Back to Plundarr

Privacy Policy

Effective date: August 2026

Overview

Plundarr is a mobile application that acts as a client interface for self-hosted media server software. We take your privacy seriously. This policy explains what information Plundarr collects, how it is stored, and how it is used.

The short version: Plundarr has no user accounts, no analytics and no tracking, and nothing you enter into it ever reaches us. There is one small outside request the app makes — it downloads the release notes from our website when it starts — and we describe exactly what that does under Network Requests below.

Information We Collect

Plundarr has no account registration, no sign-up form, and nowhere on our side for your information to go. Specifically, the app contains:

• no analytics or telemetry SDK;
• no crash or performance reporting service;
• no advertising or tracking libraries, and no use of your device’s advertising identifier;
• no over-the-air update service — the app only ever runs the code it was installed with, from the App Store or Google Play.

The only data the app handles is what you voluntarily enter — server addresses and API keys/credentials for your own self-hosted services (such as Radarr, Sonarr, Plex, etc.). That data is stored exclusively on your device, and is only ever sent to the servers you pointed it at.

How Your Credentials Are Stored

All server addresses, API keys, usernames, and passwords you enter in Plundarr are stored using expo-secure-store, which writes exclusively to the platform’s native encrypted credential storage — the iOS Keychain (backed by the iOS Secure Enclave) on iOS, and the Android Keystore on Android.

• Credentials are never written to plain AsyncStorage or any unencrypted location.
• Credentials are never included in iCloud, iTunes, or Android cloud backups.
• Credentials are never transmitted to Plundarr or any third-party service.

Separately from that, Plundarr keeps a local cache of your library on the device so that your Movies, TV and Music tabs appear instantly instead of loading from scratch every time. That cache is ordinary app storage rather than encrypted credential storage, so credentials are deliberately kept out of it — and so is anything personal your services report back, such as Tautulli’s user list and watch history. The cache lives inside the app’s own private storage and is removed when you uninstall the app.

Network Requests

Nearly everything Plundarr does happens between your device and the servers you configure — your own Plex server, your own Radarr instance, and so on. Those requests go direct. There is no Plundarr proxy sitting in the middle of them, and we have no visibility into your media library, your searches, or how you use the app.

There is one exception, and we would rather spell it out than let you find it in a firewall log. When the app starts, it downloads a small release-notes file from plundarr.app so that it can show you what changed in the latest version. That request:

• carries no account, no device ID and no identifier of any kind — it is an ordinary anonymous download of a public file, no different from opening our website in a browser;
• sends none of your settings, server addresses, credentials or library contents;
• fails silently if it cannot be reached — the app ships with a copy of the notes built in, and works perfectly well with no internet connection at all.

Our website is served through Cloudflare. Like any web host, Cloudflare processes and logs the IP address the request came from along with basic technical details such as the time and the kind of client. That is standard web-server logging, used to serve traffic and to protect the site from abuse. We do not use it to build a profile of you, we do not link it to anything else, and there is nothing in the request for us to link it to. Cloudflare’s own handling of that data is covered by Cloudflare’s privacy policy.

If you would prefer the app made no outside requests whatsoever, blocking plundarr.app at your network or firewall is enough. The release-notes check is the only one, and the app simply falls back to its built-in copy.

Biometric Data

Plundarr offers optional biometric locks (Face ID and Touch ID on iOS; fingerprint and face unlock on Android). Biometric authentication is handled entirely by the device’s secure hardware — the iOS Secure Enclave on iOS and the Android Keystore on Android. Plundarr never has access to your biometric data, and it never leaves your device.

Third-Party Services

Plundarr connects to services that you operate yourself (Plex, Radarr, Sonarr, etc.). Each of those services has its own privacy policy. Apple’s App Store and Google Play policies also apply to your use of this app, depending on the platform. We are not responsible for the privacy practices of third-party services you choose to connect.

Children’s Privacy

Plundarr is not directed at children under the age of 13. We do not knowingly collect any personal information from children.

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the effective date at the top of this page. We encourage you to review this page periodically.

Contact

If you have questions about this Privacy Policy, please contact us at contact@plundarr.app.