Medusa privacy policy
Last reviewed: 2026-10-25.
Summary
Medusa is a client app for Apple TV. It has no account, no server of its own, and collects no data for the developer. Your data stays on your device and on the Jellyfin server you choose.
1. Who we are
Medusa is a free app for Apple TV, developed by DEVELOPER_NAME. Privacy questions: contato@linearcraft.dev.
2. There is no Medusa account
The app does not ask for a sign-up, e-mail, name or Medusa password. The only sign-in is to the Jellyfin server you add. There is no sync between devices: on another Apple TV, you add the server again.
3. What data the app handles
| Data | Why | Where it is stored |
|---|---|---|
| Jellyfin server address | To connect to your server | On the device |
| Server access token | To keep you signed in without asking for your password again | On the device, in the Keychain, not synced to iCloud |
| Device identifier | To identify the session on your server | On the device, in the Keychain |
| Server user name | To show which account is signed in | On the device |
| Server password | Used once, to sign in | Not stored |
| Playback history and progress | Continue Watching and watched items | On your Jellyfin server. The app reads and sends it only to that server |
| Preferences (language, subtitles, appearance) | How the app works | On the device |
| Cache of catalog, images and subtitles | To open the app faster | On the device. You can clear it in Settings |
| OMDb key and OpenSubtitles token, if you provide them | To fetch ratings and subtitles | On the device, in the Keychain |
4. Where the data goes
Medusa does not send data to the developer, because the developer runs no server. Data goes only to the services below, and only when you use the matching feature.
Your Jellyfin server. Sign-in, catalog, images, progress and playback. It is the server you chose and control.
OpenSubtitles. When you search for subtitles, the app sends title identifiers (IMDb or TMDB), season, episode and language. With an OpenSubtitles account, it sends that account's token to download. The user name and password stay only in the Keychain on this device, to renew the token. See also the OpenSubtitles privacy policy.
OMDb (optional). With an OMDb key you provide, and only if the server has no rating, the app sends only the title's IMDb identifier.
TMDB (optional). When enabled, it looks up the community rating by title identifier.
These services do not receive your server address, your token or your user name.
5. No telemetry and no trackers
Medusa has no usage analytics, sends no crash reports to third parties, shows no ads and uses no trackers. Diagnostic logs stay on the device and leave it only if you share them yourself.
6. How to delete your data
- In Settings, Servers section: Sign out deletes the token and cache for that server. Remove also deletes its preferences.
- In Settings, About and data section: Clear cache deletes downloaded images and subtitles. Erase all data and servers removes everything the app stores on the device.
- Deleting the app removes the data stored on the device, except what the system keeps in the Keychain. To clear the Keychain, use Erase all data and servers before you uninstall.
The app deletes nothing on your Jellyfin server. To remove playback history, use Jellyfin itself.
7. Children
Medusa collects no data from anyone, including children. The content shown comes from the server you choose, and supervising that content is the responsibility of whoever runs that server.
8. Security
- The token and device identifier are stored in the Keychain, without iCloud sync.
- The app prefers HTTPS. A plain HTTP connection requires explicit confirmation and shows a warning that the connection is not encrypted.
- Tokens, passwords and keyed addresses are not written to logs.
No method of transmission or storage is completely secure. Use HTTPS on your server whenever possible.
9. Device permissions
Local network. Used to connect to the Jellyfin server on your network. If you deny it, the app still works with the address you typed, as long as that address is reachable.
10. Changes to this policy
When this policy changes, the date at the top is updated. If a change affects how data is handled, the app will tell you.