Privacy policy

Who I am

This site is run by EasyWebSystems (sole proprietorship, owned by Martin Steen Nielsen), company no. (CVR) 31622204, Grønnegade 4, 4800 Nykøbing F. I am the data controller for the information described here. You can write to me at support@nielix.net. The Android TV app and how it relates to your data is described in its own section below.

The Nielix server that you run yourself is something else. It lives at your place, and I cannot see what is on it. Apart from fetching your key, the only thing it sends me on its own is a small anonymous statistic, described below.

What I store

Your account: name, email address, password (only as a one-way hash), chosen language and, if you turn it on, two-factor details.

Your servers: name, server id (the fingerprint of the server public key) and the public key itself, version, time of pairing and of last contact, and the key I have issued. If you have turned on statistics on the server yourself, I also store the number of users, the number of libraries and the days in operation.

Your subscription: which subscription you have, which price version and currency it was created on, its status and when the period ends. Card details are never stored by me, but by Stripe.

Support tickets: the messages and attached files you send me, my replies and my internal notes about the ticket. Suggestions and comments under Suggestions: your text and the nickname you choose. Your email address is never shown to other customers.

Cloud copies of your server's settings, if you turned that on yourself (it is off by default): a file that the server itself encrypted with your passphrase before sending it to me. I cannot open it. I store the file and its date, size and version.

The server overview: a small number of data points from your server, for example whether it was in contact and which version it runs.

Messages: operational notices that I send to the servers, and whether your server has fetched them.

Emails I send you: service messages about your account and subscription, never newsletters or advertising.

Ordinary access logs at my hosting, with time, the address of the requester and errors. They are deleted on a rolling basis. For the statistics address, the access log in my own web server is switched off.

Anonymous statistics from your server (see the statistics section below): version, operating system, processor type, features that are turned on or used, coarse ranges for the number of users, libraries, channels and devices, license state, language and days in operation, plus a random install_id and possibly a country code.

What I do not do

I use no ads and no external fonts. Without your consent the site only sets the necessary cookies, namely the one that keeps you logged in and the one that protects forms against forgery.

Statistics on the website: if you press Allow statistics in the banner, I measure visits to the public pages with Google Analytics (Google Ireland Limited and Google LLC). A script is then loaded from Google and cookies (_ga) are set, and Google receives your IP address (anonymised), which page you view, your browser and your approximate location. I only use it to see which pages are read and how people find the site. If you press Necessary only, nothing is loaded from Google. You can change your mind at any time under Cookie settings at the bottom of the page, and the cookies are then deleted. The statistics never cover login, the portal, the app or your server. The legal basis is your consent (GDPR Art. 6(1)(a)), and data may be transferred to the US on the basis of Google's EU-US Data Privacy Framework certification.

Error reports: your server never sends a report on its own. Only when you press Send to support in the server administration, have seen exactly what is sent, and have confirmed it, does the report reach me. A report contains the extract of the server error report that you saw (error messages, version and the server id), and a note if you wrote one. It is linked to your account and kept for 90 days, after which it is deleted automatically, unless I write to you about keeping it because we are still working on the fault. You can see and delete your reports under Support, My error reports, at any time.

Your server sends nothing about your files, titles or users. The key only contains a masked part of your email address, like a***@example.com.

The Nielix app for Android TV

The app "Nielix" (package dk.nielix) is a player for a Nielix server that you choose and run yourself. The app contains no media and connects only to the server you point it at. I, as the publisher of the app, receive no information from it, and I have no access to your server, your media or your accounts there. The owner of the server you connect to is the data controller for what that server stores about you. If the server is your own, that is you.

What the app sends to your server when you use it:

• Sign-in: username and password, and a one-time code if you use two-factor. The password is not kept in the app, only a token, stored encrypted in Android's secure storage on the device.
• Device: a random device id, the device's name and type and the app version, so the server can list your devices and send commands and messages to the right one.
• Installed apps: a list of the apps on the TV that have a launcher icon (package name and label), so the server only offers "Open app" shortcuts to apps that exist on your TV. The app reads nothing else about your apps.
• Playback: what is playing, how far you have got, watched or unwatched, favourites, lists, audio and subtitle choices, which screen you are on and volume.
• Search terms you type in the app.
• A place for weather, but only if you choose one (city or coordinates). The app never reads the TV's location.
• An error report, but only if you press Send error report. It contains the app version, device model, Android version, recent log lines and a note if you wrote one. Passwords, keys, email addresses, IP addresses and addresses with codes are removed. The report goes to your own server and not to me. It can only reach me if the server's owner chooses to forward it, as described in the section on error reports above.

What is stored on the device: the encrypted token, the address of your server, your device id and the app's settings. It is deleted when you sign out, remove the server in the app or uninstall the app.

The app has no ads, no third-party analytics or crash-reporting tools, no tracking and no advertising id, and I share nothing with third parties from the app.

The connection: if your server uses https, the connection is encrypted, and that is what I recommend. The app also allows http, but only meant for servers on your own home network, where there is rarely a certificate. If you choose an unencrypted address the app warns you, and the connection is then not encrypted. Do not use http over the internet.

