Privacy Policy
TopTenArr is a self-hosted, open-source application that builds Plex collections from public streaming Top 10 charts. It runs on your own device or server (or, on Android TV, on your NVIDIA Shield). This policy explains exactly what data is and is not handled, in plain terms. The short version: we collect almost nothing, we don't track you, and there are no ads.
1. What stays on your device and is never sent to us
The following are stored locally, encrypted, in TopTenArr's own database on the device or server where you run it. They are never transmitted to TopTenArr's servers:
- Your Plex authentication token.
- Your Radarr / Sonarr URLs and API keys (if you choose to connect them).
- Your sync schedule and app settings.
These secrets are encrypted at rest using a key that lives only on your device. The Plex token is used solely to talk to your own Plex server (via plex.tv), exactly like any Plex client app — it is not collected by us.
2. What our servers receive
TopTenArr connects to our hosted service at api.toptenarr.com for three things:
- The Top 10 feed. The app requests the current charts for the services you've enabled. We receive which charts are requested in order to serve them; we do not build a profile from this.
- License validation. If you use a Pro/beta key, the app sends that key to confirm it's valid. We store the key, its plan, and its status.
- Feedback you choose to send. If you use the in-app feedback / bug-report form, we receive what you submit: an optional email address, your message, optional app logs and version info, and an optional screenshot. This is entirely voluntary — nothing is sent unless you fill out and submit the form.
3. What we do NOT do
- No ads.
- No analytics or third-party tracking. The app and this website contain no analytics SDKs, trackers, or advertising identifiers.
- No selling or sharing of your data with third parties for advertising.
- No accounts beyond signing in to your own Plex.
4. Third-party services
When the app or this site loads, your device may make ordinary network requests to: Plex
(plex.tv) to authenticate and reach your server; our feed/license server
(api.toptenarr.com); and, on the website, Google Fonts. These requests can expose
your IP address to those services as a normal part of how the internet works. We don't control
and aren't responsible for their privacy practices.
5. Security
Data sent between the app and our servers travels over encrypted HTTPS. On-device secrets are encrypted at rest. No method of storage or transmission is 100% secure, but we keep the attack surface deliberately small by keeping your credentials on your own device.
6. Data retention & deletion
License records persist while the key is active. Feedback submissions are retained so we can respond and improve the app. To request deletion of feedback you've sent or a license record, email [email protected]. Anything stored locally on your device is removed when you uninstall the app or delete its data directory.
7. Children
TopTenArr is a general-audience utility and is not directed to children under 13.
8. Changes
We may update this policy as the app evolves. Material changes will be reflected here with a new "Last updated" date.
9. Contact
Questions about privacy? Email [email protected].
TopTenArr is not affiliated with, endorsed by, or sponsored by Netflix, Disney+, Max, Prime Video, Hulu, Apple TV+, Paramount+, Peacock, Plex, or any streaming service. All product names and logos are the property of their respective owners.