# Beta privacy notes / Beta-Datenschutzhinweise

This document is a technical draft for legal review before public launch.

## Local application data

Queue entries, download paths, media titles, settings, logs and browser-cookie
access stay on the user's device. Browser cookies are read only when the user
selects a local browser session and are not copied into application settings.

## Update checks

At most once within 24 hours, unless the user requests a manual check, the app
may contact the configured public GitHub release repository. GitHub receives
the normal technical connection data of an HTTPS request. No media URL, queue
entry or local file path is sent.

## Website download statistics

The planned website download service records product, version, package type,
delivery source and timestamp. For internal approximate unique-device counts,
IP address and user-agent data are transformed into a server-secret HMAC
fingerprint before database storage. Raw IP addresses are not stored by the
application service, and individual fingerprints are never exposed by its
statistics endpoint. The internal result contains aggregate frequency buckets
only (approximately once, twice, three times, four times, or five-plus).
Reverse-proxy access logs can still contain connection data and are planned
for a 30-day maximum retention period.

One IP address is not equivalent to one person or computer. NAT, shared
networks, VPNs and changing provider addresses make unique counts approximate.
The fingerprint is pseudonymous rather than anonymous and therefore remains
personal data for GDPR purposes. Before public deployment, the final privacy
notice, legal basis, access controls and a proportionate retention period must
be confirmed.

## Crash reports

Crash reporting is not part of version 0.5.5.2. It will be implemented later
as an explicit opt-in with preview and redaction before sending.

Contact: sengakujiworks@proton.me