Permissions: the app uses internet access and network state, notifications, a foreground service and start after the TV restarts, so it can show messages from the house ("Dinner is ready") while another app is open, plus the rights Android TV requires to show "Continue watching" on the home screen. You can switch off messages in the background under Settings, Messages in the background, and the server administrator can switch them off for the whole server. The app has no permission for microphone, camera, location, contacts or files.

Child profiles: an adult can create child profiles (age limit, daily time, bedtime) on the server. Parental control is a feature of the server, not something I run. The app is not directed at children under 13, and no more is collected about a child profile than about other profiles.

The demo server: for Google's reviewers there is a demo server with made-up content. It is only for the review, needs a code that only the reviewers have, contains no personal data, and is reset every night. Do not use it for anything else and do not put your own information on it.

Deletion: see the section "How to delete your data" below.

Anonymous statistics from the server

Unless you have turned it off, your Nielix server sends me a small statistic at most once a week. It is on by default and can be turned off in the server's first setup, under Settings, or with the environment variable NIELIX_TELEMETRY=off. The exact list of fields, an example message and what is never sent is on the page "What I collect".

I do not store your IP address or your program type. If country lookup is on, I only look up a country code from the address when the message arrives, and discard the address immediately. The statistics contain a random install_id that the server creates itself. It is not tied to your account, your server id or your name, but it follows the same installation from week to week. I therefore regard the information as anonymous in practice, but I cannot rule out that it is pseudonymous in the legal sense, and I treat it accordingly.

You can at any time have everything about your installation deleted with the button Delete my data in the server's Settings. I use the numbers solely to keep developing Nielix.

Purpose and legal basis

I process the information to deliver your subscription and issue keys (contract), to help you with support (contract and legitimate interest), to comply with the Danish bookkeeping act (legal obligation) and to keep the site secure (legitimate interest). You send error reports and cloud copies only by your own choice (consent). I process the anonymous statistics on the basis of my legitimate interest in being able to improve the program. You can always say no by turning it off.

Processors and recipients

I use few providers, and only these:

• Hosting: the site runs on my own server (dockerone) in Denmark. The database and files are there. It is not an outside provider.
• Cloudflare: DNS provider for nielix.net. It can see that the address is looked up, but not the content of the site, because traffic does not pass through Cloudflare.
• Resend (EU region, eu-west-1): sends the emails the site sends, such as email confirmation, password reset, receipts and replies to support tickets. Resend receives the email address and the content of the email in order to send it.
• My own mail server: incoming mail to hello@, support@ and martin@nielix.net is received on a mail server I run myself. What you write to me is stored there.
• Stripe: processes the payment. Stripe is itself responsible for the card details and only tells me who has paid and what the subscription covers.

Cloudflare, Resend and Stripe are processors for me or are independently responsible for their part, and they may process data outside the EU. The basis is then the European Commission's standard contractual clauses and those providers' own terms. I do not sell information and do not share it with anyone else.

How long I keep it

Account and servers: until you delete your account.

Cloud copies of the server settings (only if you turned them on yourself): the 5 newest per server, encrypted so that I cannot read them. They are deleted with the account, or when you delete them yourself under Account.

Error reports: 90 days, after which they are deleted automatically, unless I have written to you about keeping one because we are still working on the fault.

The server overview's data points (for example when the server last made contact): 30 days.

Anonymous statistics: the individual messages from an installation for 13 months after its last message, and then they are deleted automatically. Only the combined weekly totals, in which no single installation can be recognized, are kept.

Support tickets, suggestions and comments: as long as the account exists.

Accounting: invoices and payments are kept under the Danish bookkeeping act, at Stripe and by me, for up to five years after the end of the financial year. This only applies to you if you have paid for something. I cannot delete these records before that time has passed, even if you delete your account, but they are used only for accounting and legal requirements.

Ordinary access logs at my hosting are deleted on a rolling basis.

How to delete your data

Where your data lives decides how it is deleted.

1. Data on your own Nielix server (profiles, playback state, favourites, devices, what the app has sent): this is deleted by the server's owner. If it is your server, go to Account, Delete my account in the web client. You can also remove the server in the app or delete the server entirely. If you use someone else's server, ask the owner to delete your account. I can neither see nor delete anything on a server I do not run.

2. Your account with me at nielix.net and everything that belongs to it: sign in and choose Account, Delete account. Your servers, keys, account details, tickets and attachments, error reports, cloud copies, suggestions and comments are then deleted immediately, and a running subscription is cancelled. You can instead write to support@nielix.net from the email address the account was created with, and I will delete it and reply within 30 days at the latest. You can also delete individual error reports under Support, My error reports, and individual cloud copies under Account.

3. Anonymous statistics from your server: press Delete my data in the server's Settings, and everything about your installation is deleted at my end.

4. Accounting records for payments I must keep for up to five years after the end of the financial year under the Danish bookkeeping act. They are deleted afterwards. Everything else is deleted as described above.

If you have only used the app against a server you do not run yourself, and never created an account with me, I hold no information about you and there is nothing to delete at my end.

Your rights

You can at any time download everything I have about you as a file and delete your account, both under Account. You also have the right of access, rectification, restriction and objection. Write to support@nielix.net.

You can complain to the Danish Data Protection Agency (Datatilsynet, datatilsynet.dk) if you think I process your information incorrectly. Please write to me first, and I will try to sort it out.