Privacy Policy

1. Executive Summary: Local-First Principle

Shutter is architected as a local-first desktop software application. We believe your personal movie and television library belongs solely to you. Shutter does not collect, monitor, upload, stream, or index your personal video files. Your files remain on your external and internal hard drives, and our desktop app functions completely offline without requiring an account or internet connection.

2. What Data Lives on Your Local Machine

The following data is generated and stored locally in an encrypted or sandboxed SQLite database on your operating system:

• Volume and Mount Identifiers: Physical drive serials, filesystem labels, and relative file paths used to locate media files across sessions.
• Playback Progress & History: Timestamps (seconds watched, percentage, resume markers, watched status).
• Catalog Cache: Cached posters, backdrops, episode stills, and metadata pulled from TMDB proxies.
• User Overrides: Manual title matches, custom display names, and franchise collections.

3. Optional Google Sign-In & Multi-Device Sync

If you optionally choose to sign in with Google to synchronize your watch history between your Windows and macOS devices:

• We receive only your primary email address and Google profile identifier via standard OAuth 2.0 PKCE authentication.
• We only synchronize title identifiers, watch progress percentages, and ratings.
• We NEVER sync: File paths (e.g. G:\Movies\...), drive labels, original filenames, or directory structures. Your hardware configuration never reaches our servers.
• Your OAuth refresh tokens are stored exclusively inside your operating system's native secure credential storage (Windows Credential Manager / macOS Keychain) and never exposed to client-side scripts.

4. Third-Party Metadata Services (TMDB)

To fetch movie posters and release information, Shutter matches sanitized titles through an authenticated caching proxy. Shutter strips personal paths, download links, and release site watermarks before querying metadata.

This product uses the TMDB API but is not endorsed or certified by TMDB.

5. Zero Telemetry & Analytics

Shutter contains no behavioral analytics SDKs, no advertisement trackers, and no third-party marketing beacons. We do not track what you watch, when you watch it, or how long your media sessions last.

6. Content Stance & Copyright Disclaimer

Shutter does not host, provide, transmit, index, or distribute any media files or audiovisual content. Users are solely responsible for ensuring they possess lawful access to media files stored on their drives. Shutter operates strictly as an offline organizer and local player.

7. Contact & Data Deletion Requests

For privacy inquiries, account data deletion, or questions regarding this policy, please reach out via GitHub or email at privacy@shutter.rohith-a.me.