Privacy policy

Version 1.0 · Last updated: 22 October 2026

This policy explains what personal data we process when you visit filoteca.com, request a licence, use the Filoteca app or the filoteca.com website, or contact support, under Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).

1. Data controller

Alfredo García. Privacy contact: privacy@filoteca.com. Data protection officer: Not appointed.

2. Summary

• The standalone Android app keeps your sources, lists, progress and settings on your own device and plays directly from your provider. It contacts our servers only for the licence, updates and support.
• We do not sell your data, do not build our own advertising profiles and do not use third-party analytics on this site or in the app.

3. What data we process, why and on what basis

3.1 Visiting this website

• Data: IP address, date and time, requested page (without parameters), response code, volume transferred and browser/system (user agent), which remain in the web server logs.
• Purpose: security, abuse detection and technical operation. Basis: legitimate interest (Art. 6(1)(f) GDPR). Retention: between 4 and 5 weeks (weekly rotation of 4 copies).
• App download count. When you download an installer (APK, Windows) we count how many times each one is downloaded, per day, type and origin (from this website, from the app itself or by direct link), with no cookies or third-party analytics tools. To avoid counting the same person twice on the same day, an irreversible digest of the IP with a salt that changes every day is used; the IP is not stored in those statistics and nobody can be recognised from them. Purpose: to know how the product is used. Basis: legitimate interest (Art. 6(1)(f) GDPR).
• The typeface is loaded from Google Fonts, so Google receives your IP and technical connection data. Your language preference is stored in your browser (see Cookies).

3.2 Payments and licence key

• During the free beta Filoteca does not charge for any licence and we do not process payment or card data. If a paid option were ever offered, we would update this policy beforehand with the data, purpose and providers involved.
• The licence key we send you is stored as an irreversible digest to validate it and as an encrypted copy so it can be resent to you. Purpose: deliver and resend the key. Basis: contract performance (Art. 6(1)(b)). Retention: while the licence is valid (see 3.3).

3.3 Licence activation and use

• Data: a random installation identifier generated by the app, the device label (make/model), activation and last-check dates and your IP address on the connection.
• Purpose: apply the device limit, prevent fraudulent use and renew the permission to use. Basis: contract performance and legitimate interest in preventing fraud. Retention: while the licence is valid.

3.3 bis Free beta (Premium trial)

• Data: your email (and its normalised form to count one trial per person), an irreversible digest of the verification code and of your IP address, the installation identifier it is activated on, if the beta is by invitation an irreversible digest of the invitation code you use, dates (request, activation and end), the language, the acceptance of the terms, the commitment not to use Filoteca in an IPTV distribution network, the acceptance of sending anonymous usage statistics during the beta (with its date) and, only if you tick it, your consent to receive Filoteca news, with its date.
• Purpose: deliver the trial, prevent abuse (one per person and per device) and notify you when the trial ends. Basis: performance of the contract (art. 6.1.b) and legitimate interest in preventing fraud (art. 6.1.f); news only with your consent (art. 6.1.a), which you can withdraw at any time. Retention: 3 years (the record that the trial was used is kept to prevent abuse).
• Anti-bot check. The form to request the trial uses a check of our own: your browser solves a small calculation in the background and the page carries a hidden field that only automated programs fill in. It uses no cookies and no third-party services (nothing is sent to Google or other companies), and stores no data beyond your IP address in the server logs (section 3.1). Purpose: to prevent automated abuse. Basis: legitimate interest (Art. 6(1)(f) GDPR).

3.4 Support

• Data: email linked to your licence or account, type, rating (opinions only), title and messages of each ticket, and where applicable that it comes from a beta licence, dates, language and, only if you tick it, technical data (app version, Android model and version, resolution, language, native player status and user agent), plus our replies and the emails exchanged.
• Purpose: handle your enquiry and improve the product. Basis: contract performance and legitimate interest. Retention: 2 years from ticket closure.

