Legal

Privacy Policy

Effective July 28, 2026

JellyStreamz respects the difference between your personal media library and the small amount of information needed to run this website.

Website accounts

When you create an account, we store your name, email address, password hash, optional mobile number, communication choices, and basic security records such as login timestamps and privacy-preserving network hashes. We never store your password in readable form.

Email and text choices

Email and SMS updates are optional and unchecked by default. We record when and where a preference changes so your choices can be honored. You can change them from your account. For text messages, reply STOP to opt out or HELP for help. Message and data rates may apply.

Your Jellyfin library

The JellyStreamz apps connect directly to the Jellyfin servers you choose. Your server receives the account name, password or access token, app and device identifier, playback activity, searches, favorites, playlists, and other requests needed to provide the features you use. Jellyfin remains responsible for your libraries, users, watch progress, favorites, playlists, and playback history. The public JellyStreamz website does not receive or host your personal media catalog.

Saved server profiles and access tokens are stored on your device, with access tokens protected by Android Keystore encryption. Jellyfin passwords are used to sign in and are not stored by JellyStreamz. You may remove a saved server from the app at any time. Connections to JellyStreamz services use HTTPS. A Jellyfin server may use HTTP or HTTPS according to the address selected by its owner, so use HTTPS for remote access whenever possible.

On-device media and downloads

Downloaded media, cached artwork, playback preferences, local game-library records, emulator choices, and optional network-share credentials stay on your device unless a feature described below sends specific information off the device. Network-share credentials are protected with Android Keystore encryption. You can remove downloads, game sources, saved servers, and linked services from the app.

Game database contributions

If you suggest a game or submit artwork, we store the information you provide, your account identifier, moderation history, and a privacy-preserving network hash. Uploaded images remain private while pending review. Approved artwork and its description, source, credit, or license information may become publicly available in the game catalog and app scraper. Rejected upload data may be retained briefly for abuse prevention and moderation records, then removed according to our retention practices.

Game files and fingerprints

The public catalog does not host ROMs. If you enable gaming and scan a source, the app can send normalized file names, file sizes, and CRC32, MD5, or SHA-1 fingerprints calculated on your device to the JellyStreamz catalog for title matching and artwork retrieval. Match requests are processed to answer the request and do not include your local file path or game contents. A privacy-preserving network hash may be kept for up to 24 hours to enforce request limits.

RetroAchievements

If you choose to connect RetroAchievements, the app sends the username, Web API key, game identifiers, and supported ROM hashes needed to retrieve profile and achievement progress directly to RetroAchievements. The API key is protected on your device with Android Keystore encryption and can be removed by disconnecting the account. RetroAchievements handles that information under its own privacy policy.

Supporter gameplay previews

Active paid Patreon supporters can optionally link apps and Jellyfin plugins with a short device code. During linking, the app sends its device manufacturer and model plus the client type. We store a one-way hash of each device token, the linked website account, device label, membership status, tier name, and recent verification or use timestamps. Gameplay preview requests are authorized by JellyStreamz and do not reveal your Patreon credentials to the app or plugin.

Trailers and outside services

Trailer playback may use YouTube, casting may use Google Cast, and donations are handled by Patreon. Those services receive information according to their own privacy policies when you choose to use them.

Security and retention

We use encrypted connections, access controls, rate limits, and security logs. Account and consent records are kept while your account is active or as reasonably needed for security, legal obligations, and honoring opt-out requests.

Your choices

You may ask to access, correct, or delete your website account information by contacting hello@jellystreamz.com.

Changes

We may update this policy as JellyStreamz grows. The effective date above will change when the policy materially changes.