Privacy for the folge app

Controller and contact

Nils Langner
Steckelhörn 11
20457 Hamburg
Germany
nils.langner@startwind.io

Account and library

On first launch, a device-based account is created with a user ID, handle and display name. No email address is required. A locally stored session credential gives access. We store your subscriptions, watchlist, watched status, feedback, lists, tags, recommendations, friendships and server-managed settings. This provides the features you use (Article 6(1)(b) GDPR). The data remains until you delete the account or individual entries.

Shared lists may expose their name, contents and owner display name according to the visibility you choose. Share links can be forwarded. You can change visibility or delete a list.

Browser, camera and sharing

After you approve a QR code, a browser extension can access your account. We store its connection ID, device name, expiry and a hash of its credential. Revoke connections under Profile → Browser. With tracking enabled, the extension reports supported played content as watched.

The camera opens only to scan the pairing code; camera images are not sent to our server. Links received through the iOS share sheet are first stored locally, then sent with public metadata to the backend when imported.

Push notifications

If you allow notifications, we process an installation ID, Apple push token and delivery status. Apple handles delivery. You can revoke permission in iOS Settings at any time (Article 6(1)(a) GDPR).

External content and connection data

Metadata comes from sources including YouTube, Apple Podcasts, TVmaze and TMDB. Cover images, podcast audio and external playback pages may load directly from providers, who receive technical request data such as your IP address. Their privacy notices also apply.

Accessing app services generates necessary connection data, including IP address, time, requested address and device information. This supports delivery, troubleshooting and security (Article 6(1)(f) GDPR). Technical logs are separate from library data. No advertising or analytics SDK is integrated.

Deletion and your rights

Under Profile → Settings → Delete account, you can delete your account and its personal associations. Sessions and browser connections are revoked. Public catalog data and technical logs are separate. A new account is only created if you explicitly request one.

You may request access, correction, erasure, restriction and data portability, object to processing based on legitimate interests, and withdraw consent for the future. You may complain to a data protection authority. Email nils.langner@startwind.io; we may need to verify ownership.