Skip to content

Privacy

Norri is designed with privacy as a core principle. Your media library stays on your server, and we have no visibility into what you watch or own.

Core Principles

  • Local-first — All data lives on your server, not in the cloud
  • No telemetry — We don’t collect usage data, analytics, or crash reports
  • No cloud accounts — No sign-up required, no external authentication
  • Works offline — After initial setup and library scanning, Norri works without internet

What Stays Private

The following data never leaves your server:

  • Your media files and library contents
  • Watch history and playback progress
  • User accounts and preferences
  • Server configuration and settings

External API Calls

Norri makes requests to external services for metadata. Here’s exactly what happens:

When Calls Are Made

EventWhat HappensOptional?
Library scanNew items are searched on TMDB/TVDBManual or scheduled
Metadata refreshUpdated metadata fetched for existing itemsManual or scheduled
Person pagesFilmography is fetched for cast/crewPart of scan
Scheduled tasksAutomatic scans and metadata checksFully optional

Normal browsing and playback make no external calls — all metadata is cached locally.

Scheduled Tasks Are Optional

Norri can run automatic scans and metadata updates on a schedule, but these are entirely optional. You can:

  • Disable all scheduled tasks in Settings → Scheduled Tasks
  • Run scans manually when you add new content
  • Refresh metadata manually when needed

If you disable scheduled tasks, Norri will only contact TMDB/TVDB when you explicitly trigger a scan or refresh.

User-Initiated TMDB Requests

Some features explicitly fetch data from TMDB when you click a button. These are clearly labelled in the UI:

FeatureWhen TMDB Is ContactedWhat Is Sent
Alternative Artwork”Change Poster” / “Change Backdrop” buttonTMDB movie ID
Rematch”Rematch to Different Movie” buttonSearch query (title, year)
TMDB SearchAny TMDB search modalSearch query

These requests happen only when you explicitly trigger them. Normal browsing uses locally cached data.

Why This Design?

We could pre-fetch all alternative artwork during scans, but we chose not to:

  • Less bandwidth — Most users never change artwork
  • Faster scans — Downloads only what’s needed
  • Privacy transparency — You know exactly when external calls happen
  • Offline-friendly — Default artwork works without internet

What Data Is Sent

DataPurposeAvoidable?
Movie/TV titlesSearch queries to find matchesNo — required for matching
TMDB/TVDB IDsFetch specific metadataNo — required for metadata
Your IP addressStandard HTTP requestYes — use a proxy

What Is NOT Sent

  • File paths or filenames (only parsed titles)
  • File sizes or quality information
  • Watch history or playback data
  • User account information
  • Hardware or system details

How We Compare

If you’re evaluating media servers, here’s how Norri compares to other options on privacy-related features. Each project has different goals and trade-offs — this table is meant to inform, not to suggest one is universally “better” than another.

Feature Norri Plex Jellyfin Emby
Cloud account required No Yes No No
Library data synced to cloud No Partial No No
Watch history on external servers No Optional No No
Analytics/telemetry None Partial opt-out None Minimal
Works fully offline Yes No Yes Yes
Open source No No Yes (GPL-2.0) No

As of December 2024. Features and policies change — verify with each project’s current documentation.

Detailed Notes

Plex

  • Requires a Plex account for authentication, even on local networks
  • Library structure (types, item counts, codecs) synced to Plex servers — not titles or filenames
  • Watch history sync can be disabled in settings
  • Some telemetry is mandatory; playback data and crash reports can be opted out
  • Offline mode requires advance configuration; Plex Home doesn’t work offline

Jellyfin

  • Fully self-hosted with no external accounts
  • Only external calls are metadata lookups (TMDB/TVDB)
  • No analytics or telemetry — source code is auditable
  • Open source (GPL-2.0-or-later), forked from Emby in December 2018

Emby

  • Emby Connect is optional — local credentials work without it
  • No library data sent to Emby servers
  • Minimal telemetry (OS/software version); Premiere license validation requires periodic internet
  • Closed source since September 2018

Norri

  • No cloud accounts or external authentication
  • All data stored locally; only TMDB/TVDB calls for metadata
  • No analytics or telemetry
  • Works offline for browsing and playback; scans and metadata refresh require internet

Using a Proxy for Additional Privacy

If you want to hide your IP address from TMDB/TVDB, you can route API calls through a proxy. See our Proxy Setup Guide for configuration instructions.

Why Use a Proxy?

  • Prevents TMDB/TVDB from seeing your real IP address
  • Routes requests through your VPN provider
  • Adds an extra layer of privacy for metadata requests

What a Proxy Does NOT Do

  • It doesn’t hide what titles you’re searching for
  • TMDB/TVDB will still see the search queries
  • Your VPN provider can see the requests instead

For most users, the default behaviour is private enough — TMDB knowing you searched for “The Godfather” reveals very little about you.

Frequently Asked Questions

Does Norri phone home?

No. Norri makes zero connections to our servers. We have no idea who’s using the software or what they’re watching.

Can you see my library?

No. Your server is entirely self-contained. We have no access to it and no way to connect to it.

What about TMDB/TVDB — do they track me?

TMDB and TVDB see your IP address and what titles you search for. This is no different from visiting their websites directly. They don’t know you’re using Norri specifically.

Is my watch history private?

Yes. Watch history is stored locally on your server. No external service can see what you’ve watched or when.

What happens if I lose internet?

Norri continues working normally. You can browse, search, and play content. You just won’t be able to add new items that need metadata lookup.