Privacy

• Account email and password hash via Supabase Auth.
• Debrid provider tokens you connect, encrypted at rest with pgsodium in Supabase Vault.
• Optional MediaFlow proxy URL, stored encrypted alongside your tokens.
• Info hashes you query and which backend served them, so we can render your library and your watch history (Pro).
• Standard server logs — request paths, status codes, timing — retained for 30 days.

• Card numbers. RevenueCat and Stripe handle billing; we receive only events.
• The contents of any file you stream. Toru orchestrates links; it does not inspect bytes.
• Behavioral ad tracking, third-party analytics, social cookies, or fingerprinting scripts.

Provider tokens are encrypted at the column level with pgsodium keys held in Supabase Vault. They are decrypted in memory inside the API process at request time, used to call the provider, and discarded. Tokens are never written to logs, never sent to the browser, and never shared between users. You can rotate or revoke any token from the dashboard.

Account state, encrypted tokens, and library metadata live in Supabase (United States). Operational logs live with our infrastructure provider. We do not transfer your debrid tokens to third parties; we only use them to call the provider whose token it is.

Email privacy@toru.ravengrid.cc to download your data, request deletion, or correct inaccurate fields. We respond within 14 days. Account deletion erases all stored tokens within 24 hours; your accounts at the underlying debrid providers are not affected.

Toru does not host content, but we take abuse reports seriously. Send notices to abuse@toru.ravengrid.cc. We will work with you and, where appropriate, the underlying debrid provider. Repeat-offender accounts are terminated.