Aroma IPTV privacy policy
Last updated 31 August 2026
The fields checkout asks for, and why each one exists
Six: your name, your email address, your phone number, your country, the plan you chose and how many screens you want playing at once. The email address is where the credentials land and is the only field the service genuinely cannot work without. The phone number exists because a good proportion of this brand’s support happens over WhatsApp and an order number matched to a number is faster than twenty minutes of questions. The country decides which currency the payment page quotes and which channel groups the line opens with. Nothing here asks for a device identifier, a set-top box MAC address or a portal address, because this service has no portal route at all - the line is Xtream Codes credentials and nothing else.
What the site records while you use it
An order writes a row for the order itself, a row for the resulting subscription and the server credentials issued for it. Signing in or placing an order also writes a short event line - what happened, when, and a one-way hash of the address it came from rather than the address itself. There is no analytics script on these pages, no advertising pixel and no record anywhere of which channels a line watches: the viewing happens between your player and the streaming server, and this website is not in that path.
Card details never reach this site
Payment is taken on the provider’s own hosted page, not on a form served from aroma.iptv.ad. What comes back to this site afterwards is a reference and a status word saying whether the payment settled. No card number, expiry or security code is received here, which means none can be stored here and none can be leaked from here. Your statement may show a figure converted into your own currency by the provider rather than the dollar price on the plan page.
One cookie
One cookie is set, and not until you sign in or begin an order. What it carries is a random session token - no name, no address, nothing readable; it is marked HttpOnly so page scripts cannot read it and Secure so it never travels unencrypted. Its name is specific to this hostname, so it cannot collide with a session from any other site. Clearing it signs you out and costs nothing else. There is no consent banner on this site because there is nothing to consent to.
Who else sees your details
Two parties, both because the order cannot complete without them. The payment provider receives what it needs to take the payment. The activation system that builds your line receives a reference to the order so the right plan length is applied. Support messages you send are read by the people who run this deployment. Nothing is sold, rented, traded or passed to advertisers, and no mailing list is built out of customer addresses.
How long records are kept
Order and subscription rows stay while the account exists, because they are what lets support answer a question about a line bought eight months ago and what an accountant needs at the end of a year. Event lines are operational rather than historical and are pruned as they age. Request deletion of the account and that is done, save for the minimum transaction record a business is required to keep.
Asking for your data, or its removal
Send the request through the contact form from the address the account was opened with, or over the WhatsApp line published on that page with the order number to hand. Using the registered address is what proves the request is yours, and it is the reason no request of this kind is actioned from an address the account has never used.
Security
HTTPS covers this hostname end to end, forms included. What we hold against an account password is a one-way hash, and nobody can turn that back into the password - us included - so a forgotten one is issued afresh rather than looked up. Order records filed under your ARMA- number are opened only by the staff answering support here.