3.5 Account and server-connected app

• Account data: email, name and photo (if you sign in with Google), sign-up and last-login dates and, if you use email and password, an irreversible digest of the password and temporary verification codes sent by email. Sessions: encrypted identifier per device, its name ("Chrome · Windows") and dates.
• Your sources: the address, user and password or token of each source you connect, encrypted with a server key (this is not end-to-end encryption: the service operator could technically decrypt them; they are used only to carry out your requests).
• Household profiles (name, avatar, whether it is a kids profile); your list, what you hid, your watch progress and recent channels; the terms version accepted and date.
• Purpose: let you sign in, have your sources and progress across devices and use the service's features. Basis: contract performance. Retention: while you have an account; when you delete it, your account, sessions, sources, profiles, usage data are removed.
• The catalogue, programme guide, offline downloads and your settings are stored on your own device.

3.5 bis Demo in the browser

• The demo uses a shared account that is not yours: we do not process your email or any account data. Favourites and progress are stored only in your browser. When you play, video passes through our server: as with any visit, your IP address is kept in its logs, and we also use it to limit demo usage per visitor. This proxy is specific to the demo: the downloadable apps do not use it (see 3.6).
• Basis: legitimate interest in showing the product (Art. 6(1)(f) GDPR). Retention: that of the web server logs (section 3.1).

3.6 Standalone app (Android, Android TV, Fire TV and Windows)

• It keeps on your device, not on our servers: your sources and credentials, the catalogue, your list and progress, your settings and the access keys you configure for TMDB or OpenSubtitles and, if you connect Trakt, its Client ID and the authorisation (token) Trakt gives you. If you uninstall the app, they are lost.
• It communicates with us, through our API, only to: (a) licences: activate and renew the licence and check your plan from your account management; (b) usage statistics, only if you accept them (see below); (c) check for updates (your IP and the version are visible); and (d) send support tickets or reports when you do.
• It contacts directly, from your device and without going through any Filoteca proxy or server (unless you set up a proxy of your own), your content providers (which receive your IP and credentials) and TMDB for movie and series details (the app includes its own TMDB key; you can use yours in Settings), which receives your IP address and the titles and years looked up, and, if you set it up, OpenSubtitles with your key.
• Trakt (optional). Only if you connect your Trakt account in Settings: the app talks to Trakt directly from your device, without passing through our servers. It sends Trakt which film or episode you watched (its TMDB or IMDb identifiers, or its title and year) and the percentage you watched, and receives what you already have marked as watched in your account. Trakt, Inc. processes that data as a controller under its own privacy policy (trakt.tv/privacy) and may do so outside the European Economic Area. Basis: your consent (art. 6.1.a GDPR), which you can withdraw at any time by disconnecting Trakt in Settings and revoking the authorisation in your Trakt account. If you don’t connect it, nothing is sent to Trakt.
• Between your devices (Filoteca Connect). When you pair two devices, each stores the other's name, network address and an access key. Commands, what-is-playing status and the syncing of sources (with their credentials), favourites and progress go directly over your local network and do not pass through us. The now-playing notification on the phone is optional (off by default): it uses a background service and shows the title and cover art only on your phone. For "Typing with your phone" outside your network, the text you type passes through our server in memory only, for up to 10 minutes, without being stored or logged; the web server logs keep, as usual, the connection IP.
• Anonymous usage statistics (optional). Only if you accept when asked, and you can change it in Settings, the app sends counters summed per day: its own random identifier, not tied to any account or licence and which you can reset; the app version; the device type (Android, Android TV, Fire TV or Windows); the language; whether you have Premium; how many times it is opened; minutes of use; and how many times features such as play, search, add a source, download or pair are used. Never are titles, searches, addresses, list names, users, passwords or your content sent, and we do not keep your IP with this data. Purpose: measure usage and improve the app. Basis: your consent (art. 6.1.a GDPR), which you can withdraw at any time. Retention: 400 days maximum. In the free beta, sending them is a condition of taking part: you accept them when you request the beta with a separate tick box, and they are sent while your beta licence is active; to stop sending them, leave the beta in Settings; without the beta, the statistics become optional again (what we receive stays anonymous, with no email or licence attached).
• Filoteca catalogue and device check. To complete the detail pages (cast, director, genres, runtime), the app queries the Filoteca catalogue with the title's public identifier (IMDb or TMDB) and the interface language, without sending the title you search for, your list, your sources or personal data; you can turn it off in Settings. The app also reads, on your device, the version of its built-in browser and the memory, to warn you once if it is borderline; that is not sent.

