1. The short version
spaceandwisewolf.space is self-hosted software. The vendor does not run a service that sees your watch history, your playback positions, or your passphrase. The operator who hosts your installation only ever sees the technical minimum required to serve the catalog.
2. What is collected on your installation
The server stores only what your installation is configured to keep. By default this includes:
- Your encrypted watch history (resume markers, last position) scoped to your account.
- An audit log of administrative actions (sign-in attempts, configuration changes, operator commands).
- The encrypted blobs of any clips you have queued for offline viewing.
Your passphrase, your encryption keys, and the content of the clips you watch are never written to the server in a readable form.
3. What the vendor collects
The vendor of spaceandwisewolf.space does not run a cloud service and does not receive telemetry from your installation. Download pages on the vendor site may record standard HTTP request metadata (IP address, user-agent, referrer) for the purpose of operating the website. You can opt out of those cookies through your browser.
4. Cookies set by spaceandwisewolf.space
spaceandwisewolf.space sets two narrow cookies, both first-party:
- csrf / __Host-csrf — a random token that the sign-in form reads and echoes back as a request header, so the server can tell a genuine form submission from a cross-site forgery. It is deliberately readable by the page's own script, scoped to this site, and a fresh value is minted on every visit to the sign-in page.
- session / __Host-session — a random opaque identifier that ties your browser to your authenticated library. It is HttpOnly, so no script can read it; it expires when you sign out and is discarded when the browser closes.
No third-party cookies are set by spaceandwisewolf.space, and no analytics scripts are loaded by the bundled frontend.
5. Sharing and access control
Sharing is explicit. A shared collection link carries its own scope (collection, expiry, password), and only people with the link and any required password can read the catalog. Revoking a shared link rotates the wrapping key and renders the previously distributed copy unreadable.
6. Your rights
Because spaceandwisewolf.space is self-hosted, the operator of your installation is the data controller. The vendor cannot read, export, or delete your watch history on your behalf — only your operator can. To exercise rights such as access, correction, or erasure, contact the administrator of the installation you use.
7. Changes to this policy
Material changes to this policy will be reflected in the dated update notice above and announced through the release notes for the bundled frontend. Continuing to use the product after a material change constitutes acceptance of the revised policy.