Privacy Policy

Effective 2026-10-25

This policy explains what data the Prosto App app collects, why, and what you can do about it. It covers the app and the web account pages. Questions: prostoapp@outlook.com.

1. In short

Without an account, we keep nothing about you except our web server’s technical logs.
We don’t show ads, don’t run behavioural analytics and don’t sell or share your data.
Your media server’s sign-in details stay on your device, unless you choose to remember that server on all your devices (see section 2).
You can delete your account and all its data yourself, at any time.

2. What we store

Only if you create an account:

Account: your username, a hash of your password (scrypt — we never store or see the password itself) and your email address, if you gave one (it’s optional). We use the email only to send you a password reset link when you ask for one.
Profiles: each profile’s name and whether it is a kids’ profile. If you set a PIN for grown-up profiles, we store only its hash.
Devices: a device identifier, the platform and model the device reports, and the time of its last sign-in, so you can recognise it under “My devices”.
Sessions: a hash of the session token, not the token itself, and its expiry time.
Sign-in codes: a four-character code that lives for 10 minutes and is deleted as soon as it’s used.
Password reset links: a hash of the link’s token, not the token itself. It lives for 1 hour and is deleted as soon as it’s used or a new link is requested.
Your preferences, per profile: watchlist, likes and ratings, search history, app settings, the order of channels and menu items, and which announcements you’ve read.
Watch progress, per profile: what you watched and where you stopped, so you can continue on another screen.
Remembered media servers — only if you turn on “Remember on all your devices” when connecting a server (it is off by default). We then store the server’s address and name, your user name and user ID on that server, the name you gave it, and the access token your server issued to the app. Your server password is never sent to us. The token is encrypted (AES-256-GCM) with a key kept separately from the database, and it is only handed back to devices signed in to the same account, so they can connect without you typing the password again. It is deleted when you remove the server or delete your account.

Our web server also keeps technical logs (IP address, request time, page address without its parameters — so no search terms — and browser details). We need them for security and troubleshooting; they are limited in size and overwritten on a rolling basis. Sign-in attempts are also rate-limited by IP address to protect against password guessing.

3. What we don’t collect

Your media. Video plays directly between your device and your own server; we never see your files. We don’t use a remembered server’s token ourselves — we only keep it for your devices.
Advertising identifiers or trackers — the app has none.
Behavioural analytics. We don’t log what you do in the app.
Children’s data. The app isn’t directed at children. A parent can add a kids’ profile to their own account; for it we keep only the items listed in section 2 (its name, preferences and watch progress), and we don’t knowingly collect personal information from children.

4. Why we use it

Only to provide what you created an account for: signing you in on your devices, keeping your watchlist and history the same everywhere, separate profiles, and managing your list of devices.

Personal suggestions. For each profile, the home screen can show rows such as “You might like”, “Because you watched…” and “Your genre”. We pick them from our catalogue based on the titles that profile liked and finished watching. They are worked out on our server when you open the home screen, aren’t stored as a separate profile of your tastes and never leave our service. To change them, remove a like or a title from your history.

Apart from these suggestions, we don’t use your data for profiling, and never for advertising or sale.

Legal basis: performance of our agreement with you — without this data, the sync and suggestions you created an account for can’t work. Remembering a media server is based on your consent, which you give with the switch and can withdraw at any time by removing the server. Technical logs are kept on the basis of our legitimate interest in protecting the service from abuse.

5. Where and how it’s stored

Data is kept in a database on our dedicated server in the European Union and isn’t transferred outside it. All traffic between the app and our server uses HTTPS. Passwords and PINs are protected with scrypt, session tokens are stored as hashes, remembered server tokens are encrypted, and access to the server is restricted to keys.

6. Who we share it with

We don’t sell or pass your data to third parties and don’t use third-party analytics. We use one service provider: Brevo (Sendinblue SAS, France) delivers password reset emails. Only when you ask for a reset, it receives the email address and the email itself, and processes them on our behalf. Two things worth knowing about how your device talks to the outside world:

Trailers play in YouTube’s official player — while one plays, your device connects to Google and Google’s privacy policy applies. If you don’t play a trailer, no connection is made.
Your media server is contacted directly from your device; we don’t take part in that exchange.

Catalog metadata (descriptions, ratings, posters) is fetched from TMDB by our server and served to you from our own domain — your device doesn’t contact TMDB.

7. How long we keep it

Account data — for as long as the account exists.
App sessions — until you sign out or remove the device. Web account sessions expire after 30 days.
Remembered servers — until you remove the server or delete your account.
Sign-in codes — 10 minutes.
Technical logs — a short time: they are capped at about 30 MB per service, overwritten as newer entries arrive and never archived.
Backups — we back up the database daily and keep two copies: the latest one and the last one of the previous month. Data you delete disappears from them as they are replaced, at most 32 days later.

8. Your rights

See and change your profiles, preferences and remembered servers in the app.
Remove a device under “My devices” in your account; its session stops working immediately.
Delete your account with all its data yourself on the account deletion page. You’ll need your password; data is erased from our database immediately and permanently, with no 30-day wait (backup copies are replaced within 32 days — see section 7). If you’ve lost access to your account, email prostoapp@outlook.com.
You also have the right to a copy of your data (email us) and to lodge a complaint with a data protection authority.

9. Changes to this policy

Updated versions are published on this page with a new date. We’ll announce significant changes here before they take effect.