Privacy Policy

Last updated: March 22, 2026

The short version: DebridDownloader does not collect, store, or transmit any personal data. Everything stays on your device.

Overview

DebridDownloader is an open-source desktop application that manages torrent downloads through debrid services. This policy explains what data the app handles and how it is stored.

Data We Do Not Collect

DebridDownloader does not:

Collect analytics, telemetry, or usage data
Track your browsing, downloads, or search queries
Send any information to our servers (we don't have any)
Use cookies, tracking pixels, or advertising SDKs
Share any data with third parties

Credential Security

Your credentials are never stored in plain text. DebridDownloader uses your operating system's native secure storage for all sensitive data — there are no config files, databases, or local storage containing your tokens.

Specifically, API tokens and OAuth secrets are stored using:

macOS — Keychain Services (the same system Apple uses for Safari passwords)
Windows — Windows Credential Manager (DPAPI-encrypted)
Linux — Secret Service API (typically GNOME Keyring or KWallet)

Credentials never leave your device except when authenticating directly with your chosen debrid provider over HTTPS.

Other Local Data

The following non-sensitive data is stored on your device:

App settings — Preferences like download folder, theme, and tracker configurations are stored locally using Tauri's plugin-store. These contain no secrets.
Tracker configurations — Any torrent tracker sources you configure are stored locally. No default sources are included.

Third-Party Services

DebridDownloader communicates directly with the debrid provider you choose to connect (Real-Debrid or TorBox). These communications are:

Initiated only by your actions (adding torrents, downloading, streaming)
Sent directly from your device to the provider's API
Subject to the provider's own privacy policy

We recommend reviewing your provider's privacy policy:

Auto-Updater

The in-app updater checks GitHub Releases for new versions. This request goes directly to GitHub's servers and is subject to GitHub's privacy policy. No personal information is sent — only a standard HTTPS request to check for release metadata.

Video Streaming

The video preview feature runs a local HTTP proxy server on your device (127.0.0.1) to stream video content from your debrid provider. No data is transmitted to external servers beyond the direct connection to your provider's download URLs.

Open Source

DebridDownloader is fully open source under the GPL-3.0 license. You can inspect every line of code to verify these claims:

github.com/CasaVargas/DebridDownloader

Children's Privacy

DebridDownloader is not directed at children under 13 and does not knowingly collect any personal information from anyone.

Changes to This Policy

If this policy is updated, the changes will be reflected on this page with an updated date. Since the app collects no data, meaningful changes are unlikely.

Contact

Questions about this policy? Open a discussion on GitHub Discussions.