Privacy

Norri is designed with privacy as a core principle. Your media library stays on your server, and we have no visibility into what you watch or own.

Core Principles

All your data lives on your server, not in the cloud. We don’t collect usage data, analytics, or crash reports. There’s no sign-up and no external authentication required. After the initial setup and library scanning, Norri works without internet.

What Stays Private

The following data never leaves your server:

• Your media files and library contents
• Watch history and playback progress
• User accounts and preferences
• Server configuration and settings

External API Calls

Norri makes requests to external services for metadata. Here’s exactly what happens:

When Calls Are Made

Normal browsing and playback make no external calls. All metadata is cached locally.

Scheduled Tasks Are Optional

Norri can run automatic scans and metadata updates on a schedule, but these are entirely optional. You can:

• Disable all scheduled tasks in Settings → Scheduled Tasks
• Run scans manually when you add new content
• Refresh metadata manually when needed

If you disable scheduled tasks, Norri will only contact TMDB/TVDB when you explicitly trigger a scan or refresh.

User-Initiated TMDB Requests

Some features explicitly fetch data from TMDB when you click a button. These are clearly labeled in the UI:

These requests happen only when you explicitly trigger them. Normal browsing uses locally cached data.

Why this design?

We could pre-fetch all alternative artwork during scans, but most users never change artwork, so it would waste bandwidth for no reason. Fetching on demand keeps scans faster and means you always know exactly when an external call is happening. Default artwork works fine without internet.

What Data Is Sent

What Is NOT Sent

• File paths or filenames (only parsed titles)
• File sizes or quality information
• Watch history or playback data
• User account information
• Hardware or system details

Using a Proxy for Additional Privacy

If you want to hide your IP address from TMDB/TVDB, you can route API calls through a proxy. See our Proxy Setup Guide for configuration instructions.

Why Use a Proxy?

• Prevents TMDB/TVDB from seeing your real IP address
• Routes requests through your VPN provider
• Adds an extra layer of privacy for metadata requests

What a Proxy Does NOT Do

• It doesn’t hide what titles you’re searching for
• TMDB/TVDB will still see the search queries
• Your VPN provider can see the requests instead

For most users, the default behavior is private enough. TMDB knowing you searched for “The Godfather” reveals very little about you.

Issue Tracker Accounts

The issue tracker is the only part of the norri.tv website that asks you to create an account. Here’s why, and what it means for your privacy.

You Will Never Need a norri.tv Account to Use Norri

Norri runs entirely on your own hardware. Your media server, your data, your users. You will set up local user accounts on your own server for the people in your household, but those accounts belong to you and stay on your machine. We never see them.

There will never be a “Sign in with norri.tv” requirement. You will never need to register with us to use the software. This is both a core design principle and a key feature of the project, and it is not going to change.

Why the Issue Tracker Needs One

The issue tracker is a separate service on our website for reporting bugs and requesting features. It requires an account for a few practical reasons:

• You can track your reports, see status updates, and get notified when something is fixed
• We can reply directly on issues if we need clarification or want to confirm a fix. No contact outside of tracker notifications.
• Feature voting works fairly with one vote per person, so nobody can skew priorities
• It keeps out spam. Open submission forms without accounts get flooded quickly.

What We Store

Your issue tracker account contains:

• Your email address, used for authentication and notifications. Never displayed publicly.
• A display name chosen during signup and shown on your posts. We suggest random phrases so you don’t need to use your real name.
• Your password, stored encrypted. We can never see or retrieve it.

That’s it. No profile tracking, no analytics cookies, no third-party services involved in the issue tracker.

What we won’t do with your data

We won’t sell or share it. Registering on the issue tracker won’t add you to any mailing list. The only emails you’ll get are notifications for issues you’ve subscribed to.

Your tracker account and your Norri server are completely separate systems with no connection between them. We have no way to link them and no interest in doing so. The media server works without any involvement from us, and that’s not going to change.

Deleting Your Account

You can request account deletion at any time through your account settings. This removes your email, display name, and all associated data. Any issues or comments you submitted will remain visible but will be shown as posted by “Anonymous.”

Frequently Asked Questions

Does Norri phone home?

No. Norri makes zero connections to our servers. We have no idea who’s using the software or what they’re watching.

Can you see my library?

No. Your server is entirely self-contained. We have no access to it and no way to connect to it.

What about TMDB/TVDB? Do they track me?

TMDB and TVDB see your IP address and what titles you search for. This is no different from visiting their websites directly. They don’t know you’re using Norri specifically.

Is my watch history private?

Yes. Watch history is stored locally on your server. No external service can see what you’ve watched or when.

What happens if I lose internet?

Norri continues working normally. You can browse, search, and play content. You just won’t be able to add new items that need metadata lookup.