Privacy Policy

In short: Ensō does not collect your personal data on its own. The app has no analytics and no advertising, and it needs no server of ours to work: it talks to the Jellyfin server you enter. Only when you choose to send us a report or an idea does something reach us, and only what the form shows you before you send it. This page also explains how this website handles data.

1. Who is responsible

The person responsible for the processing of personal data is Julian Pokorny, Hauptstr. 17, 87772 Pfaffenhausen, Germany. E-mail: contact@enso.watch.

2. The Ensō app

What stays on your device

The address of your Jellyfin server, your user name and the access token Jellyfin issues for this device (kept in the iOS Keychain), your settings, the media you download, and caches such as artwork.

What the app sends, and to whom

Ensō sends requests to the Jellyfin server you entered: signing in, loading your libraries, playing media and reporting what you have watched. That server is run by you or by someone you trust, and its own privacy practices apply. We do not receive any of this information.

Reports and ideas you send us (optional)

Under Settings → Support you can report a problem or suggest an idea, and you can shake your iPhone or iPad to report a problem. On the Apple TV a QR code leads to the form on this website. Nothing is sent until you tap Send.

What goes with your message: your e-mail address, only if you enter one so that we can answer; a picture of the screen, only if you add one; the diagnostic log, only if you switch it on (you can read it first, and server addresses, IP addresses, e-mail addresses, access tokens and the names of your accounts are removed from it); and technical details: the version of the app, the device model, the system version, the languages of the app and of the device, and the screen you were on. The app sends no device or advertising identifier.

Your report reaches the server of this website, which keeps it for at most 30 days (the picture, the log and the e-mail address are deleted from the server 7 days after the report was passed on) and files it as an issue in a private issue tracker that runs on our own server, where only we can read it. There it stays until we have dealt with it; 30 days after we have closed it, it is deleted together with its pictures. The server does not store your IP address with a report; it only counts requests per address, as a keyed hash that is deleted after at most a day, to stop abuse. Like every request to this website, a report is also noted in the server logs described under 3.

We use this to find and fix problems, to consider ideas and, if you gave an address, to answer you (Art. 6(1)(f) GDPR). Sending is voluntary. Please do not put passwords or other private data in your message or on a picture. To work through reports and ideas we use an AI assistant (Claude, provided by Anthropic in the United States). It is shown the text and the technical details of a report, but not the e-mail address, and pictures or logs only when they are needed to solve a problem. If you want a report deleted, write to us and quote the reference you were given after sending (for example EN-7K2QX); we then delete it together with its pictures.

Apple

The app is distributed through Apple's App Store. Apple may give developers aggregated and anonymous usage or crash information if you have chosen to share it in your device settings. We cannot tell who you are from it.

Third parties

Ensō contains no software from third parties for analytics, advertising or attribution.

3. This website

Server logs

When you visit this website, the web server processes your IP address, the time of the request, the page requested and your browser's user agent. This is technically necessary to deliver the website and keep it secure (Art. 6(1)(f) GDPR). The logs are deleted after 7 days and are not combined with other data.

The form for reports and ideas

The same form is on this website (and the QR code of the Apple TV app leads to it). It sends your message, your e-mail address if you enter one, the language of the page and the language of your browser; what is described above applies to it as well. The form sets no cookies and uses no external services and no CAPTCHA; a short-lived code that the server hands out keeps automated spam out.

The ideas board

Ideas can also be collected and voted on at ideas.enso.watch, a public board that we run ourselves (the software is called Fider; it runs on our own server). You can read it without signing in. To post an idea, vote or comment you sign in with your e-mail address: you receive a link by e-mail, and we store your e-mail address and the name you give (you may use a pseudonym). Your name is shown with your ideas, votes and comments for everyone to see; your e-mail address is visible only to us. The board sets one technical session cookie (user_session_id, valid for one year, used only by the board) and loads no scripts, fonts or analytics from other servers. We process this to run the board and to take your ideas into account (Art. 6(1)(b) and (f) GDPR). The sign-in e-mails are sent on our behalf through the mail servers of netcup GmbH (Karlsruhe, Germany). Ideas and comments stay on the board until they are removed; if you want yours removed or your account and personal data deleted, write to us. Like reports, ideas may be read by the AI assistant described above (without e-mail addresses).

Statistics of visits

To see which pages are read and where readers come from, we count visits with Burst Statistics, a WordPress plugin that runs on our own server; nothing is sent to other companies. For each visit it keeps the page, the page you came from (the referrer), the kind of browser, system and device (for example “Safari on iPhone”), how long the page was open and how far it was scrolled, and, where the plugin can tell from a local database which country a visit comes from, the country - never your IP address. It sets no cookie and stores nothing on your device. Your IP address is not stored: it is only combined with your browser’s user agent and a random value that changes every day into a code that cannot be traced back to you and cannot be linked from one day to the next, so that one visit is not counted several times. If your browser sends “Do Not Track” or “Global Privacy Control”, we do not count you. Visits of the administrators of the website are not counted. The statistics are deleted after 12 months. We do this to understand what readers need and to improve this website (Art. 6(1)(f) GDPR); we have no interest in who you are and do not try to find out.

Cookies and external content

This website sets no cookies for visitors and loads no external fonts, maps, videos, analytics or social media widgets; the statistics described above run on our own server. The language of a page is in its address, not in a cookie. If an administrator signs in, WordPress sets technical cookies for that session.

4. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection under the GDPR, and the right to lodge a complaint with a data protection supervisory authority. To exercise your rights, contact us at the address above.

5. Changes

If the app or this website changes in a way that affects your data, we will update this page.