Privacy policy

1. What data we process and why

Browsing. This site uses no tracking cookies and no analytics. The hosting provider may record IP addresses and technical connection data in its access logs for security reasons, for the period set by its own policy.

Download. The download button leads to github.com, where the installer is hosted. When you download it, GitHub receives your IP address and applies its own privacy policy. The latest-version information is fetched by our server when the page is generated, not from your browser.

Email. If you write to ejemplo@fastmail.com, we use your address and your message only to reply, and keep them for as long as the conversation lasts and liabilities may arise.

ejFlix account. If you create an account, we process your email and your password (which we never see in clear text: Supabase, the authentication provider, stores it encrypted) to identify you, and the data the application chooses to sync: your servers, your addons, your IPTV sources (including their credentials, if you choose to store them), your lists, your playback progress and your settings. The purpose is to let you recover them on any device where you sign in. The legal basis is the performance of the service you request (Article 6.1.b GDPR). We keep this data for as long as the account exists: you can delete it from “My account”, and everything synced is deleted with it.

2. Anti-spam measures

The sign-up and sign-in forms use a hidden field that automated programs tend to fill in, a check on the time taken to write, and the attempt limits of Supabase. If we enable Cloudflare Turnstile, Cloudflare may process technical browser data to tell people from bots, under its privacy policy.

3. About the ejFlix app

The desktop application talks directly to the servers you configure (Jellyfin, Plex or Emby), the addons you add, GitHub to check for updates, IntroDB to locate intros, and Discord if you enable Rich Presence. Your server credentials are stored encrypted on your own machine. Only if you sign in with your ejFlix account, and in the version that adds sync, will the application send the data described in section 1 to your account.

4. Recipients and transfers

We do not share your data with third parties unless legally required. The website hosting provider, Supabase (authentication and database for the account, on servers in the European Union) and, where applicable, Cloudflare (Turnstile) act as processors. GitHub and Cloudflare are based in the United States: transfers rely on the EU-US Data Privacy Framework or on standard contractual clauses.

5. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to ejemplo@fastmail.com. The account and everything synced can be deleted directly from “My account”. If you believe the processing does not comply with the law, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

6. Changes to this policy

If the processing changes, we will update this page and show the new date at the bottom.