications.
Set by Fingerprint
YouTube cookies
YouTube (Google)
Set by YouTube when its video player loads on pages with YouTube videos. YouTube may use them for advertising and may show ads in videos.
Set by YouTube
Other storage on your device:
Both websites keep a copy of the email address you type when you sign in with your email address and password. They keep it in your browser's session storage so that they can fill it in again, or confirm your email address, if the sign-in does not succeed. Session storage belongs only to that browser tab and is cleared when you close the tab, and the websites delete this copy once you are signed in.
www.ctvinternational.org also keeps the details of a donation payment you have started in session storage, so that its payment page still works if you reload it. These details are the amount and the codes that identify the payment and your customer record at Stripe. The site deletes them when the payment succeeds or when you sign out, and they are also cleared when you close the tab.
www.ctvchannel.tv also uses your browser's local storage for your settings and your notification subscription. Earlier versions of the site also kept details you typed into its pop-up windows in local storage, including the email address and password you registered with. The current version deletes these details from your browser the next time you visit the site. When you turn on notifications, Fingerprint's script runs in your browser and stores its identifier (_vid) in a cookie and in local storage. The site also installs a service worker, which receives notifications and stores site files and copies of public content, such as pages and images, so that the site loads faster. It does not store responses from our application servers or pages that contain your sign-in session or account information. Earlier versions of the service worker also kept temporary copies of responses from our servers and of some pages, which could include your account information. The current version deletes these copies the next time you visit the site.
Our app stores on your device:
your sign-in tokens for our Services and when they expire;
your language;
a copy of your account information.
On iPhone and iPad, the app also keeps its device identifier and, if you use Sign in with Apple, your Apple name and email address in your device's secure storage.
You can block or delete cookies in your browser settings. If you block our session cookie, you will not be able to sign in. To stop Google Analytics from collecting information about your visits, you can use Google's opt-out browser add-on at https://tools.google.com/dlpage/gaoptout.
8. How long we keep your information
In short: We keep your account information until you delete your account. Some records, such as donation records, are kept after that.
Information
How long we keep it
Account information, including name and email address (also when received from Google or Apple)
Until you delete your account. We do not automatically delete inactive accounts.
Profile photo
Until you remove or replace it, or delete your account.
Comments, replies, likes, poll votes, saved items and followed shows
Until you remove them or delete your account.
Notification list
Your 10 most recent notifications.
Push notification tokens
Until you sign out of that device or delete your account. When you turn notifications off, we disable them. We remove web push subscriptions that stop working.
Website sign-in session
About 30 days, or until you sign out.
Sign-in tokens on our server
They expire automatically, currently after about one month, and are deleted when you sign out. When your account's email address changes, we delete the tokens issued for the earlier address, which ends your sign-in sessions on all your devices. When your account is deleted, we also delete its tokens (see section 9).
Email verification and password-reset codes
One hour, and deleted as soon as they are used.
Count of failed sign-ins for an account's email address
Up to about 15 minutes, and deleted when you sign in.
Donation records (your name, amount, currency, date, status, card brand, last four digits and receipt number)
Kept after you delete your account, because we need them for accounting, tax and legal purposes. Stripe keeps its own payment records under its own legal obligations.
Contact messages and live messages
Until we delete them. They are not linked to your account, so deleting your account does not delete them. Email us to ask us to delete them.
Copies of emails we sent you
In the sent folder of our email account until we delete them.
Server logs
Up to about two weeks. Our server logs are rotated automatically and older log files are deleted. Deleting your account does not immediately delete them.
Analytics data, app crash reports and backups
For the periods set in our server configuration and our providers' settings, until they are deleted or overwritten. Deleting your account does not immediately delete them.
9. How to delete your account and your data
In short: You can delete your account yourself on any of our websites or in our app, or you can ask us by email.
If you created your account with Google or Apple, you do not need a password: sign in with Google or Apple. If you created it with Facebook, sign in as described in section 3.2. Then follow these steps:
www.ctvinternational.org: sign in, open your profile menu at the top of the page, choose View Profile, then Edit Profile, then Delete Account, and confirm.
Our app: sign in, open Settings, tap Delete Account and confirm.
www.ctvchannel.tv: sign in, open your profile's Settings, choose Delete Account and confirm.
By email: write to ctvinternationalorg@gmail.com from the email address of your account and ask us to delete it. We handle these requests by hand: we delete your account and the same information listed under "What is deleted" below, and we tell you when this is done. We may ask you to confirm the request first.
What is deleted. Deleting your account is immediate and permanent. We cannot restore your account afterwards. We delete:
your account record: name, email address, password, optional profile details, settings and notification list;
your profile photo at Cloudinary;
your customer record at Stripe (we ask Stripe to delete it);
your comments and replies, including replies that other people posted under your comments;
your likes, poll votes, saved videos and posts, and followed shows;
notifications about your activity in other users' notification lists;
your push notification tokens;
your sign-in tokens on our server.
The same information is deleted when our staff delete an account, for example when you ask us to by email.
What is kept. We keep the records listed in section 8:
donation records, which include your name;
Stripe's own payment records;
contact messages and live messages;
copies of emails we sent you;
server logs, analytics data, crash reports and backups until they are deleted or overwritten;
sign-in tokens issued for an earlier email address of your account, if the address was changed before we started deleting these tokens at every email change in October 2026. Email us and we will delete them.
