Privacy

1. Who this covers

This policy is published by Rhys Jones trading as StreamLink, author of WebDLNA. It covers the WebDLNA software and this website.

The important structural point: WebDLNA is self-hosted. You run it on your own machine, and it talks to media servers on your own network. We do not operate a service, do not receive your data, and have no ability to access your library, your activity or your device. That is not a policy choice we could reverse, because there is nowhere for that information to go.

2. What the app stores on your device

Everything WebDLNA remembers is kept in your browser, on the machine you use it from. It is never transmitted to us. Each profile keeps its own copy.

In browser storage (localStorage)

• Preferences. Theme, accent colour, layout, discovery, quality cap, resume behaviour, offline library limits.
• Your library activity. Favourites, playback history, play counts and statistics, resume positions, playlists.
• Servers. The media servers you have connected to, and any search indexes you have built from them (titles, artists, albums, durations, sizes and folder paths).
• Searches. Recent and saved searches.
• Profiles. The profiles on this device and which is active.
• Interface state. Trivia such as which sidebar was last open.

In private file storage (OPFS)

• Media you download for offline playback, stored in the browser's Origin Private File System.

Cookies

None. Neither the app nor this website sets a cookie. The app uses browser storage, which is not sent with requests and is visible only to the app itself.

3. What leaves your device

Within your own network

• The browser talks to the WebDLNA backend you are running.
• That backend discovers and queries your media servers, and proxies media from them to your browser, transcoding first if the file needs it.
• Casting sends the media address and its title, artist, album and artwork to your Chromecast.

None of this leaves your network, and none of it reaches us.

To Google, because of casting

Two requests do go out, both belonging to Chromecast support:

• The Cast SDK (gstatic.com) is loaded whenever the app opens, rather than only when you cast, because the browser has to have it in place before it can offer a cast button. Loading a script reveals your IP address, browser and referring page to Google, and its subsequent behaviour is governed by Google's privacy policy.
• A STUN server (stun.l.google.com) may be contacted while starting a cast. A Chromecast cannot fetch localhost, so the app has to learn the address your machine has on the network; it asks the backend first, and falls back to this method only when the backend cannot tell.

Neither carries your media, your library or your activity. If you would rather they did not happen at all, remove the Cast SDK <script> tag from index.html and rebuild. Casting stops working and nothing else changes.

Logs on your own machine

The backend writes operational messages, such as servers found, streams started and transcode errors, to its own console or service log on your machine. That log is yours; nothing forwards it anywhere.

4. This website

These pages are static HTML and CSS. They load no fonts, scripts, trackers, embeds or images from anywhere else, set no cookies, and run no analytics. The only script is a few lines served from this same site, which checks whether the pages are being served alongside a running copy of the app so it can show or hide one link.

Whoever hosts these pages will keep ordinary web server logs holding IP address, page requested, timestamp and browser string, as nearly all web servers do, for delivery and security. When the docs are served from your own WebDLNA instance, those logs are on your machine and go no further.

5. Children

WebDLNA is not directed at children and collects no information from anyone, of any age.

6. Your control over the data

Because it is all on your device, you do not need to ask us for any of it:

• Export it. Favourites, history, playlists and statistics export to JSON or CSV from within the app.
• Delete some of it. Clear history, remove favourites, delete search indexes or offline downloads individually.
• Delete all of it. Settings → Data clears everything the app has stored for the current profile. Clearing site data in your browser removes it all, downloads included.
• Uninstall. Stop the backend and remove the directory. Nothing of it remains anywhere else.

We hold no personal information about you, so there is nothing for us to correct, provide or erase on request. If you contact us, we will have whatever you chose to tell us in that message, and no more.

7. Australian privacy law

This policy is written with the Privacy Act 1988 (Cth) and the Australian Privacy Principles in mind. Because WebDLNA collects no personal information, most of the obligations that would otherwise apply, such as collection notices, cross-border disclosure and access and correction requests, have nothing to attach to.

If you believe your privacy has been mishandled, tell us through streamlink.net.au and we will respond. You may also complain to the Office of the Australian Information Commissioner at oaic.gov.au.

8. Changes

If a future version of WebDLNA collects or transmits anything not described here, this page will be updated and the date at the top changed before that version ships. Any such change would be listed in the project's changelog as well.

9. Contact

Privacy questions can be directed to StreamLink via streamlink.net.au.