Legal

Privacy Policy

Last updated: October 28, 2026

This policy describes what information Atrium collects, why we collect it, how long we keep it, and how to get in touch about it. The rules for using Atrium and buying Atrium Pro are in the separate Terms of Use. We've tried to keep the language plain. If anything is unclear, email hello@atriumlibrary.com.

Who is responsible

Atrium is run by its co-founders, David Stöckli and Kevin Stöckli, in Switzerland. They are responsible for the personal data described here. Contact: hello@atriumlibrary.com.

What we collect

  • Account information. Your email address and the profile details you add. Atrium never sees your password.
  • Library and settings. The titles you add with your ratings, statuses, dates, progress and notes, and the choices you make in the app.
  • Imports and connected apps. When you import a file or connect another app, Atrium reads only what it needs for your library: titles and their IDs, status, rating, dates, progress and, for file imports, notes. For a connected app it also keeps your username or account ID on that app and the access it gave Atrium, so it can keep syncing. Atrium never asks for your password to another app. If you connect a media server (such as Plex, Jellyfin or Emby), it keeps the title, episode and day of each play.
  • Atrium Pro purchases. Stripe sells Pro through Link as the reseller (merchant of record) and handles payment details under its own privacy policy. Atrium never sees your card details. It keeps only your Stripe customer ID and your plan.
  • Feedback and requests. What you send through Send feedback (with your account ID), the app names you suggest for imports, and emails you send us. Please don't include passwords or other sensitive details.
  • Technical information. Server logs with IP address, browser details, times, pages requested and errors.
  • Usage analytics. Counts of page visits and of which features are used, with the page, referrer, browser, device type and approximate country. It sets no cookies and never includes your name, email or the titles in your library.
  • Cookies and browser storage. Only what is needed to keep you signed in and to remember your preferences. No advertising or cross-site tracking cookies.

Why we use it, and on what legal basis

  • To run Atrium for you (your account, library, imports, syncing and Atrium Pro): because it is needed to provide the service you signed up for.
  • To keep Atrium secure, fix problems, answer your messages and decide what to build next (logs, feedback and usage analytics): our legitimate interest in a safe service that works and improves.
  • To meet legal obligations, for example around payments and tax.

An email address is needed to create an account; everything else is up to you. We do not sell personal data, use your library to train machine-learning models, share it with advertisers, or make automated decisions about you.

Who receives it

  • Service providers that work on our behalf and only as we instruct: Replit (hosting, database, logs and analytics, on servers in the European Union) and Clerk (sign-in).
  • Stripe, as the seller of Atrium Pro, for purchases.
  • Media data services (see Data providers below) receive the titles and IDs Atrium looks up, never your account details.
  • Apps you connect or import from receive the username or access you gave Atrium, so it can read your list there.
  • Authorities, only where the law requires it.

Your Atrium data is stored in the European Union. Replit, Clerk and Stripe are based in the United States and may access it from there. Those transfers rely on the EU-U.S. and Swiss-U.S. Data Privacy Framework where the provider is certified, and otherwise on the European Commission's standard contractual clauses, which Switzerland also recognises. You can ask us for a copy.

How we protect it

Connections are encrypted, access to your data is limited to your own account and to David and Kevin, and sign-in details for connected apps are stored encrypted. If a breach affects your personal data, we will tell you and the authorities as the law requires.

How long we keep it

  • Account and library: until you delete your account (Settings → Account → Manage profile → Security → Delete account). We then delete all your Atrium data, keeping only a one-way hash of your account ID so the deletion can be completed. Backups expire on their normal schedule.
  • Connected apps: until you disconnect them. Media server plays are deleted after 30 days.
  • Payments: deleting your account deletes your Stripe customer and ends any subscription. Stripe keeps payment records as long as the law requires.
  • Logs and feedback: 30 days, after which our hosting provider deletes them automatically.
  • Emails: as long as needed to answer and follow up.

Your rights

You can ask to access, correct, delete or export your personal data, to restrict its use, and to object to processing based on our legitimate interests. You can:

  • Export your library at any time from the app's settings.
  • Delete items, or your whole account, from the app at any time.
  • Email hello@atriumlibrary.com for anything else, including formal data requests.

You can also complain to a data protection authority: in Switzerland the Federal Data Protection and Information Commissioner (FDPIC), or in the EU the authority in the country where you live or work.

Data providers

Here are some of the services Atrium gets media data and artwork from. This isn't a full list.

  • TMDBThis product uses the TMDB API but is not endorsed or certified by TMDB.themoviedb.org
  • IGDBGame data and cover art are provided by IGDB.com. Every game page links to the game on IGDB.igdb.com
  • MyAnimeListAnime and manga scores come from MyAnimeList. Pages link to MyAnimeList when a listing is available.myanimelist.net
  • SteamGridDBHero images powered by SteamGridDB. Artwork is contributed by the SteamGridDB community.steamgriddb.com
  • VideoGamesCriticVGC Scores on game pages are powered by VideoGamesCritic and link to each game's page there.videogamescritic.com

Children

Atrium is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has signed up, contact us and we'll remove the account.

Changes to this policy

When we make material changes we'll update the "last updated" date at the top of this page and, where appropriate, notify account holders by email.

Contact

Questions about this policy or the data we hold: email hello@atriumlibrary.com.