Reellet LogoReellet
Legal

Privacy Policy

Last updated: publication date

Draft. Highlighted details are still being confirmed; this page is not final.

1. Who is responsible

The controller for Reellet website and account data is legal operator name and contact address. For privacy questions and rights requests, use our contact pagethe contact form is not connected yet; a working channel for requests is still to be provided.

2. Information we process and why

  • Account information. When you sign in with Google or Apple, we receive and keep your account identifier at that provider, your name and email address, whether the provider reports that address as verified, and when your account was created and when you last signed in. We use them to create and identify your Reellet account. Sign-in asks only for your basic identity: Google sign-in does not give us access to your Gmail messages or Google Drive files. With Apple, you can choose to hide your email address; we then receive a private relay address from Apple that forwards to your inbox. Apple shares your name only the first time you sign in, and you can change it before sharing. Signing in with Google and with Apple creates separate Reellet accounts, even if they use the same email address.
  • Email sign-in. When you sign in with your email address, we send a one-time code to it and keep the address, the code in a form that cannot be read back, and when it was requested (to limit how often codes can be sent). If a Google or Apple sign-in has already confirmed the same address, signing in by email opens that same account.
  • Your Macs. To apply the number of Macs a purchase covers, the Reellet app sends a random identifier it creates on each Mac and the Mac's name; we keep them with when each Mac last used your account. You can see and unlink your Macs in your account.
  • Sign-in and connected devices. We keep the records needed to keep you signed in on the website, to connect the Reellet application on your Mac to your account, and to end those sessions when you sign out or choose to sign out on all devices. The application keeps its sign-in only in memory while it runs; when you quit it, you sign in again the next time. Signing in on the website does not sign in the application.
  • Technical and security information. When you use our website, account services or update service, we and our infrastructure providers process your IP address, the time of the request and information your browser or the application sends, such as its type and version. We use this to deliver the service, keep it secure and investigate errors or misuse.
  • Update checks. The application asks our update service whether a newer version exists and sends its current version and the type of Mac it runs on.
  • Provider keys you connect. When you connect your own key for an optional provider (such as Google Gemini for subtitle translation or TMDB for movie information) in the application, we store that key encrypted in your Reellet account and hand it to the application on your Mac while it runs, only to you while you are signed in and connectors are available for your account. We do not use the key ourselves: requests to the provider go directly from your Mac, and we do not receive the subtitle text or titles you send. You can disconnect a key at any time; disconnecting deletes it from your account. The provider bills its usage to you, and disconnecting does not cancel the key at the provider.
  • Error reports you send. When an error appears in the application, you can choose to send us a report; nothing is sent unless you press «Отправить». A report contains the error's code and where it happened, the application version, your macOS architecture, a safe file type such as "mkv", and the comment and optional contact you type, which you can review before sending. It does not contain links, magnet links, file paths or names, keys, sign-in tokens, your history or logs. If you are signed in, the report is linked to your account. We use reports only to find and fix errors.
  • Messages you send us. When you contact us, we process your email address, your message and anything you choose to include, to answer you. Do not include passwords, API keys, sign-in codes or private media.
  • Data on your Mac. Your media, playlists, history and preferences are handled by the application on your device. Features you turn on can connect to other services as described below.

We process account, sign-in and update data because it is necessary to provide the service you asked for. Technical and security data is processed for our legitimate interest in running a reliable and secure service, balanced against your rights. Messages are processed to handle your request. Where the law requires it, we rely on a legal obligation or on your consent; you can withdraw consent at any time without affecting earlier lawful processing.

3. Cookies and browser storage

We use a cookie that keeps you signed in, and your browser's storage to remember your light or dark theme and, for a moment, to coordinate the separate sign-in window. These are needed for the features you use. Our pages do not use analytics or advertising cookies. Confirm that no infrastructure provider sets additional cookies. If we ever add optional tracking, we will ask first and give you a way to say no.

4. Who receives data

  • Google or Apple, when you choose to sign in with them, under their own privacy information.
  • An email delivery provider, which sends the sign-in codes you ask for.
  • Hosting, content-delivery and security providers that run our website, account services and update service on our behalf.
  • A font delivery service: our pages load their typeface from it, so your browser connects to it.
  • A message-handling service, once the contact form is connected, to receive and answer messages.
  • A payment provider, once purchases open; this policy will name it and the data it receives first.
  • Authorities or other parties, only where the law requires us to disclose data.

Some features of the application connect directly from your device to services you choose: media sources you open, and optional metadata, subtitle or AI providers, which then receive your requests or the text you send for processing. When you use torrent features, your IP address is visible to other peers and trackers, and the application may upload pieces of the content you are downloading as part of the protocol.

5. How long we keep data

We keep personal data only as long as it is needed for the purposes above or as the law requires.

  • Your account is kept while you use it or hold an active subscription or lifetime licence. We are preparing a process for inactive accounts: an account with no active subscription or lifetime licence that has not been used for 12 months will be deleted after we warn you 30 days in advance. Signing in during that time keeps the account; no purchase is needed. Active subscriptions and lifetime licences are never deleted because no new purchase was made. Until this process is in place, accounts are not deleted automatically.
  • If you ask us to delete your account, we do not wait for the inactivity period; we handle the request within the time the law allows. A self-service deletion option in your account settings is planned but not available yet.
  • Sign-in, technical and security records are kept for a shorter time than your account, only as long as needed to keep you signed in and to secure the service. Retention criteria for these records.
  • Connected provider keys are kept until you disconnect them or delete your account. Retention after paid access ends (a 30-day deletion period is proposed, not decided) and how long deleted keys can remain in backups.
  • Error reports are deleted automatically after a fixed period. Retention period for error reports (90 days is proposed, not decided).
  • Messages: retention period for messages.
  • Purchase and accounting records, once purchases exist, are kept separately for the periods the law requires, which can be longer than for other data.

6. International transfers

Where data is processed and, for any transfer outside the EEA, the adequacy decision or safeguards that apply. You can ask us for information about these safeguards.

7. Your rights

Depending on applicable law, you can ask to access your data, correct it, delete it, restrict its processing, receive it in a portable format, or object to processing based on legitimate interests. Where processing is based on consent, you can withdraw it. You can also ask which recipients receive your data. We may need proportionate information to confirm it is you. Some records may have to be kept to meet legal obligations or to establish, exercise or defend legal claims. You can complain to a data-protection authority.

8. Security and changes

We use technical and organisational measures appropriate to the service, but no system is perfectly secure. Keep your device and your sign-in account secure. When our processing changes, we will update this policy and tell you where required.