3.7 Content reports

• Data: what you provide in the form or in the app (optional name, email, report type, content reported, description and, for copyright reports, rights holder, good-faith statement and signature) and an irreversible digest of your IP address to limit abuse.
• Purpose: examine the report, remove or block content where appropriate, reply to you and meet legal obligations. Basis: legal obligation (Art. 6(1)(c)) and legitimate interest (Art. 6(1)(f)). Retention: 3 years from closure, for possible claims. Your data is not published; it may be disclosed to those affected only to the extent the law requires.

3.8 Contact by email

If you write to us, we process your email and message content to reply. Basis: legitimate interest and, where applicable, contract performance. Retention: the time needed to handle the enquiry and any resulting liabilities. During the beta we do not delete emails: those arriving at our addresses (support, privacy, reports…) are kept in a single mailbox, and for those we send from the service (codes, licence keys, support replies, notices) we keep a log with recipient, subject, date and result, without the message content. When the beta ends we will review how long they are kept and delete what is no longer needed.

3.9 "My account" portal (filoteca.com/account)

• Data: your email; the licences linked to that email (plan, status, validity and a fragment of the key; the full key is only sent by email); the devices activated on each licence (device label, activation date and last-check date) and, if you sign in with your Filoteca account, your open sessions (device name and date). To sign in with an emailed code, 6-digit codes are generated (only an irreversible digest is stored; they expire after 15 minutes and allow 5 attempts) and, from the app, one-time links valid for 5 minutes. The portal session is stored on the server as an irreversible digest and expires after 30 days of inactivity.
• Purpose: so you can manage your licences and devices (remove one to activate another, receive the key again, download the apps) and protect access. Basis: contract performance and legitimate interest in security (Art. 6.1.b and 6.1.f GDPR). Retention: licence data as in 3.2 and 3.3; codes and links for the time stated.
• Your browser's local storage holds the portal session and your language (see the Cookie policy). If you choose to sign in with Google, the Google button is loaded, which receives your IP and may use its own cookies. To limit abuse, requests are counted per IP address and per email for at most one hour, only in the server's memory. The portal says when an email has no licence; that is why we limit attempts.

4. Recipients and third parties

• Server hosting provider: IONOS (Germany) (processor).
• Email provider (sending keys, codes and replies): IONOS (Germany) (processor).
• Google: Google sign-in, typefaces.
• The Movie Database (TMDB): cover art, synopses and cast; it receives titles and years, not your personal data. This product uses the TMDB API but is not endorsed or certified by TMDB.
• OpenSubtitles: subtitle search and download by title or identifier.
• Trakt (only if you connect your account): log of what you watch and have watched; it receives which title you watched and the percentage, sent from your device and not through us.
• Internet Archive: playback of "Classic cinema"; it receives your IP when you play.
• Your content providers (IPTV, Jellyfin, Emby, Plex, folders): receive the video requests and your credentials; we have no relationship with them or responsibility for their processing.
• We may also disclose data to authorities or bodies where there is a legal obligation.

5. International transfers

Some of the above providers (e.g. Google, TMDB, Trakt) may process data outside the European Economic Area. When that happens it relies on an adequacy decision, the European Commission's standard contractual clauses or another valid safeguard.

6. Security

We apply reasonable technical and organisational measures: encrypted connections (HTTPS), encryption of your sources' credentials on the server, storage of passwords and licence keys only as irreversible digests or an encrypted copy, attempt limits and restricted access to systems. No system is infallible; if a breach affecting you occurred, we would notify it as the law requires.

7. Advertising

Filoteca does not show ads. If that changes, we will update this policy and ask for your consent where applicable.

8. Minors

The service is for people aged 18 or over and is not aimed at minors: we do not knowingly collect their data. The app's kids profile is a usage aid and not an age check. If you are a parent or guardian and believe a minor has given us data, write to us to have it deleted.

9. Your rights

You may exercise the rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw your consent where it is the legal basis, by writing to privacy@filoteca.com with proof of your identity. You can delete your account and all your data yourself from the app. We will reply within one month (extendable as the law allows). If you consider that we do not process your data in line with the regulations, you may complain to the supervisory authority: in Spain, the Spanish Data Protection Agency (www.aepd.es).

10. Automated decisions

We do not take decisions based solely on automated processing that produce legal effects on you.

11. Changes to this policy

We may update this policy; the current version and its date will always be on this page. If the change is significant we will tell you.