Privacy policy

1. Our approach to privacy

We do not operate a central Arloes account service or a developer-operated service that collects your viewing history, searches or media library. Arloes processes information on your device and exchanges information with your chosen Emby server to work. Optional features connect to external services.

Arloes does not include advertising or developer-installed advertising, behavioural analytics or automatic crash-reporting SDKs. We do not sell your personal information or use your viewing activity for targeted advertising.

2. Information Arloes handles

Server connections and accounts

When you connect manually, Arloes sends the username and password you enter to the Emby server address you provide to authenticate you. After authentication, it uses an access token supplied by that server.

Arloes can store your server address, user identifier, account label and access token on your device so you can remain signed in or switch between saved accounts. Your password is used for authentication and is not saved as part of your saved account. Saved access tokens and account records are encrypted using keys managed by Android Keystore.

If you choose Emby Connect, Arloes exchanges the information needed to complete PIN-based sign-in and obtain access to your linked servers with Emby Connect. These connections do not create a separate account with the Arloes developer.

Device and connection information

Arloes sends your server the application name and version, device name, an app-generated device identifier and playback capabilities. The identifier is not an advertising identifier. Servers and services you connect to receive your network IP address as part of their connection with your device.

Library, searches and playback activity

Arloes requests and displays media titles, descriptions, artwork, available streams, user profile information and viewing progress from your server. When you use the relevant features, it sends:

• Search queries and requested media items.
• Playback start, progress, pause and stop information.
• Selected audio, subtitle and playback options.
• Watched status, favourites and other library changes you request.
• Subtitle search and download requests.
• Live TV and recording commands, where supported and permitted.

Your server may retain this information in user records, playback history or logs. Its administrator controls those records.

Local settings and temporary data

Arloes stores appearance preferences, home-screen configuration, playback preferences, saved connections and queue information on your device. Artwork, media information and playback data may be cached or buffered to display the interface and play media.

Support correspondence

If you contact us, we receive your email address and information you include, such as a problem description, screenshots or diagnostic information. Please do not send passwords, access tokens or unnecessary sensitive information. We use your correspondence to respond and investigate the issue.

3. Why information is used

• Authenticate you with your selected server.
• Display your library and play your media.
• Synchronise progress and library changes with your server.
• Remember preferences and saved connections.
• Provide optional features you choose to use.
• Respond to support requests and investigate reported problems.
• Meet applicable legal obligations relating to information we actually hold.

We do not receive a central copy of your library, searches or playback history simply because you use Arloes.

4. External services and recipients

Your Emby server

Your chosen server is the primary recipient of account and playback requests. Its administrator decides who can access it, what it stores and how long it retains information. Privately operated, hosted and third-party servers may have different privacy practices.

Emby Connect

If you use Emby Connect, sign-in and server discovery communicate with Emby’s services. Emby’s own privacy practices apply to information it receives.

Optional ratings and trailers

• MDBList: when configured, Arloes sends your MDBList API key and media identifiers to retrieve ratings. The key is stored locally with encryption.
• IMDb: Arloes may request trailer information using an IMDb media identifier and retrieve video from IMDb’s media services.
• YouTube, Vimeo and other media services: opening online trailers may connect to a provider through a player, embedded page or external application.

These providers receive requests and connection information needed to deliver their services. Their websites, players or applications may use cookies or local storage under their own privacy policies.

Subtitle providers

Subtitle searches and downloads are requested through your Emby server. Depending on its configuration, the server may contact subtitle providers with information such as the media title, language and search filters.

Website and hosted resources

This website is hosted on Cloudflare Pages. Cloudflare processes network request information, including IP addresses, to deliver and protect the site. Some supporting resources, such as the Arloes application icon used by Emby, are hosted on postertools.org. A device or server fetching these exposes ordinary request information to the hosting provider. This is separate from collecting your viewing history or library.

Support and legal requests

Our email provider processes support messages you send. We may disclose information we actually hold where required by applicable law or a valid legal request. This does not give us access to records held only on your device or someone else’s server.

5. Cookies and tracking

The native Arloes interface does not use advertising cookies or tracking technologies to build advertising profiles. Optional external websites or embedded media players may use their own cookies and similar technologies.

This website does not include advertising, analytics scripts or embedded third-party media players. Its screenshots, styles and logo are served as static files. Hosting infrastructure may process requests for delivery and security.

6. Storage and retention

On your device: saved connections, preferences and persistent data remain until removed or replaced, or you clear application storage. Temporary caches may be removed by the app or Android.

On your server: account records, viewing history, searches and logs are retained according to the administrator’s settings and practices. We do not set their retention periods.

External services: providers determine how long they retain information they receive.

Support: we retain correspondence only for as long as reasonably needed to respond, resolve the issue and meet applicable legal obligations. You can request deletion of information you have sent us.

We do not maintain a central database of users’ viewing activity.

7. Your choices and deletion

You can choose your server, use manual sign-in instead of Emby Connect, remove saved accounts, and stop using optional integrations.

To remove local accounts, preferences and cached data, clear Arloes’s storage through Android’s application settings. Removing a saved account or uninstalling Arloes does not delete accounts or records on your server or Emby Connect. Signing out may leave separately saved accounts available until you remove them.

Ask your server administrator to delete server accounts, viewing history or other server-held records. To invalidate an access token, use the server’s session or device-management controls or contact its administrator.

Contact external providers about their records, and contact us about information sent directly to us.

8. Security

Arloes uses Android’s application storage protections and Android Keystore-backed encryption for saved authentication tokens and account records.

Connection security depends on the address and service used. Arloes supports HTTPS and HTTP server addresses. HTTPS encrypts information in transit; HTTP does not. With HTTP, credentials, tokens and other traffic may be accessible to others who can observe the connection. Use HTTPS wherever available, particularly for remote access.

No application, storage system or network connection can be guaranteed completely secure.

9. International processing

Your chosen server and external providers may be outside your country, where different privacy laws apply. Your server’s operator determines its location. Review the privacy information of external services you choose to use.

10. Young users

Arloes is intended for teenagers aged 13 and over and adults. It is not specifically directed at children under 13.

Parents, guardians and server administrators should manage younger users’ accounts, permissions and media access. Arloes displays content supplied by the server; it does not independently select or classify that library.

Where applicable law requires parental permission, a parent or guardian should provide it before the relevant services are used. If you believe a child has sent personal information directly to us, contact us so we can investigate and take appropriate action.

11. Privacy rights

Depending on your location and applicable law, you may have rights to request access, correction, deletion or a portable copy of personal information, restrict or object to processing, or withdraw consent where processing relies on consent.

For information we hold, contact pejamas@gmail.com. We may need to verify your identity before responding. For information held by your server or another provider, contact that operator. We cannot access or delete records held solely by those parties.

You may also have the right to complain to your local privacy regulator. In Australia, this is the Office of the Australian Information Commissioner.

12. Changes to this policy

We may update this policy when features or data-handling practices change. The latest version will show an updated date. Where required, we will provide additional notice or request consent before introducing materially different processing.

13. Contact

For privacy questions or requests, contact the Arloes developer at pejamas@gmail.com.

Arloes is independent and is not affiliated with or endorsed by Emby.