Privacy

Last updated 4 October 2026. Rwind is run by Rwind. Questions go to support@rwind.app.

The short version

Rwind stores what you play in Stremio so it can show your history, Up Next and stats. It doesn’t know your name or email, it keeps no IP addresses, and the site has no analytics or third-party trackers.

What Rwind stores

• Your link and sign-ins, as hashes. Rwind keeps a one-way hash of your addon link’s token and of each passkey sign-in session, never the token or session itself. A leaked database or backup can’t be used to open your account.
• Passkey public keys. The private half never leaves your device.
• Watch activity. What you start, pause and finish, with positions and durations; what you add to or remove from your library; what you mark as watched or unwatched; and any Stremio history you import.
• Your time zone, such as Europe/Sofia, saved when you open the dashboard. It’s used only to time your monthly recap and to date your public profile.
• Pro, if you buy it: a hash of your AddonPass access token and the date your Pro ends.
• Alerts, if you turn them on: your Telegram chat number, your Discord webhook address, or your browser’s push subscription.
• A public profile, if you make one: your handle, your profile settings and the titles you hide from it.

What Rwind never stores

• Email addresses, names or passwords. Rwind has none of them.
• IP addresses or device fingerprints, in the database or the server logs. Logs hold only the kind of request, its status and how long it took.
• Your Stremio password. When you import, your browser signs in to Stremio directly and the password never reaches Rwind.
• Anything from analytics. The site loads no analytics, ads or third-party scripts. Cloudflare Turnstile appears only on the install page, to keep bots from creating accounts.

Who else is involved

• Cloudflare carries all traffic to rwind.app and stores Rwind’s database backups.
• Hetzner hosts Rwind’s server in Helsinki, Finland.
• Cinemeta and the Kitsu addon supply titles and episode lists. Rwind asks them about titles, never about you. Posters load in your browser straight from their image hosts.
• AddonPass handles Pro payments. Rwind receives only whether your Pro is active and until when.
• Telegram, Discord and your browser’s push service deliver alerts, only if you turn them on.

Public profiles

Profiles are private until you publish them. A published profile shows the handle you chose and your watching, minus any titles you hide, and search engines can index it unless you turn that off. Going private takes effect on the next page load.

Deleting your data

Settings → Delete account removes your account and everything above at once. Backups expire within 7 days, after which nothing is left. A deleted profile’s handle stays reserved for 30 days so nobody can take it over straight away.

You can download everything Rwind holds about your watching from Settings as CSV or JSON at any time.