Antresol Privacy Policy

Effective 10 November 2026.

Antresol is an app for iPhone, iPad, Mac, Apple TV, Android phones and tablets ("Antresol" on Google Play) and Android TV ("Antresol TV" on Google Play) that browses and plays your own media library: films, TV shows, music, books, comics and audiobooks (on Apple TV: films, TV shows and music; on Android TV: films, TV shows, music, audiobooks and comics). This policy covers all of these apps; where they differ, it says so. The library lives on an Antresol server that you, or your family's administrator, run on your own computer or NAS. The developer provides no content and runs no servers that your data passes through.

Summary

• The developer collects no data. The apps have no analytics, advertising, tracking or crash reporting of their own, and no third-party code that sends data anywhere.
• The app exchanges data only with the server address you enter. It also loads some artwork from public websites (see below).
• Your sign-in token is stored on your device: in the Keychain on Apple devices, encrypted with an Android Keystore key on Android.
• Files you save for offline use (on Apple devices) and cached files stay on your device and are removed with the app.

What is processed, and where

On your Antresol server

Your server is not the developer's server. Its administrator, usually you, controls it. The app sends it:

• your profile name and password when you sign in. The password is checked by the server and is not stored by the app;
• a device name, shown in the server's list of devices. On iPhone and iPad this is the device type (for example "iPhone"). On Apple TV it is "Apple TV". On a Mac it is the computer's name, which often contains your own name. On an Android phone or tablet it is the maker and model (for example "Google Pixel 8"). On Android TV it is "Android TV" with the model. The server's administrator can remove a device from that list;
• the device model (for example "iPhone17,3" or "Pixel 8"), the app version and a random identifier of this installation, so that the server can tell your devices apart;
• the interface language of the app, so that the server answers in that language;
• what you search for in your library;
• your viewing, reading and listening positions, "Watched" marks, your Watchlist, favourites and playlists;
• on Apple devices, requests for copies that you download to the device.

Song lyrics, subtitles and descriptions are fetched by your server, not by the app. The app gets them only from your server.

All of this is stored on your server and is governed by its administrator's rules. The developer has no access to it.

On your device

• A sign-in token for each profile. On Apple devices it is in the device Keychain; only this app can read it (on Apple TV, also its Top Shelf extension), and it is not synced to your other devices. On Android it is in the app's private storage, encrypted with a key kept in the Android Keystore.
• On Apple TV, the Top Shelf extension uses the same sign-in to ask your server for your Up Next items and keeps their artwork in the app's cache.
• The list of servers and profiles, your settings (reading theme, video quality, "Download over Wi-Fi Only" and so on) and a random device identifier, in the app's settings.
• Files you download to the device, cached artwork and books, and playback positions not yet sent to the server, in the app's container. The app checks free storage so that it does not fill up your device, and shows it on the Downloads screen.
• On Android, cached artwork and the PDF and subtitle files you open, in the app's cache. The Android apps do not save copies for offline use.

These are removed when you delete the app. On iPhone, iPad and Apple TV, Keychain entries may survive the deletion; they are useless without the server and are overwritten the next time you sign in. The Android apps are excluded from Android backups and device-to-device transfer, so none of this leaves the device that way.

Artwork from public websites

Your server points to some posters, backdrops and covers on public websites: The Movie Database (TMDB), Cover Art Archive and Open Library. The app loads these images directly, without any of your sign-in data. Those sites see the device's IP address and the image requested, as with any web page, and their own privacy policies apply.

Apple and Google

If you have chosen to share analytics with app developers in your device settings, Apple may share crash reports and usage statistics about the app with the developer. On Android, if you have turned on usage and diagnostics sharing, Google Play may give the developer crash and performance reports about the app (Android vitals). This is controlled by Apple, Google and your settings, not by the app.

Network and security

• The app connects to the server address you entered, at home or over the internet.
• At home, iOS, tvOS and macOS may ask for permission to access the local network. The app uses it only to reach your server.
• On Android phones the app may ask for permission to show notifications. It uses them only for playback controls of music and audiobooks.
• If an address outside your home network starts with http:// rather than https://, sign-in data travels unencrypted. The app on Apple devices warns you about this. For access over the internet, use https or a VPN such as Tailscale.

Children

The app is not directed at children and collects no data about them. Kid profiles and age limits are set up by your server's administrator.

Demo server for app review

The developer may run a demonstration server with openly licensed content so that Apple and Google can review the apps. Its logs contain only the reviewers' actions and are used only to run that server.

Changes and contact

If this policy changes, the new version will be published at the same address with a new effective date. For privacy questions, write to sidun.av@gmail.com or open an issue at https://github.com/sidun-av/antresol/issues.