Privacy

Your media activity stays between your devices and the Portico Server you choose. Portico Services coordinate access, but they aren't part of the media path.

Last updated: October 22, 2026

Who this policy covers

This policy covers information processed by the Portico public website, Portico applications, and Portico-hosted account and connection services (“Portico Services”).

Each independently operated Portico Server has its own administrator and its own data practices. The server owner, not Portico, controls the media, local accounts, permissions, server logs and other information held on that server.

Public website

The public website doesn't use advertising, tracking pixels, account sessions, or analytics that follow you across the web.

When you visit, our delivery and hosting systems must process ordinary request information to return the page and protect the service. This includes the requested address, the time, browser information, your network address and security signals. We don't use that information to build advertising profiles.

Portico Account information

If you use Portico Services, we process the information needed to provide and protect your account. This can include:

• your email address
• your username and display name
• authentication and recovery information
• active sessions
• registered devices
• security events
• records of your requests to us

We don't store passwords and comparable secrets as readable account records. We store them using appropriate one-way or encrypted protections.

Profiles, their names and pictures, viewing preferences and permissions live only on each Portico Server. Portico Services don't store them.

Server coordination information

Portico Services process the limited account and connection information needed to connect accounts and servers. This can include:

• a server identifier and public identity key
• the owner account and an index of account roles: owner, administrator or member
• registered addresses and signed connection information
• connection reachability and health state
• certificate coordination state
• software version and device descriptors
• timestamps
• the public network address observed when a server contacts Portico Services

The server decides who may use it and what they may do. Portico Services keep the role index so apps can show your server list; they don't store libraries, access permissions or invitations.

To let apps connect at home, a Portico Account server's home-network addresses are published under public DNS names. Those names and addresses can be looked up publicly. Knowing an address doesn't authorize access: the server still requires sign-in.

A server using local accounts doesn't contact Portico Services. If its owner switches to local sign-in while offline, a notice already queued for delivery withdraws its Portico registration when Services can be reached.

Media and streaming stay private

Portico Services don't host, proxy, tunnel, relay, cache, transform, inspect, meter or store any of the following: video, audio, Live TV, DVR recordings, artwork, subtitles or downloads. They don't receive ordinary library browsing, playback, progress, remote-control or server API traffic.

Portico Services don't collect:

• library metadata
• titles
• filenames
• filesystem paths
• private source addresses
• playback history
• watchlists
• ratings
• queues
• local searches
• stream contents
• streaming details

Your client connects directly to the Portico Server, so Portico Services aren't technically in a position to monitor that activity.

Account and connection-coordination requests still carry the limited technical information described above. Your media traffic and media activity don't pass through Portico Services.

A future relay

Portico doesn't currently provide a media relay. If we introduce an optional relay, it's intended to carry end-to-end encrypted connections that Portico can't decrypt or inspect.

A relay may need to process limited connection, security and traffic-volume information to operate. It won't be designed to reveal stream contents, titles, library information or playback details. We'll publish updated privacy information specific to that feature before it becomes available.

Diagnostics and communications

Portico may process operational logs, error details, request identifiers, network addresses, security signals and aggregate service measurements. We need these to keep hosted services secure and reliable. We keep sensitive information in logs to a minimum, and we don't use operator tools to browse private servers.

If you contact support or report abuse, we process the messages, attachments and contact details you provide. We use them to respond and to keep an appropriate record of the matter.

How we use information

We use information to:

• provide and secure Portico Accounts
• coordinate connections
• show the servers your account belongs to
• deliver service messages
• diagnose failures
• prevent fraud and abuse
• improve reliability
• respond to requests
• enforce our terms
• comply with lawful obligations

We don't sell personal information or use it for targeted advertising.

When information is shared

We share information only as reasonably needed:

• with service providers that help operate Portico, such as infrastructure, content delivery, email, security and support providers
• with a server owner when needed to administer a membership or address a service issue
• when you direct us to share it
• when required by valid legal process, or when necessary to protect people, Portico or its services

Providers receive only the information appropriate to their role and are expected to protect it.

Deleting a Portico Account is refused while it owns a server. Change owner, switch to local sign-in or start over on that server first. When an account is deleted or leaves, Portico Services send only a departure notice. Each server disables that membership and keeps its profiles and media activity until its owner deletes them. Portico Services never erase data on a server. A person's own request to delete their server profiles and history is handled by that server.

After a server leaves Portico Services, its registration, account links, addresses and certificate orders are removed. Public-name withdrawal records remain so DNS readers that were offline can remove the names too. These records contain only public names and feed sequence numbers, with no server or account identifiers, network addresses or keys. A hashed receipt permits safe retries of the withdrawal notice.

Where feasible, we keep transient network information for shorter periods. Raw or hashed network addresses, stale endpoint observations, rate-limit state and cached connection-retry state are ordinarily kept for about one or two days or less after they stop being operationally useful. Portico doesn't keep them permanently just for convenience.

Routine operational audit events are generally kept for seven days. Security and support audit records may be kept longer while they're still needed for those purposes. Request-network fingerprints are removed from them earlier.

Your choices

You can review and change account and sign-in settings through Portico Services, and profile, access and media settings on each server. You can also ask for access to, correction of, or deletion of your personal information by emailing [email protected]. We may need to verify the request. Some information may be kept where it's required for security, legal compliance or another permitted reason.

Server owners manage the information stored on their own Portico Servers and can see server-wide play history. Administrators can see Now playing and manage People; they don't get full play history. Your main profile can manage the other profiles on your account without seeing their history. Send requests about a server's media, accounts, permissions, playback records or logs to its owner.

Security

Portico uses technical and organizational safeguards appropriate to the information it processes. These include encrypted transport, limited access, credential protection and data minimization. No system can guarantee absolute security. Please use strong account protection and report suspected compromise promptly.

International processing

Portico and its service providers may process information in more than one country. Where required, we use appropriate safeguards for information transferred across borders. We apply this policy to the information in our care.

Changes and contact

We may update this policy as Portico develops. When we do, the date above will change. Where practicable, we'll give reasonable notice of material changes.

Send privacy and security questions to [email protected]. Send copyright and abuse reports to [email protected].