Google and Apple access. Deleting your account does not change the settings of your Google or Apple account. To remove our access to your Google Account, visit https://myaccount.google.com/permissions. To stop using Sign in with Apple with our app, use the Sign in with Apple section of your Apple Account settings on your device.
10. How we protect your information
In short: We use technical and organizational measures to protect your information, but no system is completely secure.
All connections to our websites and servers use HTTPS (TLS), and our websites and servers tell browsers to always use HTTPS.
On our servers, passwords are stored only as bcrypt hashes and never in readable form. Accounts created with Google or Apple have a random password that nobody knows.
Card details are entered directly into Stripe's payment form or a payment wallet such as Apple Pay and never reach our servers.
We do not save Google sign-in tokens in our database (see 2.6).
Website sign-in sessions are kept in encrypted cookies that are sent only over HTTPS.
Our servers check user roles before giving access, so only authorized staff can use the administration system. They also validate all requests, filter common attacks such as script and database injection, and limit repeated failed sign-in attempts.
Email verification and password-reset codes expire after one hour.
On your phone, our app keeps your sign-in tokens in its own app storage. Please keep your device locked and up to date.
No method of sending or storing information over the internet is 100% secure. We cannot guarantee absolute security. If you think your account has been compromised, please contact us right away.
11. Your choices and privacy rights
In short: You can view, change and delete your information, and depending on where you live, you may have more rights.
11.1 Choices available to everyone
View and update your name, email address, password, optional profile details and photo in your profile. Changing your email address requires confirming the new address.
Edit or delete your comments and replies, remove likes, unsave items and unfollow shows.
Turn notifications on or off in the Services or in your device or browser settings, and choose the type of notifications for each show you follow.
a copy of the personal information we hold about you;
a correction or deletion of your information;
an objection to, or a limit on, how we use it.
To protect your account, we will ask you to write from your account's email address, or we will confirm your identity in another way. We will respond as required by the law that applies to you.
11.2 European Economic Area, United Kingdom and Switzerland
If data protection laws of the European Economic Area, the United Kingdom or Switzerland apply to you, we rely on these legal bases:
Contract. We need your information to provide your account, sign-in (including Sign in with Google), donations, receipts and the features you ask for.
Legitimate interests. We use your information to keep the Services secure, prevent abuse, understand how our websites are used, fix app problems and run community features.
Consent. We rely on your consent for push notifications and for the optional profile information and photo you choose to give us. You can withdraw your consent at any time.
Legal obligation. We keep donation records and respond to lawful requests.
You have the right to access, correct, delete, restrict, object to and receive a copy of your personal information, and to withdraw consent. You also have the right to complain to your data protection authority:
California Civil Code Section 1798.83 ("Shine the Light") lets California residents ask which personal information a business disclosed to third parties for their own direct marketing purposes. We do not disclose personal information to third parties for their direct marketing purposes.
If you are under 18, live in California and have an account, you can ask us to remove content you posted publicly in the Services. You can also delete your comments and replies yourself. To ask us, email us from your account's email address and say that you live in California. We will remove the content from public view, but copies may remain in our backups until they are deleted or overwritten.
12. Children's privacy
The Services are meant for a general audience and are not directed specifically at children. We do not check the age of people who create an account, and giving your birthdate is optional. The Terms of Use of www.ctvinternational.org require users who are minors where they live (generally under 18) to have the permission of a parent or guardian. Children under 13 should not create an account or give us personal information without the consent of a parent or guardian. If we learn that we have collected personal information from a child under 13 without such consent, we will delete it. If you believe this has happened, please contact us at ctvinternationalorg@gmail.com.
13. International data transfers
CTV International is based in the United States, and CTV is based in Egypt. Our service providers store and process information in the United States and in other countries, including the European Union. For example, the website sign-in for www.ctvinternational.org currently runs in the United States, and the website sign-in for www.ctvchannel.tv currently runs in Germany. If you use the Services from outside the United States, for example from Egypt, the European Economic Area or the United Kingdom, your information will be transferred to and processed in the United States and these other countries. Because the operators share one account system, your information can also be accessed from Egypt by CTV and from the United States by CTV International, whichever service you use. The data protection laws there may be different from the laws where you live.
14. Do-Not-Track signals
Some browsers and devices can send a Do-Not-Track ("DNT") signal. There is no common standard for how to respond to these signals, so we do not currently respond to them. If such a standard is adopted and we follow it, we will describe it in an updated version of this policy.
15. Changes to this policy
We may update this policy from time to time. We will post the new version on this page and change the "Last updated" date at the top. If we make important changes, we will tell you before they take effect, for example with a notice on our websites or in our app, or by email. Before we use Google user data in a way that this policy does not describe, we will update this policy and ask for your consent.
16. How to contact us
If you have questions or requests about this policy or your information, email us at ctvinternationalorg@gmail.com. This is the contact email address of both operators. You can also write to the operator of the service you use:
www.ctvinternational.org
CTV International
10S660 Kingery Hwy
Willowbrook, IL 60527
United States
www.ctvchannel.tv and the CTV mobile app
CTV
Galaxo, Berket an Nasr, Al Salam First
Cairo
Egypt