Last updated 3 November 2026
Privacy.
Alma is a personal catalogue of what you watch, read, play and listen to. It’s free, invite-only during the beta, and run by one person in Denmark. This page explains, in plain words, what Alma stores about you, why, and what you can do about it.
The short version
- Alma stores your account (e-mail, and your name if you sign in with Google) and the library you build. Nothing else.
- No ads, no tracking, no analytics, no selling or sharing your data. Ever.
- One cookie, only to keep you signed in.
- You can download everything or delete your account yourself, at any time, from Import & Sync → Your account.
Who is responsible
Alma is run by a private individual in Denmark, who is the data controller for Alma. Questions, requests and complaints: hello@almaniac.app.
What Alma stores, and why
- Your account
- Your e-mail address, your name and Google account id if you sign in with Google, when you joined and last signed in, and which invite you used. Needed to let you sign in and keep your library yours.
- Your library
- The titles you add, their status, your ratings and dates, episodes you’ve watched, your settings (country, streaming services, categories), and Memory Lane notes and photos you upload. This is the service itself.
- Sign-in
- A session cookie (
alma_session) keeps you signed in for up to 60 days. Sign-in links and sessions are stored only as one-way hashes. Your device also keeps an offline copy of your library so the app works without a connection; signing out removes it. - Beta sign-ups
- If you request an invite on almaniac.app, your name, e-mail, the apps you use today and what you’d like most are stored, to send you an invite and to decide what to build. They’re deleted when the beta ends, or sooner if you ask.
- Technical logs
- The server keeps short error logs to fix problems. They don’t record what you look at.
The legal basis is the agreement between us to provide the service you signed up for (GDPR art. 6(1)(b)), and for beta sign-ups, your consent (art. 6(1)(a)), which you can withdraw at any time.
Who helps run Alma
These companies process data on Alma’s behalf, only for the purpose listed:
- Hetzner Online (Germany): the server where Alma and your library live, and its backups.
- Cloudflare (EU/US): the domain’s DNS, and the invite sign-up form on the website.
- Resend (servers in Ireland): sending sign-in e-mails.
- Google: only if you choose “Continue with Google”, to confirm who you are.
To find titles, Alma asks TMDB, IGDB and Apple for public information about films, series, games, books and music. Those requests come from Alma’s server and contain what you searched for, never who you are.
How long
Your account and library are kept until you delete them. When you delete your account, you’re signed out everywhere and your library is removed from Alma at once; it’s erased for good within 30 days, including from backups. Backups are kept for 14 days.
Your rights
You can see, download, correct and delete your data. Most of it you can do yourself in the app (Download my data gives you everything in one file). For anything else, write to hello@almaniac.app; you’ll get an answer within 30 days. If you think your data is handled wrongly, you can complain to the Danish Data Protection Agency (Datatilsynet) or the authority where you live.
Safety
Everything goes over HTTPS. Each person’s library is kept in its own database. The server only accepts web traffic and key-based administrator access, and gets security updates automatically.
Children
Alma is meant for people aged 13 and older.
Changes
If this policy changes in a way that matters, you’ll be told in the app or by e-mail before it takes effect.