Privacy and cookies
Last updated 11 October 2026
This page says what personal information the Mediarium website and the app can handle, why, on what basis, for how long, and what your rights are under the GDPR (the European data protection law). It is written to be read, not to hide anything. If something here is unclear, ask through the contact form.
Who is responsible
The person responsible for the data described on this page (the “controller”) is the Mediarium project. You can reach it through the contact form, which is also the place for any request about your data. There is no company behind the project.
What this website handles, and why
| What | Why | Legal basis | How long |
|---|---|---|---|
| Visit counts through Google Analytics (cookies, your browser’s details, the pages you open). Only after you press Accept. | To see which pages help people and what to improve. | Your consent (you can take it back at any time). | Kept by Google Analytics for the period set in the maintainer’s account (2 months for visit details), then deleted. |
| Ordinary access logs: the address of the visitor, the time, the page and the browser, kept by the hosting provider. | To keep the site running, find faults and stop abuse. | Legitimate interest. | Deleted by the hosting provider on its normal schedule. |
| A message you send through the contact form: your topic, your message, and your name and email address if you give them. | To read and answer you. | Your consent (you send it) and legitimate interest in answering. | Kept in the maintainer’s mailbox while it is being dealt with, then deleted within 12 months. Not published, not shared. |
| Answers to the survey: choices from lists, your own choice of country, and an optional short note. | To see which devices and setups are popular. | Your consent (you send it). It holds nothing that names you. | Deleted after 24 months. |
| A one-way scrambled value made from your address with a salt that changes every day, used by the two forms to limit abuse. | To stop robots from sending thousands of messages. | Legitimate interest. | Deleted when the day ends. It cannot be turned back into your address. |
There is no advertising, no tracking of you across other sites, and no selling of data. Fonts, pictures and scripts are served from this website itself. The star count and the other GitHub and Docker Hub numbers on the pages are read by our server, so GitHub and Docker Hub do not see you.
Cookies and similar storage
The website sets nothing until you choose. Press Accept in the notice at the bottom of the page, or No thanks; both buttons are equal and the site works the same either way. You can change your mind at any time under Cookie settings in the footer. Saying no removes the cookies below.
| Name | Set by | What it is for | How long | Needs consent |
|---|---|---|---|---|
_ga | Google Analytics | Tells one visitor from another when counting visits. | 2 years | Yes |
_ga_… | Google Analytics | Keeps the state of a visit. | 2 years | Yes |
mediarium-analytics (browser storage) | This website | Remembers whether you pressed Accept or No thanks, so you are not asked again. | Until you clear it | No (it is your choice itself) |
mediarium-theme and similar (browser storage) | This website | Remembers small choices such as the chosen install tab. | Until you clear it | No (it never leaves your browser) |
Google Analytics is run by Google. If you accept, your browser’s details and the pages you open go to Google, which can process them in the United States. Google’s own privacy policy applies to that. We use no other analytics, no advertising cookies and no social media buttons.
Who else sees it
The company that hosts this website processes the data above on our behalf (the logs, the forms and the mailbox). Google receives visit details only if you accept. Links to GitHub, Ko-fi and other sites lead away from this website, and their own privacy policies apply there. Nothing is passed on to anyone else.
Your rights
You may ask for a copy of the data held about you, ask for it to be corrected or deleted, ask for its use to be limited, object to it, and take back a consent at any time (consent given earlier stays valid for what was done before). Use the contact form and say which message or answer you mean; the forms hold nothing else that could be matched to you, so please include your email address and roughly when you wrote. If you think your data has been handled wrongly, you may complain to the data protection authority of your country.
The Mediarium app
Mediarium runs on your own computer or server. Your library, your accounts and your settings stay there. We do not receive them.
Anonymous usage numbers (only if you say Yes)
The first time an administrator opens the app (and again after an update, until it is answered), Mediarium asks: Yes, share anonymous numbers or No thanks. Nothing is sent unless the answer is Yes, and nothing is chosen for you. We use the numbers to see how many installs are in use and which devices and setups are popular, so Mediarium can be made to work better on them.
A message goes out once a day. It holds a random ID made on that install (not linked to a person), the Mediarium version, whether it runs in Docker and on which kind of processor, rough bands for processor cores, memory, the age of the install and how many titles, accounts and indexers it has, and a yes or no for which features are switched on and which kinds of media server are connected. It never holds names, titles, folders, host names, the names of your sites or providers, passwords, anything you typed, or your address. The exact message is shown in the app before you say Yes, and the code that makes it and the code that receives it are open source.
The server that receives it sees the address a message comes from, like any web server, and that address is not saved with the numbers. To stop one address from sending thousands of fake installs, a one-way scrambled value made from the address with a salt that changes every day is kept until the day ends, then deleted. The daily rows are kept for 120 days. The totals of everyone who said Yes are public on the public numbers page, and any group of fewer than 10 installs is left out.
You can say No, change your answer in Settings > General at any time, press Reset my ID for a new random ID, or set MEDIARIUM_DISABLE_STATS=1 and the app never asks and never sends. Prefer not to share from the app? You can instead fill in an anonymous form on this website: every answer is chosen from a list, with one optional short note that only the maintainer reads. It asks for no name or email address, does not record your address, and does not look up where you are: the country is only what you choose to say. To keep robots out, the page asks the server for a signed one-time token, waits a few seconds and does a small piece of work in your browser; the same one-way scrambled address value described above limits how many answers one connection can send in a day.
The app only talks to the services you set up (your Usenet provider, your indexers, your media server, your notification services) and to the public services it needs: TMDB for movie and show information, MusicBrainz and similar services for music, Open Library for books, Audnexus (Audible's catalogue) for audiobook narrators and running times, Hardcover only if you add your own token, OpenSubtitles if you switch subtitles on, and GitHub to check for a new version once a day (you can switch that off). These services see your server's internet address, as with any web request.
The full details are in the legal notes in the documentation.
Contact
Questions about privacy: use the contact form.