Stremio
- The documents do not say whether your data trains AI.
- Your data is used for personalized ads, including by third-party ad companies.
- Data is shared only with the providers who run the service.
- The documents do not say who can read your content.
They collect account and device data, use Google/Facebook trackers, let you delete in-app, and can suspend you without notice.
Agent Trust Hub uses AI and may make mistakes. Review reports and confirm their contents before relying on them.
Collected
Email and password if you sign up, plus IP, device IDs, and logs. Guests: nothing.
Read the exact line
Privacy policy
“You provide us with your email address and password to create an account. These are all stored in order to create your account and provide you with the necessary access.”
Training
They use your data to run the app, support, and marketing stats via Google and Facebook.
Read the exact line
Privacy policy
“The only cookies we use are Google Analytics and Facebook Pixel which collect statistical information such as country of access and time spent on the Services.”
Sharing
They say they do not sell data for others’ ads, but share it with Google, Sentry, and YouTube.
Read the exact line
Privacy policy
“We do not sell, trade or otherwise share Personal Information with third parties for the marketing purposes of the third party.”
Kept
They store data in the EEA and delete after an unnamed retention period, or longer for legal cases.
Read the exact line
Privacy policy
“Once the retention period lapses, We delete all personal data, together with any existing copies, unless the Union or Member State laws require storage of the personal data.”
Controls
You can delete your account in the User Panel and email them to use other .
Read the exact line
Privacy policy
“You may delete your account from the User Panel hosted at www.stremio.com.”
Fine print
They can suspend you with no warning; you them; courts.
Read the exact line
Terms of service
“The Provider may in its sole discretion and without sending a warning or notice, to suspend the Users access to the Services”
Expand “Read the exact line” to see the source alongside the explanation.
What you can turn off
The controls and opt-outs their own documents describe, and where they say to find them.
Delete your account in the User Panel
Log in to the User Dashboard, scroll to Delete Account, press DELETE ACCOUNT (www.stremio.com)
Use Guest mode to avoid personal data collection
Login as a Guest User, as described in the Privacy Policy
Email the DPO to access or correct data
Contact [email protected] or [email protected]
If a switch is not where they say, the deletion request above still applies.
Line by line
The lines that matter most, worst first.
If someone sues them because of how you used the app, you may have to pay their costs.
Read the exact line
Terms of service
“Users, including but not limited to CAD, agree to fully the Provider and any third parties for any direct or indirect damage and/or lost profit”
For example, if a community addon you used leads to a copyright claim, they can ask you to cover legal bills.
They can cut off your account or features without telling you first.
Read the exact line
Terms of service
“The Provider may in its sole discretion and without sending a warning or notice, to suspend the Users access to the Services”
For example, you could lose your library overnight with no email warning.
Google and Facebook get tracking data about how you use the site.
Read the exact line
Privacy policy
“The only cookies we use are Google Analytics and Facebook Pixel which collect statistical information such as country of access and time spent on the Services.”
For example, Facebook Pixel can help Facebook know you visited Stremio even if you never posted there.
New rules can start as soon as they post them; using the app later means you accept them.
Read the exact line
Privacy policy
“The new version of the Privacy Policy becomes effective from the day it is announced publicly on our Services unless stated otherwise.”
For example, they could change sharing rules and it applies the next time you open the app.
Besides your account, they automatically log device and network details.
Read the exact line
Privacy policy
“Such data could include your computer's Internet Protocol (“IP”) address, operating system, type and language, device identifier numbers, and the time and date of your use.”
For example, your IP and device ID are stored when you open the app.
They say they will not sell your personal info so other companies can market to you.
Read the exact line
Privacy policy
“We do not sell, trade or otherwise share Personal Information with third parties for the marketing purposes of the third party.”
For example, they claim they will not sell your email to an ad network.
They say they do not keep a list of what you stream, and guest mode collects no personal data.
Read the exact line
Privacy policy
“IMPORTANT: We do not collect any history or logs of what addons/sources you use for streaming! Furthermore, if you login as a Guest User, no personal data is collected whatsoever.”
