Portage Privacy Policy
Portage is an app for playing, downloading and casting media from a media server you already have access to. It has no account of its own, no analytics, no advertising and no tracking. This page describes what the app stores and who it communicates with.
What stays on your device
- The addresses of the servers you add and the sign-in tokens for them, kept in the system keychain.
- Your remote access connections: WireGuard keys in the keychain, and Tailscale's sign-in state encrypted with a key in the keychain.
- The media you download, your playback positions, and your track preferences.
- A diagnostics log of the app's own activity. It never leaves the device unless you choose to share it.
Deleting the app deletes all of this.
Who the app talks to
- Your media server (Plex, Emby or Jellyfin), to browse, stream and download. What the server records about your activity is governed by that server's own settings and policies.
- plex.tv, only if you sign in with a Plex account: to complete the sign-in and to list the servers and shared users available to that account.
- Emby Connect (connect.emby.media), only if you sign in that way.
- OpenSubtitles (api.opensubtitles.com), only if you sign in with your own OpenSubtitles account in Settings and search for a subtitle to add to a conversion. The search sends the title you're converting; downloads count against your own OpenSubtitles quota. Your OpenSubtitles token is kept in the keychain.
- tv.rikard.dev and its pairing service, only when you cast to a web browser: it exchanges the connection details between your device and the browser so they can connect directly. No media passes through it, and nothing is kept after the session.
- STUN servers operated by Google and Cloudflare, only during browser casting, to work out how the two ends can reach each other. They see the network addresses involved and nothing else.
- Devices on your local network you cast to — Chromecast, Google TV, DLNA TVs and browsers — which receive the media you chose to play on them.
- Your own router or VPN endpoint, only for a WireGuard connection you add under Remote access.
- Tailscale (login.tailscale.com, its coordination server and relay servers), only if you sign in to your own Tailscale account under Remote access. Tailscale sees this device join your network like any other Tailscale device. When a direct connection isn't possible, your traffic passes through Tailscale's relays, encrypted end to end. Tailscale's own privacy policy applies to your Tailscale account.
- GitHub, only if you choose Report a problem or Suggest a feature and pick GitHub. What you post there is public. Choosing email instead opens a draft to hi@rikard.dev, with a log that has addresses and names removed; nothing is sent until you send it.
Media flows directly between your device, your server and the screen you cast to, or through your own remote access connection when you're away from home.
What is not collected
Portage does not collect usage data, does not include analytics or crash-reporting services, does not show ads, and does not sell or share personal data. The app declares no tracking under Apple's App Tracking Transparency rules.
This website
portage.rikard.dev counts visits with Cloudflare Web Analytics. It sets no cookies, stores nothing on your device and does not follow you across other sites. Cloudflare reports totals such as page views, referring sites and countries. This applies to the website only. The app contains no analytics.
Children
Portage is not directed at children and does not knowingly collect information from them.
Changes
Changes to this policy are published on this page with a new effective date.