Privacy policy

In short

monclubvideo collects no data. There is no monclubvideo account, no monclubvideo server, and no analytics, advertising or tracking tool in the app. It only talks to the Jellyfin servers you add yourself and, to look for updates, to GitHub.

What the app contacts

• Your Jellyfin servers. The app connects to the addresses you enter, with your account on each server: catalogue, images, playback, resume position, watched state, favourites. Each server therefore sees what you watch on it, as with any Jellyfin client, and applies its own rules.
• Your local network, when you add a server. The app sends a discovery request on the local network to list the Jellyfin servers found there; it carries no personal data and does not leave your network.
• A Google Cast device, only if you turn Cast on (off by default, on mobile). Casting then goes through the Google Cast services of your device.
• An external player, only if you turn “External players” on (off by default). The stream address is handed to the app you choose; the account token is included only when the server requires it.
• GitHub, to look for updates (on by default; you can turn it off). At most once a day at launch, the app asks GitHub for the latest published version, then downloads the update from there if you accept it. GitHub sees your IP address and the app version, nothing else: no account, no identifier, nothing about your servers or what you watch.
• Nothing else: no crash report, no other third-party service.

What stays on the device

• Your server addresses and sign-in tokens, encrypted with the Android keystore. Your password is not kept.
• A copy of the catalogue (titles, images, progress) to show the library quickly and offline.
• Your settings and local profiles; a profile PIN is stored as a hash.
• The files you download for offline playback. The app does not encrypt them.
• The photo chosen for a library tile and a profile's photo, copied into the app's private storage. A profile photo is sent to one of your Jellyfin accounts only if you ask for it.

Your controls

• The settings let you export local data and erase everything.
• Removing a server deletes its tokens and catalogue from the device. Uninstalling the app deletes everything.

This website

• This site is static: no script, no cookie, no audience measurement, nothing loaded from another site.
• It is hosted by OVH, which keeps the usual technical logs of a web server (IP address, date, requested page).
• APK files are downloaded from GitHub, which applies its own privacy policy.

Contact

For a question or a report, open an issue on GitHub.