Privacy policy
Last updated: 26 October 2026
1. Controller
Agentur Zentral GmbH, Gumbinnenstraße 6, 38112 Braunschweig, Germany
Telephone: +49 531 25 77 44 44
Email: info@agenturzentral.de
2. Hosting and server logs
This website and the Couchkartell application programming interface are hosted in Germany by ALL-INKL.COM, Neue Medien Münnich, Hauptstraße 68, 02742 Friedersdorf. When you access them, technically necessary log data may be processed, including your IP address, time of access, requested address, amount of data transferred, browser identifier and status code. This supports secure and reliable operation on the basis of Article 6(1)(f) GDPR. Logs are retained only as long as necessary for security, troubleshooting or statutory obligations.
3. Registration and household account
During registration, we process your name, email address, password hash, household name, activation status, plan, device names and activation data. This is necessary to take pre-contractual steps and perform the contract under Article 6(1)(b) GDPR. Passwords and activation codes are not stored in plain text for authentication.
4. Data from the Couchkartell application
To provide the media library, we process each household's profiles, application settings, access permissions, favourites, playback progress and technical and descriptive metadata for media connected by the user. This may include filenames, relative paths, duration, video and audio information and title information and images obtained from TMDb. The actual film and TV files are not transferred to our server. They remain on the household's storage.
For a household migrated to end-to-end encryption, private library associations, profiles including PIN verifiers and permissions, filenames and storage paths, personal collections, favourites and playback progress are encrypted on authorised devices. Synchronised NAS credentials are also included in the encrypted data. The library key remains on authorised devices or with the user and is not sent to our server. Households that have not migrated continue to use the existing server-side library management.
For access and operation, we continue to process account, household, plan, device and authentication data, along with necessary connection and operational data. The timing, extent and size of encrypted transfers may remain visible. This information and normal support communications are not hidden by library encryption. The existing unencrypted server copy remains until the verified and explicitly confirmed cleanup step described in section 8.
Profile photos voluntarily uploaded by household users and website administrators are stored as separate files. Access is restricted to authorised users. Photos are transferred over HTTPS but are not part of the end-to-end encrypted library and can technically be read by the operator. You can replace or remove your profile photo. Profile photos are included with the associated data in our access-protected backups.
5. Email communications
We use the email address you provide for verification, activation, security notices and necessary contractual communications. The legal basis is Article 6(1)(b) GDPR. Advertising is sent only on a separate legal basis.
5a. Trial requests, trial contracts and support
For trial requests, we process names, contact and address details, household names, technical information and the described intended use. As evidence of the contract, we store the offered version, its checksum, explicit acceptance, the person making the declaration, timestamps and the agreed term. The legal basis is Article 6(1)(b) GDPR and, where evidence is necessary, Article 6(1)(f) GDPR.
Support messages and their handling history are stored in the protected support centre. If a support mailbox is connected, incoming emails and their attachments may be imported. Personal sign-in and setup links expire and are stored as hashes for verification. Content needed for pending emails is held in encrypted form. Authorised support staff may receive a BCC copy of correspondence at their registered work address. Please do not send passwords or private media in support messages.
Rejected or completed requests and support cases are deleted when they are no longer needed for handling, contract performance or the resolution of claims and no statutory retention obligations apply. To verify a contract PDF against the original, only its checksum is transmitted, not the file.
6. Cookies and visitor statistics
The website uses technically necessary cookies for sign-in, session protection and one-time status messages. They are set on the basis of section 25(2), no. 2 TDDDG and Article 6(1)(b) or (f) GDPR. We do not use analytics, advertising or statistics cookies.
