Kustos Privacy Policy
The full document. The plain-language summary on the Legal page never overrides it.
Effective date: 27 September 2026 Who we are: Kustos ("we", "us", "our"), the maker of Kustos. Privacy contact: the Kustos privacy contact, kustos.wiki@gmail.com
This policy explains what personal information we collect about you when you use the Kustos software ("Kustos"), our licence service, and our website at https://kustos.wiki (together, the "Service"), why we collect it, and what you can do about it.
The short version. Kustos runs on your own hardware, and your library, watch history and settings stay there. The only personal information we hold is what we need to run your licence: your Plex user ID, the email address on your Plex account, your trial dates, and your subscription status. Stripe handles payments. We do not use analytics or tracking, and we do not sell or share your information for advertising.
1. What stays on your server, not with us
Kustos keeps its own database on the machine you install it on. That includes your collections, rules, artwork, watch history, watchlists, linked Trakt and Simkl accounts, API keys for your connected apps, and information about people you share your Plex server with.
We cannot see any of it. It does not come to us, and we cannot access it, recover it, or delete it for you. You control it, and you are responsible for it, including for anyone in your household or anyone you share your server with.
2. What we collect
| Information | Where it comes from · Why we need it |
|---|---|
| Plex user ID | plex.tv, when Kustos sends us your Plex sign-in token — To tie your trial and subscription to your Plex account, and to make sure each account gets only one free trial |
| Email address on your Plex account | plex.tv, in the same step — To contact you about your licence, billing, or important changes, and to answer support requests |
| Trial start date, subscription status, renewal date, cancellation status | Created by our licence service, and updated by Stripe — To decide whether your copy of Kustos is licensed |
| Stripe customer ID and subscription ID | Stripe, when you subscribe — To match Stripe's payment updates to your account |
| Server logs (such as request times, error messages, and your Plex user ID when a trial starts) | Our licence service and our hosting provider — To keep the service running, fix problems, and prevent abuse |
| Anything you send us | You, by email or support request — To help you |
About your Plex token. Kustos sends your Plex token to our licence service with each check so we can confirm with plex.tv which account you are. We use it only for that and do not store it.
What we do not collect. We do not collect your media, library contents, watch history, IP-based location, or device details. Kustos has no analytics, usage tracking, or crash reporting.
3. Payments
Stripe is the reseller and merchant of record for Kustos subscriptions. When you subscribe, you give your payment details and billing information directly to Stripe, not to us. Stripe uses that information under Stripe's Privacy Policy (https://stripe.com/privacy). We never see or store your full card number. Stripe tells us your customer and subscription IDs, and whether your subscription is active, renewing, cancelled, or ended.
4. Information Kustos sends to other services
Kustos also sends information directly from your server to other services. That information does not pass through us, and those services handle it under their own privacy policies:
- Plex (plex.tv): to sign you in and to work with your server.
- Metadata and artwork services you turn on, such as TMDB, ThePosterDB, MediUX, Fanart.tv, Trakt, MDBList, Simkl, and TheTVDB: title names and IDs, so Kustos can find information and artwork. For Trakt and Simkl, it also sends the watch history you choose to sync.
- AI providers, only if you add your own API key: your chat messages, the context Kustos needs to answer them, and, if you enable artwork text detection, the images being checked. These go to the provider your key belongs to (for example Google, OpenAI, Anthropic, or an OpenAI-compatible host you choose). Without a key, nothing is sent.
- GitHub: Kustos downloads app releases (such as Sonarr or Radarr) from GitHub when you install or update them. No personal information is sent.
- Your own apps, such as Sonarr, Radarr, Tautulli, qBittorrent, Seerr, and Telegram, when Kustos acts on your instructions.
Please read the privacy policies of the services you connect.
5. How we use your information
We use the information in section 2 only to:
- run the licence check, the free trial, and your subscription;
- prevent trial abuse and misuse of the Service;
- send you messages about your account, billing, security, or changes to our terms. We do not send marketing emails unless you choose to receive them;
- answer your questions and support requests;
- keep the Service secure and working, and fix problems;
- meet legal, tax, and accounting obligations.
We do not sell your personal information, rent it, share it for advertising, or use it to build profiles about you.
6. Who we share it with
We share personal information only with service providers that help us run the Service, and only as much as they need:
| Provider | What they do · Where |
|---|---|
| Stripe | Payments, tax, receipts, customer billing portal — United States and other countries |
| Fly.io | Hosts our licence service and its logs — United States |
| Neon | Hosts our licence database — United States |
| Plex | Confirms your account when Kustos checks your licence — Plex's own locations |
| Google (Gmail) | Receives and sends our support email — United States |
We may also disclose information if the law requires it, to protect our rights or the safety of others, or as part of a sale or reorganization of the business that owns Kustos. If that happens, this policy continues to apply to your information, and we will tell you.
7. Storage outside your country
We are based in Ontario, Canada. Our licence service and database are hosted in the United States, and Stripe may process data in the United States and other countries. Information stored in another country is subject to that country's laws, and authorities there may be able to access it. We choose providers that protect personal information with safeguards comparable to those required in Canada.
8. How long we keep it
- Account and subscription information: while you have a trial or subscription, and for up to [24] months after your last licence check or subscription ends, unless you ask us to delete it sooner.
- One-trial record: to enforce the one-trial-per-account rule, we keep your Plex user ID and trial start date even after your account is deleted. We keep nothing else in that record.
- Billing records: Stripe keeps records of payments as the law requires. We keep any billing records we hold for as long as Canadian tax law requires (generally six years).
- Server logs: usually kept for [30] days, unless we need them longer to look into a security problem.
- Support emails: for up to [24] months after the issue is resolved.
9. How we protect it
We collect as little as we can, do not store Plex tokens or card details, use encrypted connections (HTTPS), keep secrets out of our code, limit access to our systems, and verify payment notifications from Stripe. No system is perfectly secure. If a breach creates a real risk of significant harm to you, we will tell you and report it to the Office of the Privacy Commissioner of Canada as the law requires.
10. Your rights and choices
You can ask us to:
- see the personal information we hold about you;
- correct it if it is wrong. Your email comes from Plex, so updating it in your Plex account will update it with us at the next licence check;
- delete it, except for the one-trial record in section 8 and anything we must keep by law;
- withdraw consent, which means cancelling your subscription and asking us to delete your information. Kustos will stop working in licensed mode after that.
To make a request, email kustos.wiki@gmail.com from the email address on your Plex account. We may need to confirm the request came from you. We will answer within 30 days.
If you are in the EU, UK, or a similar place: we process your information to perform our contract with you (running your licence), for our legitimate interests (preventing abuse and keeping the Service secure), and to meet legal obligations. You may also have the right to object, to restrict processing, and to get your data in a portable format, and you can complain to your local data protection authority.
If you are in Canada: if you are not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada at priv.gc.ca (https://www.priv.gc.ca).
11. Our website
Our website does not use analytics, advertising cookies, or tracking pixels. It loads fonts from Google Fonts, which means your browser sends your IP address to Google when you visit. [REMOVE THIS SENTENCE IF YOU SELF-HOST THE FONTS.]
12. Children
Kustos is not meant for children, and we do not knowingly collect personal information from anyone under 16. If you think a child has given us information, contact us and we will delete it.
13. Changes to this policy
If we make important changes to this policy, we will tell you in Kustos, on our website, or by email before they take effect. The effective date at the top shows when the policy last changed.
14. Contact
For questions, requests, or complaints about privacy, contact the Kustos privacy contact at kustos.wiki@gmail.com.