EFFECTIVE · 13 JUNE 2026
We don’t have accounts. We don’t have analytics. We don’t have crash reporters that phone home. We don’t have servers of our own. Everything Quartermaster knows lives on your device and talks only to the servers you configure.
What stays on your device
- Server addresses and API keysyou enter are stored on your device only. API keys and passwords are kept in the operating system’s keychain (hardware-backed secure storage). They are sent only to the matching server you configured, as part of talking to it — never to us, never to anyone else.
- Everything the app computes— dashboards, statistics, your taste profile — is calculated locally from your own servers’ data and stored on your device. None of it leaves your phone.
- Backups are created only when you ask, are encrypted with a passphrase only you know (scrypt key derivation + AES-256-GCM), and are saved wherever you choose. We never receive or store them. If you lose the passphrase, no one — including us — can open the backup.
Where the app connects
- Your own servers.The app’s network traffic goes to the server addresses you configure, on your network or VPN. What those servers log is governed by your own setup.
- Artwork.Poster and artwork images may load from the image services your servers reference (for example TMDB’s public image servers, which Jellyseerr uses for search results). These are plain image downloads; like any web request, the image host sees your device’s IP address. No identifiers, accounts or app data are attached.
- App Store purchases. Pro — whether the one-time unlock or the monthly subscription — is processed by Apple. To validate the purchase, the app uses RevenueCat, which receives the Apple purchase receipt and a randomly generated, anonymous identifier — never your name, email, or anything that identifies you to us. This is the only third-party service in the app, and it is used solely so your purchase restores reliably.
What we never do
- No advertising, no trackers, no fingerprinting.
- No selling, sharing, or monetising data — there is no data to sell.
- No reading your media library: your library data goes from your server to your screen and nowhere else.
The site, too
The same stance applies to this website. We don’t run analytics on qmstack.com. The fonts you’re reading right now are served from our own deployment, not from Google’s CDN. We don’t set tracking cookies, and we don’t share any server-side request data with third parties.
Children
Quartermaster does not knowingly collect data from anyone, including children — it does not collect data at all.
Changes
If a future version ever changes any of the above, this policy and the App Store privacy label will be updated before that version ships, and the change will be called out in the release notes.
Contact
Quartermaster is developed in the United Kingdom. Questions: hello@qmstack.com.
A canonical copy of this policy is also published at lewlew-glitch.github.io/quartermaster-privacy. Both copies state the same thing; they are kept in sync. See also our terms.