Privacy Policy

Last updated: November 4, 2026

Plozz plays media from sources you choose. There’s no Plozz account or usage analytics. You decide whether to share diagnostics. This policy describes the current version of Plozz.

Open source

Our app code and website code are public. You can inspect how Plozz handles data and connects to services. This doesn’t make your media or private reports public.

Optional diagnostics

Plozz asks you to choose Share Diagnostics or Don’t Share. Either choice lets you use the app. Sharing stays off until you agree. You can change this device’s choice in Help & Diagnostics.

Reports can include errors, app and device details, performance measurements and which part of the app was open. Plozz filters account details, network request information and raw activity messages from automatic reports before sending them.

With sharing enabled, “Send to Developer” sends filtered technical details and an optional message only when you press it. These reports use fresh labels instead of saved account or media identifiers. Your message stays attached to the report and is sent as written. Don’t include passwords or other information you don’t want to share.

Sentry processes and stores reports for us on servers in the United States. We use diagnostics and support reports only to investigate problems, fix bugs and improve Plozz—not for advertising, marketing, profiling users or selling their data. Filtering doesn’t guarantee anonymity.

Turning sharing off stops future automatic reports and disables “Send to Developer”. It doesn’t delete reports already sent.

Feedback and support

“Report a Problem” opens a pre-filled GitHub issue with app, device and recent technical activity details. Review it before posting. Your post and GitHub identity are public, under GitHub’s privacy policy. For private feedback, email feedback@plozz.app.

Your servers and connected services

Media-server logins are kept in Apple’s Keychain. Connecting to your server doesn’t send those logins to us. Plozz profiles don’t replace your server’s account permissions or watch history.

Your servers and the services used for artwork, metadata and subtitles receive the requests needed for those features, including your IP address. Some connections, including Plex and Jellyfin-compatible servers, also use a saved device identifier.

Optional services such as Trakt, AniList, MyAnimeList, Simkl, Last.fm, WeTrakr and Seerr receive the watchlist, playback or request activity you enable. Their own privacy policies apply; they may retain account-linked data for purposes such as recommendations or analytics. This isn’t a Plozz-operated analytics service.

iCloud and other devices

Optional iCloud Sync keeps profiles, settings, server details, watchlists and supported Live TV setup in your private iCloud storage. Supported tracker and Live TV credentials use encrypted storage. Movies and offline downloads aren’t synced.

On iPhone and iPad, supported server logins can also sync through iCloud Keychain. Apple TV doesn’t use that path. Supported tracker logins can use iCloud Keychain independently of Plozz’s iCloud Sync setting. You can also approve transferring eligible logins between devices; Silo must pair again. See Profiles and sync for controls and provider limits.

Connecting accounts

To connect AniList or MyAnimeList, our website briefly holds an authorization token while passing it to your device. It’s deleted after use and configured to expire after ten minutes.

PublicMetaDB browser pairing encrypts your key before sending it to the pairing service. The encrypted handoff is removed after completion or cancellation; pairing data expires after ten minutes.

These connection helpers temporarily count requests by IP address to prevent code guessing and abuse. Those counts are also configured to expire after ten minutes.

This website

Cloudflare hosts this website, which also requests our public GitHub star count. These providers handle connection data and infrastructure logs under their own privacy policies.

The public roadmap needs no sign-in. Its maintainer-only editor uses GitHub sign-in and essential, secure session cookies. The encrypted GitHub access token is stored server-side with Cloudflare for up to eight hours; sign-out revokes it and removes the session. Temporary sign-in cookies expire after ten minutes. Editing changes public GitHub issue labels under the maintainer’s identity.

Children

Plozz is a general-purpose player. Parents and guardians should choose suitable sources and review diagnostics-sharing choices. See Parental controls for setup and limits.

Contact and changes

For privacy questions or requests, email feedback@plozz.app. Policy updates will appear here with a revised date.