For example, watching as a guest should not create an account trail of what you played.
They describe basic security: hashed passwords, encryption, and limited staff access.
Read the exact line
Privacy policy
“Your password is stored in a secure, cryptographically hashed state. Your personal data is stored on protected servers.”
For example, staff should not be able to read your password in plain text.
You can wipe the account yourself in the dashboard, and it cannot be reversed.
Read the exact line
Privacy policy
“Press the "DELETE ACCOUNT" button (this action cannot be undone)”
For example, after you press DELETE ACCOUNT, you cannot get that library back.
leftover fights go to court.
Read the exact line
Terms of service
“In case the parties fail to reach an agreement within one month of the occurrence of a dispute, the dispute should be referred for resolution to the competent courts.”
For example.
Words to know
Legal words from the lines above, in plain English.
- cookies
- Small files a website saves on your device so it can recognise you and remember what you did. For example, a cookie keeps you logged in and can also tell an ad company which sites you visited.
- tracking pixels
- Tiny invisible images or bits of code in a page, app or email that report back when and where you opened it. For example, a pixel in a marketing email tells the sender the moment you read it.
- sell or share
- Under California law, selling means passing your data to others for money or other value; sharing means passing it on for targeted ads. For example, letting an ad network use your browsing history in return for ad space counts as a sale.
- personal data
- Any information that is about you or can be linked to you, from your name to your phone's ID. For example, your email, your IP address and the list of apps on your phone are all personal data.
- third parties
- Any company or person other than you and the app, such as advertisers, partners or analytics firms. For example, an analytics company that receives a record of every screen you tap is a third party.
- retention
- How long a company keeps your data before deleting it. For example, a policy might keep your messages for 30 days after you delete them, or for as long as it likes.
- indemnify
- You promise to pay the company's legal costs and losses if your use of the service gets it sued. For example, if you post a song you do not own and the label sues the app, you owe the app's lawyer bills.
- device identifiers
- Codes that single out your phone or computer, used to recognise you across apps and sites. For example, the advertising ID on your phone lets two unrelated apps know they are seeing the same person.
How we got here · grade D · score 36/100 · 14 of 15 policy answers backed by a verified quote · 6 not stated
What does the app collect beyond what it needs to work?
Besides email and password, they automatically collect IP, OS, device IDs, and logs. Guests are said to provide no personal data.
Does it record your voice, face or body, and what happens to that?
Not stated in the documents.
Are your chats and uploads used to train AI models, and is that off by default?
Not stated in the documents.
Can employees or contractors read your conversations, and when?
Not stated in the documents.
Are you profiled or tracked for advertising?
They use Google Analytics and Facebook Pixel for stats and marketing.
Do they sell or share your data, and can you opt out?
They say they do not sell data for others’ marketing, and share with hired providers such as Google Analytics, BigQuery, Sentry, and YouTube.
What rights do they take over what you type and what the AI makes?
Not stated in the documents.
How long do they keep your data after you delete it, and can you delete it in the app?
Not stated in the documents.
Does it build a lasting memory or profile of you, and can you see, edit or turn it off?
Not stated in the documents.
Do they commit to basic security, and have they leaked data?
They describe hashing, encryption, SSL, limited access, and breach notice, but no independent audit.
Is there a real age gate, and are teens protected?
Services are not for people without full legal capacity; they rely on you not to lie about age.
Will they tell you when the rules change, and is the policy specific?
The policy is dated 30 August 2020. New versions apply when posted; you are told to check the date yourself.
Can they close your account without warning, and can you get your data out first?
They may suspend access or content without warning if they think you broke the rules.
If something goes wrong, who pays?
They disclaim lots of liability and you must indemnify them for claims tied to your use or content.
Do subscriptions renew on their own, and can you get a refund?
These documents do not describe subscriptions, auto-renewal, or refunds.
The privacy policy is 2,023 words at a college level (Flesch reading ease 45.5); the terms are 3,495 words at a college graduate level.
