Privacy Policy
Effective date: April 23, 2026
1. Service Operator
TorrentClaw ("the Service") is operated from Moldova. By using the Service, you agree to the terms described in this Privacy Policy.
2. Information We Collect
TorrentClaw is designed to minimize data collection. You can browse and search without an account. An account is only required for premium features (API, debrid, Usenet). What we DO NOT collect: • We do NOT persist your IP address or user-agent on authenticated sessions. These columns are deliberately set to null. • We do NOT link search queries to your account. Every search_log row is stored with user_id = null, regardless of whether you are logged in. • We do NOT use advertising cookies or third-party tracking pixels. What we may collect: • Account data (only if you register): email, name, password hash (bcrypt). Email is required for verification and recovery; you are free to use a masked alias (SimpleLogin, addy.io, DuckDuckGo Email, etc.). • Search queries: the text you search for, stored anonymously for trend analysis. Auto-deleted after 30 days. • Aggregate usage counters: per-day per-endpoint request counts (not per-user). • Analytics (Google Analytics 4): loaded only when you have not opted out and your browser does not send Do Not Track. You can disable it at any time from your Privacy settings — the opt-out is a local cookie (tc_no_analytics), no server round-trip needed.
3. Cookies and Tracking
We use essential cookies for site function (language, session, bot detection) and an optional Google Analytics 4 cookie when you have not opted out. Honored automatically: • Browser Do Not Track signal (navigator.doNotTrack === "1") — disables GA4. • tc_no_analytics cookie set from Privacy settings — disables GA4. • Visiting via our .onion service — disables GA4. We do NOT use advertising cookies, retargeting pixels, or cross-site trackers.
4. Third-Party Services
The Service integrates with or references the following third-party services: • TMDB (The Movie Database): For movie and TV show metadata, posters, and ratings. TMDB's privacy policy applies to their data collection. • JustWatch: Watch provider data is provided by JustWatch. Their privacy policy governs their data practices. • OpenAI (ChatGPT): If you interact with our Custom GPT integration, OpenAI's privacy policy applies to data processed through their platform. We do not sell, rent, or share your personal information with third parties for marketing purposes.
5. AI and API Integration
TorrentClaw provides a public REST API and integrations with AI assistants (ChatGPT Custom GPT, MCP protocol). When using these integrations: • Search queries are processed to return results and are not stored permanently. • No personal data is required to use the API. • Third-party AI platforms (e.g., OpenAI) may process your prompts according to their own privacy policies.
6. Data Retention
• Search queries (search_log): automatically deleted after 30 days via a scheduled cron job (cleanup-search-log, daily 03:15 UTC). • Expired sessions and one-time auth links (magic-link, password-reset, email-verification tokens): automatically purged daily (cleanup-expired-sessions, daily 03:30 UTC). • Anonymous API usage counters: retained 90 days, then auto-deleted. • user_event rows (clicks, views, searches) for free users: 12-month TTL, used for personalization you opt into. • Aggregated usage counters: retained indefinitely in anonymized, non-user-attributable form. • Account data: retained while your account is active. You can wipe your activity at any time from Profile → Privacy → Delete history.
6a. Privacy Tiers
TorrentClaw applies privacy-by-default to everyone, with one tier-specific escalation: • Free users: search queries are logged anonymously (user_id = null, 30-day TTL) for trend analysis. Authenticated user_event rows (clicks, views, searches) are retained for 12 months to power personalization features you use. • PRO users: extended privacy. Your searches do NOT enter the aggregate log at all. Zero user_event rows. Zero anonymous stats. No trail, anonymous or otherwise. This is enforced by a SQL-level guard on the INSERT. Both tiers: IP addresses and user-agents are never persisted on sessions, regardless of plan.
7. Your Rights
Depending on your jurisdiction, you may have the following rights: • Access: Request a copy of any personal data we hold about you. • Deletion: Request the deletion of your personal data. • Rectification: Request the correction of inaccurate data. • Portability: Request your data in a structured, machine-readable format. • Objection: Object to the processing of your personal data. To exercise any of these rights, contact us at the email address provided below.
8. European Union (GDPR) Compliance
If you are located in the European Economic Area (EEA), the following additional provisions apply: Legal basis for processing: We process data based on legitimate interest (Article 6(1)(f) GDPR) — specifically, to operate and improve the Service. International transfers: As TorrentClaw is operated from Moldova, data may be transferred to and processed outside the EEA. We rely on Standard Contractual Clauses (SCCs) as the legal mechanism for such transfers where applicable. Data Protection Officer: For GDPR-related inquiries, contact us at the email address below. You have the right to lodge a complaint with your local data protection authority if you believe your rights have been violated.
9. Children's Privacy
TorrentClaw is not directed at individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal data, please contact us and we will take steps to delete such information.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. Continued use of the Service after changes are posted constitutes acceptance of the revised policy.
11. Contact Us
If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us at: TorrentClaw Email: privacy@torrentclaw.com
This Privacy Policy is governed by the laws of the Republic of Moldova, with additional provisions for EU residents under the General Data Protection Regulation (GDPR).