Privacy

This page describes what a default installation stores. The operator of this installation can change the retention periods, so treat the durations as defaults.

What is stored

• The URLs you submit, together with the metadata resolved from them. This is what makes your download history and the platform statistics work.
• Download jobs: the format you chose, the size, and whether the job succeeded.
• A visitor cookie. If you are not signed in, a random identifier in a cookie is what makes your download list yours. Clearing it means losing that list.
• Your address, hashed, used to count requests against the anonymous quota. Given how few possible addresses there are, a hash is not anonymisation, and these counters are treated as personal data.
• An audit trail of security-relevant actions, such as a rejected URL or a quota being reached.

What is not stored

• No third-party analytics, advertising or tracking scripts.
• No content of the media itself beyond the retention period below.
• No direct stream URLs. They are short-lived and signed, so storing them would create a stale, sensitive record for no benefit.

Retention

Prepared files are deleted automatically once their retention period passes, and a background sweep removes anything left behind by an interrupted job. Job rows and audit entries are kept until the operator removes them.

Thumbnails

Preview images are fetched by this server and passed on to your browser, rather than embedded from the source. That means the source platform does not learn which of its items you looked at here.

Accounts

An account is optional. It stores your email address, a hash of your password, and your language preference. Signing in raises your quota and makes your history follow you across devices instead of living in one browser.

Your data

You can delete any job, and its file, from the My Downloads page. To have an account and its history removed entirely, contact the operator of this installation.