Privacy Policy

What is Skrobla?

Skrobla is a free app that lets you record, list and rate the series, movies and anime you watch. It is available on the web, Android, Windows and as a browser extension (Chrome, Edge and other Chromium browsers, and Firefox). It shows no ads and does not sell your data.

What data do we collect?

• Account: username, email address, your password (stored only as an irreversible bcrypt hash) and an optional profile photo. If you sign in with Google, we receive the email address and name verified by Google; your Google password never reaches us.
• Your library: your watch history (with dates), watchlist, lists, ratings and in-app notifications.
• App version: which client (web, Android, Windows, extension) and which version you use, to help fix problems.
• Security logs: events such as sign-ins, failed sign-in attempts, password resets and account deletion, together with the username and IP address. At most the latest 5,000 entries are kept; older ones are deleted automatically.
• Feedback: the message and category you send through "Report a problem", the app version and your device model / operating system or browser information.
• Unrecognized titles: if the name of a detected video can't be found in the movie/TV database, the title is recorded to improve detection (without showing who watched it; only the number of users is counted). Deleting your account removes your contribution to that count. A correction you make with "Fix" is used only for your account at first; if several different users make the same correction, it applies to everyone.
• Error reports: if an app crashes or hits an error, the error message, where in the code it happened, the app version and your device model / browser information are sent automatically. Your watch history and personal details are not included; reports are used only to fix bugs and are deleted shortly afterwards.
• Preferences on your device: settings such as theme, language and font size are stored on your device (in the browser's local storage or the app's settings) and are not sent to the server.

Automatic detection

To record what you watch automatically, Skrobla reads and sends the following, only on the platforms you install and keep enabled. This information is used only to work out which series or movie you watched and to show it in your "Recent events" list.

• Browser extension: while automatic detection is on, the title and address of the tab where a video is playing and the length of the video. No request at all is sent to the server from sites you have blocked.
• Android — notification access: if you grant it, the title and length of the media playing in allowed apps (by default browsers, streaming apps and video players; music apps are excluded). Only active media sessions are used; the content of your other notifications is neither read nor sent.
• Android — Address Bar Access (optional accessibility permission): if you turn it on, only the address in the address bar of supported browsers (Chrome, Samsung Internet, Firefox, Edge, Opera, Brave, Vivaldi, DuckDuckGo and Kiwi) is read. The address is kept only in memory on your device and is sent only while a video is playing in that browser, to record the watch. No other content on your screen is read. You can turn this permission off at any time.
• Windows app: the name and progress of the file playing, from the local interface of VLC and MPC-HC and from the window title of supported players (e.g. PotPlayer).
• To find out which title a detected text belongs to, the text (e.g. "Breaking Bad Season 1") is searched on TMDB; no account details are added to the search.

How do we use your data?

Your data is used only to run the app, record what you watch, protect your account (e.g. password reset, sign-in verification codes, rate limiting), debug problems and reply to your feedback. There is no marketing, profiling or advertising.

Third parties

• TMDB: series and movie information (posters, overviews, cast, episodes) comes from The Movie Database. Searches and detected titles are sent to TMDB through our server; your account details are not. Posters and images load directly from TMDB's image server, so your IP address is visible to TMDB. This product uses TMDB and the TMDB APIs but is not endorsed, certified, or otherwise approved by TMDB.
• Google (optional): if you use "Continue with Google", the identity token issued by Google is verified with Google to sign you in.
• Trakt (optional): if you connect your own Trakt account in Settings, your watch history, watchlist, ratings and lists are imported once, and afterwards what you do is also sent to Trakt. If you don't connect it, no data goes to Trakt; you can disconnect at any time.
• MyAnimeList (optional): if you connect it under Settings → Account Connections, the episodes and movies you watch, your ratings and your watchlist are sent to that service at your request, and, if you wish, your history there is imported into Skrobla. If you don't connect it, nothing is sent. Your connection tokens are stored on the server and used only for this purpose.
• Email delivery: verification-code and password-reset emails are sent through an email service provider, which sees your email address while doing so.
• Hosting: your data is hosted on servers in Germany (Oracle Cloud, Frankfurt region). Your data is not sold or shared with anyone for advertising.

How long do we keep it?

• Your account and library data are kept while your account is open and are deleted immediately when you delete your account.
• Daily database backups of the server are kept for 7 days; the records of a deleted account remain only in those backups during that time and are then removed automatically.
• At most the latest 5,000 security log entries are kept.
• Your feedback messages may remain after you delete your account, unlinked from it (with your username removed).
• Sign-in verification and password-reset codes are valid for a short time and are stored only as hashes.

Cookies and device keys

On the web, a required session cookie keeps you signed in; the Android app, the Windows app and the extension use a device key (token). You can see and remove your connected devices under Settings → My Devices. There are no tracking or advertising cookies; our website also loads its fonts from our own server and makes no third-party requests.

Security

All connections are encrypted with HTTPS. Passwords are hashed with bcrypt, sign-in attempts are protected by rate limiting and, if your email address is on file, a verification code sent to your email may be required when signing in.

Your rights

• Deletion: you can permanently delete your account and all data linked to it under Settings → Profile → "Delete My Account". See the Account Deletion page for details.
• Portability: you can export your watch history as a CSV file at any time (Settings → Watch History / Data).
• Correction and access: you can change your username, email, password and profile photo in Settings.
• Other requests: write to us via Settings → Report a problem in the app or at skrobla.support@gmail.com.

Children

Skrobla is not directed at children under 13.

Changes

This policy may be updated; the current version is always on this page, and we announce important changes inside the app.