Privacy Notice
This is a working beta privacy notice. It should be professionally reviewed before a broad public launch. Processor details and retention periods may be refined as the service develops.
1. Information Comrade processes
Comrade may process your display name, email address, account status, legal-acceptance timestamps, Plex identity, linked Plex server information, library metadata, watch activity, reactions, preferences, supporter status, Stripe customer and transaction references, subscription status and billing periods, Ko-fi payment references when used, and technical security logs.
2. Payment information
Payments are processed by Stripe or, when chosen, Ko-fi. Comrade stores payment references, amounts, currencies, payment states, billing periods, and the account link needed to manage access. Comrade does not store full card numbers, card security codes, or readable bank credentials.
3. Passwords and Plex credentials
Account passwords are handled by Supabase Auth and are not stored by Comrade in readable form. Plex credentials are encrypted and stored through the protected backend so that normal browser storage does not permanently contain them.
4. Why the information is used
Information is used to create and secure accounts, connect authorised Plex libraries, provide personalised movie features, maintain service integrity, investigate errors, and support user requests, reconcile supporter payments, manage subscription access, and meet applicable accounting or legal obligations.
4A. Randomizer operational analytics
For signed-in users, Comrade may record privacy-limited Randomizer events containing selected filter categories, whether a server or library scope was selected, synchronized movie counts, result counts, response time, selected result-role labels, and stable error codes. These events do not contain movie titles, posters, Plex server identifiers, Plex library identifiers, private server addresses, or Plex tokens. They are used to identify no-result patterns, reliability problems, and performance regressions.
5. Service providers
Comrade currently relies on Supabase for authentication and database services, Vercel for application hosting and backend functions, Cloudflare Turnstile for bot protection when enabled, Plex for user-authorised media-library connections, Stripe for primary payment processing and subscription management, and Ko-fi when a user chooses the optional secondary contribution method. These providers process data under their own terms and privacy documentation.
6. Sharing
Comrade does not sell personal data. Information is shared only with service providers needed to operate Comrade, when required by law, or when necessary to protect users and the service.
7. Retention and deletion
Account information is retained while the account is active and for any limited period needed for security, legal, or backup purposes. Users can request access, correction, export, or deletion. The Settings page includes account-deletion controls. Payment and accounting records may need to be retained after account deletion for the period required by applicable law, dispute handling, fraud prevention, or financial reporting.
8. Your rights
Depending on applicable law, you may have rights to access, correct, erase, restrict, or receive a copy of your personal data, and to object to certain processing. Requests can be submitted through the support contact published in this notice.
9. Browser storage and cookies
Comrade uses browser local storage, session storage, and IndexedDB to keep account sessions, settings, synchronized movie data, and temporary application state. Comrade does not currently use advertising or behavioural-tracking cookies. Essential third-party services such as Supabase, Cloudflare Turnstile, Stripe, Ko-fi, Vercel, and Plex may use technically necessary storage or cookies under their own policies when their services are used.
10. Contact and complaints
Privacy questions, data requests, and complaints can be sent to support@comradetv.app. You may also have the right to lodge a complaint with the competent data-protection authority.
11. Changes
Material privacy changes will be versioned, and users may be asked to review a new notice.