What Palladium sends, and what it never does.

Palladium runs on a computer you own. What you watch, who watches it, and what is in your library stay on that machine. There is no account, no profile and nothing to sign in to.

Last changed 5 September 2026.

What never leaves your machine

• What is in your library. Titles, file names and folders are read on your own computer and stay there.
• What anybody watches. Viewing history, how far through something you are, watchlists and marks are kept in a file beside the program.
• Who watches. Names, invitations and the addresses people connect from are the server's own business and are shown only to whoever runs it.
• Your files. Nothing is uploaded. Playing a film sends it to the screen that asked for it, on your own network or through the port you opened.

What the server asks the internet for

Only things it needs, and only about the file in front of it - never about you.

• Artwork and descriptions from TMDB, using the key you provide. TMDB is asked about a title and a year; it is not told who is watching.
• Subtitles from OpenSubtitles, using the key you provide, searched by release name or by a fingerprint of the file.
• Updates. The server reads a small file on palladium.video to see whether a newer build exists. It sends nothing to ask.
• ffmpeg, the app, and the subtitle tools, each only when somebody presses the button that fetches it.

Fault reports, which are off

A server can be told to send fault reports to palladium.video. It is off unless you turn it on, and it has three positions and no others: send nothing, send faults, or send faults with a description of the computer.

• Taken out before anything is sent: the name of any film, series or episode; the name or address of anybody watching; invitation keys; file paths; the address of the machine or any other. These are stripped on the way out rather than trusted not to appear.
• What "the computer" means is how many processor cores, how much memory, which Windows and what the graphics card calls itself. A description of a machine, not of a person.
• Kept for ninety days, then deleted. Read only by the person who maintains Palladium.
• One report can be sent by hand from the Reports screen whatever the setting says, after a question that spells out what goes.

What this website records

palladium.video is a static site behind Cloudflare. It sets no cookies, carries no analytics, and loads no fonts, scripts or images from anybody else.

• Cloudflare keeps ordinary web server logs for its own operation and abuse handling.
• Downloads are counted by day, by country and by kind of browser - a tally with no addresses in it and nothing that identifies a person.
• The donate button opens PayPal. Anything you do there is between you and PayPal; nothing about it comes back here.

The Android app

• It talks to the Palladium servers you point it at, and to nothing else.
• It looks for a newer version by asking those same servers. It does not ask palladium.video.
• It keeps its settings on the phone: which servers you know, how subtitles look, where you had got to. Uninstalling removes them.
• No advertising, no analytics, no third-party software development kits.

Your rights, and how to use them

There is no account here to delete, because there is no account. What a Palladium server holds is held by whoever runs it - if that is somebody else's server, ask them; they can remove your invitation and everything recorded against it. If you have sent a fault report and want it removed, write to support@grovestick.com and say roughly when it was sent - reports carry no name, so that is what identifies one. Palladium is made by Grovestick Studios in Sweden, and the GDPR applies to what this site and those reports hold.