Compliant with Regulation (EU) 2016/679 (GDPR) and French data-protection law.
This document is available in French and English. In case of discrepancy, the French version prevails. Questions: [email protected].
This policy explains what personal data Oryon processes, why, and your rights. Oryon is a media player and provides no content; we limit collection to what is strictly necessary.
The data controller is the publisher of Oryon (see legal notice). To exercise your rights: [email protected].
Account: email address, password (stored hashed), subscription status. Sync: favourites, history, profiles, and the credentials of the sources you configure (encrypted on the device, transmitted over a certificate-pinned connection). AI assistant: the text of your requests is sent to our AI provider while generating the answer. Technical data: IP address, app version, device type, security logs.
We do no advertising profiling and use no third-party ad trackers.
| Account & sync | Contract performance (Art. 6.1.b) |
|---|---|
| Subscription & payments | Contract / legal obligation |
| AI assistant | Service at your request |
| Security, anti-fraud | Legitimate interest (Art. 6.1.f) |
| Hetzner (Germany) | Hosting — data in the EU |
|---|---|
| Cloudflare (USA) | CDN, security — Standard Contractual Clauses |
| Brevo (France) | Transactional emails |
| Google (Gemini) | AI — request text only |
| Payment provider (MoR) | Premium sale & billing |
We do not sell or rent your data.
Data is hosted with Hetzner, in Germany (EU). Some technical transfers outside the EU are covered by Standard Contractual Clauses.
Account & sync: while the account is active, then deleted on request. Technical logs: limited duration. AI requests: not kept in identifiable form beyond processing.
Access, rectification, erasure, restriction, objection, portability. To exercise them: [email protected]. You may lodge a complaint with the French CNIL: www.cnil.fr.
Hashed passwords, source credentials encrypted on the device, certificate-pinned connection (TLS), rate limiting.
The service is not intended for children without parental consent. A "kids mode" filters adult content from the configured sources.
Last updated: 2026.
