Rechtliches

Datenschutzerklärung

Konform mit der Verordnung (EU) 2016/679 (DSGVO).

Dieses Dokument ist auf Französisch und Englisch verfügbar (hier auf Englisch). Im Falle von Abweichungen gilt die französische Fassung. Fragen: [email protected].

This policy explains what personal data Oryon processes, why, and your rights. Oryon is a media player and provides no content; we limit collection to what is strictly necessary.

1. Data controller

The data controller is the publisher of Oryon (see legal notice). To exercise your rights: [email protected].

2. Data we process

Account: email address, password (stored hashed), subscription status. Sync: favourites, history, profiles, and the credentials of the sources you configure (encrypted on the device, transmitted over a certificate-pinned connection). AI assistant: the text of your requests is sent to our AI provider while generating the answer. Technical data: IP address, app version, device type, security logs. Diagnostics (with your consent): crashes, freezes, playback failures, screen smoothness and time spent, with the device model and the app version; the report of a failed playback names the title and the server address, never your credentials. Consent is asked at first launch and can be withdrawn at any time in Settings › Privacy.

We do no advertising profiling and use no third-party ad trackers.

3. Purposes & legal bases

Account & syncContract performance (Art. 6.1.b)
Subscription & paymentsContract / legal obligation
AI assistantService at your request
Security, anti-fraudLegitimate interest (Art. 6.1.f)
DiagnosticsConsent (Art. 6.1.a), withdrawable at any time

4. Processors

Hetzner (Germany)Hosting — data in the EU
Cloudflare (USA)CDN, security — Standard Contractual Clauses
Brevo (France)Transactional emails
Google (Gemini)AI — request text only
Open-MeteoWeather on the home screen, only if a city is chosen: the city name (to find it) and its coordinates — no account data
TheIntroDB, IntroDB“Skip intro” button: for the episode playing, the app asks them with the series’ TMDB/IMDb id, season, episode and file length — no account data
Payment provider (MoR)Premium sale & billing

We do not sell or rent your data.

5. Hosting & location

Data is hosted with Hetzner, in Germany (EU). Some technical transfers outside the EU are covered by Standard Contractual Clauses.

6. Retention

Account & sync: while the account is active, then deleted on request. Technical logs: limited duration. AI requests: not kept in identifiable form beyond processing.

7. Your rights

Access, rectification, erasure, restriction, objection, portability. To exercise them: [email protected]. You may lodge a complaint with the French CNIL: www.cnil.fr.

8. Security

Hashed passwords, source credentials encrypted on the device, certificate-pinned connection (TLS), rate limiting.

9. Minors

The service is not intended for children without parental consent. A "kids mode" filters adult content from the configured sources.

Last updated: 2026.