Privacy

Sipario has no Sipario sign-in accounts, advertising, tracking cookies, or automatic playback/crash reporting. App settings, source credentials, and viewing history stay on your device unless you use encrypted pairing/library sync or enable an external integration such as Trakt or Simkl. External integrations have their own data handling.

The native apps store the sources you configure, provider credentials, preferences, favorites, and playback progress on your device. They contact the providers and media hosts you choose, so those providers receive normal request data such as your IP address and the resource requested. Sipario does not receive those media requests.

Platform backup, Keychain, and app-container behavior is controlled by macOS, Android TV, Windows, and tvOS. Remove data with the app’s reset/remove-source controls or by uninstalling the app.

Pairing stores a hashed bucket identifier and end-to-end encrypted setup payload for up to 10 minutes. A successful read deletes the payload. The pairing code and encryption key never reach the relay.

Optional library sync stores one end-to-end encrypted document under a hashed 256-bit sync identifier. Its sliding retention period is 90 days. The relay can see the bucket hash, ciphertext size, timing, and ordinary network metadata, but cannot decrypt the document.

Connecting Trakt authorizes Sipario to send title identifiers, playback activity and progress to Trakt and to read/sync your account’s playback/history data, including Continue Watching. Trakt receives this information linked to your Trakt account under its own privacy policy. Authorization tokens are stored locally.

Disconnect Trakt in Settings to remove this device’s connection and stop future synchronization. Disconnecting does not erase history already held by Trakt; manage that through your Trakt account.

Connecting Simkl sends title identifiers, playback activity/progress, watched changes and Library additions to your Simkl account. Sipario reads its watched history, plan-to-watch list and paused playback. Simkl receives ordinary request metadata, including your IP address, under its own privacy policy. Tokens, the downloaded library and pending updates use Android Keystore-backed encryption. Pending updates retry while the app is running. Trakt can stay connected; imported Library titles and progress can participate in other sync services you enable.

Disconnect Simkl in Settings to delete this device’s token, cached Simkl library and pending updates, and stop future requests. Local Library/resume entries remain. Disconnecting or hiding a title does not delete history held by Simkl; manage that in your Simkl account.

Raw crash logs remain on your TV. Settings lets you preview a separate report with app/device information and crash types/stack locations, excluding exception messages, source settings and viewing history. Sharing only occurs when you request it and choose a destination; that app and recipient then handle the report. Nothing is uploaded automatically.

The public website records aggregate page views without cookies. It derives a salted, truncated SHA-256 value from IP address and user agent; the unique-visitor marker expires after 30 days. Raw IP addresses are not stored by this counter.

App-download links similarly keep a salted, truncated fingerprint, first/last download times, repeat count, platform, and Cloudflare country code for up to 180 days. Bots and common monitoring tools are excluded. Aggregate totals may be retained longer.

If you join the beta, Sipario stores the email address and any name, device, platform choices, notes, or source label you submit, plus submission dates and user agent. The list is used only for beta invitations and updates for your selected platforms and is protected by an administrator token. It is retained while the beta is active or until you request removal.

Sipario uses TMDB for title metadata and Rotten Tomatoes pages for rating consensus. Native apps may contact Cinemeta and configured addons for catalog/search data, OpenSubtitles or subtitle addons for subtitle candidates, RatingPosterDB for artwork, and YouTube for trailers. Optional IntroDB requests fetch episode skip timestamps. These services receive requested search terms or title identifiers, credentials where applicable, and ordinary network metadata under their own privacy policies.

Downloads are hosted by GitHub Releases. Cloudflare serves sipario.tv and its encrypted relays; both providers process standard web-request metadata as infrastructure operators.

• Media bytes, stream URLs, or a server-side viewing history.
• Source credentials in plaintext.
• Advertising identifiers or cross-site profiles.
• Microphone, camera, or precise location data.

Reset or uninstall an app to remove its local data. To leave the beta list or ask about aggregate website records, use the contact listed on the DMCA / takedown page. Pairing payloads expire automatically; stopping sync on all participating devices and waiting 90 days expires its relay document. External services retain data according to their policies; disconnecting an integration does not delete previously synchronized data from that service.

Material changes to these data flows will be reflected here before or with the corresponding release.