Privacy policy
Controller: [operator name - set in Admin → Server] · Contact: [contact email - set in Admin → Server]
What we collect, and why
| Data | Purpose | Legal basis (GDPR) |
|---|---|---|
| Account: username, email (optional), password (stored only as a hash), plan, timestamps | Provide your account and log you in | Contract (Art. 6(1)(b)) |
| qBittorrent address, login and settings you enter (the password is encrypted at rest) | Read torrent status to build your images | Contract |
| Your generated images, bundles, templates and their statistics | Provide the service | Contract |
| Viewer data when an image is requested: IP address, referring website, browser identifier, time | Show you audience statistics; detect abuse | Legitimate interest (Art. 6(1)(f)) |
| Sign-in attempts (IP address, time) and activity log entries | Security and troubleshooting | Legitimate interest |
| Abuse reports you file: your name, email, message, IP address | Handle takedown notices | Legal obligation / legitimate interest |
How long we keep it
Viewer statistics are deleted after 90 days; sign-in attempts after 24 hours; activity logs are capped to the latest entries. Account data and your content are kept until you delete them or ask us to delete your account.
Who receives it
The service runs on a server provided by a hosting provider and may sit behind a reverse proxy or CDN, which process request data (including visitor IP addresses) on our behalf. We do not sell personal data and do not use it for advertising. Optional metadata lookups (TMDB/TVDB) send only the title you search for.
Your rights
You can ask for access to, correction, export or deletion of your data, object to processing based on legitimate interest, and complain to your data-protection authority (in Italy, the Garante per la protezione dei dati personali). Write to the contact address; an administrator can delete an account together with all its data.
Security
Passwords are hashed, stored qBittorrent passwords are encrypted, sessions are signed and can be ended at any time from your account page, and access to other users' data is technically prevented. No system is perfectly secure; tell us about any concern through the contact address.