Privacy policy
Movie Night Den and the HomeLab app. Effective 21 October 2026.
Who runs this
Movie Night Den is a private home media server run by its owner, as an individual, not a company.
The HomeLab app (Android package com.movienightden.homelab) and the website
watch.movienightden.com are its front door. It is only for people its owner invites: family and friends.
There is no public sign-up. Questions about this policy go to
support@movienightden.com.
What is collected, and why
- Your account: your email address, the display name you choose, and your role (what you are allowed to do). Used to let you in and to send your invite.
- Your sign-in methods: for each passkey, its public key, an identifier, which passkey provider made it, its name and when it was made and last used. Your 2FA secret, which is stored encrypted on the server. These keep your account secure. The private part of a passkey never leaves your passkey provider.
- Your phone (Android app only): its model name (for example "samsung SM-S921B"), public keys made in the phone's secure hardware, a security report from the phone (Android version, security patch level, and which certificate signed the app), a one-way hash derived from the phone's app-specific Android ID (never the ID itself), and the phone's restart count. These prove that the app is the real HomeLab app on a phone that has not been tampered with, and that it is still your phone.
- Security log: sign-ins, set-ups and changes, with the time and the IP address they came from. Web sign-ins also record your browser's user agent. Used to spot misuse.
- Requests: the films and shows you search for and ask for. Searches are not stored. Requests are stored with the time, so the daily limit works and you can follow them.
The app has no ads, no analytics and no crash reporting, and it does not use the advertising ID. Nothing is sold, rented or used for marketing. Data is only used to run the service.
Who else handles data
- Cloudflare carries all traffic to the server and controls who can reach it. It sees IP addresses and the pages requested, and keeps its own logs. Web users sign in to Cloudflare with their email.
- Google delivers the app through Google Play. If you use Google Password Manager for your passkey, Google stores it. Other passkey providers you might choose (Samsung Pass, Proton Pass, Apple Passwords) store theirs. Your provider receives your email and display name as the passkey's label.
- Proton Mail sends the invite emails (from invites@movienightden.com).
- Discord: the owner gets short notices in a private Discord channel, such as "a person joined" or "a phone was added", with your display name and, for example, your phone's model. No email addresses, IP addresses or codes are sent.
- The Movie Database (TMDB): search text and film or show identifiers are looked up there by the server, without your name or email. Posters come through the server, so your phone does not contact TMDB.
All traffic between the app and the server is encrypted (HTTPS).
How long it is kept
- Web sign-in sessions: at most 12 hours (30 minutes if idle).
- Your sign-in methods: while you have access. They are deleted when your account is removed.
- A record of your account (email and name), of each phone you set up (its model, public keys and security report) and of your invite: kept after removal, marked as removed, so that a removed account or a switched-off phone can't be used again.
- The security log: 1 year, so that misuse can be traced later, then deleted automatically. It cannot be edited.
- Your request history: while you have access. It is deleted when your account is removed.
- Cloudflare, Proton, Google and Discord keep their own records under their own policies.
How to ask for deletion
Email support@movienightden.com and say which account (email address) to remove. The owner will remove your account within 30 days: your passkeys, your 2FA secret, your sign-in sessions, your preferences and your request history are deleted, every phone you set up is switched off, and your email is taken off the Cloudflare sign-in list. Kept for security reasons: a record that the account existed (its email and name), of the switched-off phones (model, public keys and security report) and of your invite, all marked as removed, and the security log, which is deleted after 1 year. You can also ask what is held about you.
Children
The service is for adults only. It is not meant for anyone under 18.
Changes
If this policy changes, the new version will be posted here with a new date.