To improve the website according to demand and detect automated access, we maintain cookie-free first-party visitor statistics on our own web server. We process the visited page path without query parameters, visit time, an approximate geographical location from a local GeoIP database and derived information about browsers, device types and robots. Raw IP addresses, complete browser identifiers, referrers and full URLs are not stored in the statistics. To associate related page views, a pseudonymous identifier that changes daily is generated from the IP address, calendar date and a secret server key. Active visits are deleted after the visit window expires. Aggregated daily values are generally retained for up to 760 days. “Do Not Track” and “Global Privacy Control” are respected. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is privacy-conscious audience measurement, content improvement and protection against automated load. You may object to this processing at any time using the contact details above.
We may also retrieve aggregated search terms, clicks, impressions, click-through rates and average positions through a read-only connection to Google Search Console. This search performance data is stored separately from our visitor statistics and is not linked to individual visits or identifiers. Only the operator sets up the connection. Visiting the website does not load Google services through this connection.
7. Recipients and third-party sources
Our hosting provider processes data needed to operate the service. Couchkartell maintains public film information from The Movie Database (TMDB) in a shared catalogue. Our server retrieves missing or outdated information from the provider. For this purpose, the app sends individual search terms or public title, person and image identifiers. Our service can identify the requested content. TMDB receives the request needed to obtain it. Such requests do not transmit a complete private library list, file paths, NAS credentials or playback progress.
Only covers are cached on our server as shared image files. Actor photos load when you open a film or series. Backgrounds load when they are actually displayed in the interface. Gallery information and images and trailer information are requested only when you open the respective section. Your device retrieves actor photos, backgrounds and gallery images directly from image.tmdb.org. The provider receives your IP address, the time and requested image address and connection information needed for the request. Couchkartell does not store these images permanently. For older image addresses, our server may temporarily relay the image.
Private household associations and personal changes do not belong in the shared public catalogue. For migrated households, they are managed in the encrypted data. Opening and playing a trailer may also establish connections to YouTube. YouTube receives necessary connection data such as your IP address and the requested trailer identifier. Merely visiting this website does not automatically load content from TMDB or YouTube.
8. Retention periods
Account and household data are retained for the duration of the contractual relationship. After it ends, we delete or anonymise personal data once no statutory retention, evidentiary or security reasons prevent this. Expired sessions and verification tokens are removed regularly.
Migration of an existing library takes place in the app. The encrypted copy is fully read back and verified. The app also checks the ability to recover it. Active unencrypted legacy data is removed only after successful verification and separate confirmation. Historical plain-text copies are not retroactively encrypted by this process. Our automatic database backups are retained for fewer than 30 calendar days, and older backups are removed during a successful retention check. Backups already downloaded or copies made elsewhere must be handled separately and are not automatically deleted by migration.
Cached covers become unavailable 90 days after they were actually fetched from the provider. A cover that is still needed is fetched again. Access alone does not extend this period. Expired cover files are removed during the next successful maintenance run. A failed run or a backlog may delay physical removal. Expired covers remain unavailable during this time. Cover demand reports do not create a persistent list of which covers each household needs.
9. Security
Data is transmitted using HTTPS encryption. Households are logically separated, and device and session credentials can be revoked. After migration, an additional device needs the library key as well as device access. Recovery codes are imported directly in the app. Please do not send them through this website or support. If neither an authorised device holding the key nor a valid recovery code is available, we cannot decrypt the library data. A new account password does not restore the library key.
The app enforces profile, PIN and parental access rules on authorised devices. A fully authorised household device holds the shared library key. Profiles are not cryptographically isolated from each other. After a device is revoked, a key change is necessary to protect future content. Copies already known to the removed device are not deleted by this change. Compromised devices or tampered application software may undermine protection. Absolute security of electronic processing cannot be guaranteed.
10. Data subject rights
Subject to the statutory requirements, you have rights of access, rectification, erasure, restriction, data portability and objection. You may withdraw consent with effect for the future. You also have the right to lodge a complaint with a data protection supervisory authority.
11. Automated decisions
No decision-making based solely on automated processing, including profiling within the meaning of Article 22 GDPR, takes place.