Legal

Privacy Policy

What Lorra collects, why, how long we keep it, and the control you have over it.

Version 2026-09-25 · Effective September 25, 2026

1. Summary

This summary is here for readability. The sections below are the binding text.

Lorra stores your library — what you save by hand and, if you turn on automatic tracking in the browser extension, the videos you play in that browser: the page address, title, poster link, season and episode, playback position and how long you watched — plus the account details needed to sign you in.
Automatic tracking is off until you turn it on. You can switch it off or exclude individual sites at any time, and delete any item together with its history.
We do not sell your data, do not show ads, do not build advertising profiles, and run no third-party analytics or tracking cookies.
Install statistics are anonymous: a random identifier, browser, operating system and extension version, never linked to your account.
This website counts visits and link clicks anonymously, with its own script: no cookies, and no IP address or browser details in its records. If your browser sends Do Not Track or Global Privacy Control, nothing is counted.
You can permanently delete items or your whole account from within the app at any time, and ask us for a copy of your data.

2. Who is responsible

Lorra is operated by LIMITED LIABILITY COMPANY “DERALIGN” (ООО «ДЕРАЛАЙН»), Russian TIN 5904419034, Russia, Perm Krai, Perm, 80 Pushkina Street ("we", "us"), the controller (operator) of the personal data described here. For any privacy question, request or complaint, contact info@deralign.com. We answer a request about your personal data within 10 working days — the period set by Article 20 of Russian Federal Law No. 152-FZ — which we may extend once by a further 5 working days, telling you why. Where the GDPR applies, we answer within one month at the latest. Other questions we answer as a rule within 14 working days.

This policy covers the Lorra website, the browser extension, and the mobile applications (together, the "Service").

3. What we collect

We collect only what the Service needs to work. There is no hidden collection: everything below is typed in by you, produced by an action you take, or recorded by automatic tracking after you switch it on.

Data	What it is	When
Account	Login, email address, password (stored only as a bcrypt hash — we never see or store the password itself), optional avatar image or link, and the date and time you accepted the Terms of Use and gave your consent to the processing of personal data, with the version of each.	When you register or edit your profile.
Library	Title, media type, status, poster/preview link, season and episode, playback position and duration, your rating, notes, collections, folders, and the page address (URL and domain) the item came from.	When you save or update an item, and while automatic tracking records a video.
Watch history	One entry per viewing: start and end position, time actually watched, season and episode, the page address, rating and timestamp — the history behind "continue watching".	When you save progress, and while automatic tracking records a video.
Feedback	Your message, optional contact details and rating, linked to your account, when you use "Leave a review" or "Request collaboration".	Only when you submit a form.
Password reset	Your email address and a hashed one-time code, valid for 15 minutes.	Only when you request a reset.
Anonymous install statistics	Event type (install), a random identifier created by the extension, browser, operating system and extension version. Sent without your account token and stored without your IP address or any link to your account.	Once, when the extension is installed.
Website visit statistics	For each visit to this website: a random visit identifier, the pages opened (the path only, without the query string or fragment) and when, the host name of the site you came from, the type of traffic source and campaign tags from a fixed list; for each link click, the kind of link, its host and path, and its text. See section 7.	When you open this website, unless your browser sends Do Not Track or Global Privacy Control.
Server logs	Standard technical logs of requests to our API and of page loads on this website: the IP address your device connects from, the time, the requested address, the response code, the referring page and the browser User-Agent. Kept briefly for security and troubleshooting.	Automatically, on every request.

Note on what your library reveals. The page addresses in your library and history — especially with automatic tracking on — show which sites you watch on, what you watch there and when. We treat this as sensitive, keep it private to your account, and never analyse it for any purpose other than showing it back to you. Our admin panel never shows the contents of a library — no titles, no addresses, no ratings — only counts and dates, such as how many items an account has and when it last recorded a watch. What our administrators do see about an account is its login, email address and avatar, and the full text of any review or collaboration request you send us, together with the contact details you chose to put in it. If there are sites you would rather keep out of Lorra, exclude them or leave automatic tracking off.

4. Automatic tracking

Automatic tracking is a feature of the Lorra browser extension. It is off until you turn it on in Profile → Automatic tracking. The mobile app has no automatic tracking: it shows your library, including what the extension recorded, and lets you add items by hand.

What the extension reads, and when

So that tracking can work on any streaming site, the extension asks your browser for access to all websites and runs a small script in every page and embedded frame. While tracking is off, that script sends nothing and reads nothing from the page beyond the site's address, which it checks inside your browser against your list of excluded sites. On a site you have excluded, nothing is recorded or sent: the page itself is not read, and whatever a video player embedded there from another domain reports is discarded inside your browser.

While tracking is on, the script looks for a video at least 5 minutes long — shorter clips, looping previews and live streams are ignored — and reads:

the video's position, its length, and how many seconds have actually played (seeking and rewinding do not count);
the address (URL) and domain of the page open in the tab;
what the page says it is showing: its title and headline, and the metadata it publishes for search engines and media controls (Open Graph, Twitter Card, Schema.org, Media Session) — such as the name of the series, season and episode numbers, the site's name and a poster image link.

The extension also reads the current tab when you ask it to: when you open the "Save watch" screen (to fill in the form), when you open the tracking settings (to offer excluding that site), and when you press "Continue watching" (to move the video to your saved position). It does not read form fields, what you type, passwords or cookies.

What is sent to Lorra, and when

Nothing is sent until at least 90 seconds of the video have actually played. After that, while the video plays, the extension sends an update to our server about every 30 seconds, and also when you pause, when the video ends, and when you close the tab or move to another page. Each update contains the page address and domain, title, poster link, site name, season and episode, position, length, seconds watched, and a random identifier of this viewing.

Our server uses the update to create or update the item in your library, place it in a folder for its series (or, for a video that belongs to no series, for the site), add an entry to your history, and mark the item completed once about 90% of it has played.

If you are not signed in to the extension, nothing is sent and nothing is kept for later.
If our server cannot be reached, updates wait in the extension (at most the 200 most recent) and are sent once the connection is back.
The extension sends tracking data only to Lorra's own server.

What stays in your browser

The extension keeps the following in its local storage in your browser: whether tracking is on, your list of excluded sites, the videos playing right now (shown as "Watching now", including ones that have not yet played long enough to be saved), and any updates waiting to be sent. The tracking switch and the list of excluded sites are never sent to us. Updates waiting to be sent are discarded when you sign out of the extension, so they can never reach another account signed in later. Removing the extension from your browser deletes this storage.

How to turn it off and remove what it recorded

Switch it off: Profile → Automatic tracking → "Track what I watch". From that moment nothing is recorded, including in tabs that are already open, and nothing that had not yet been sent is sent.
Exclude a site: on the same screen, exclude the site you are on or type a domain. From then on nothing played on that site or its subdomains is recorded, and nothing from it that had not yet been sent is sent.
Delete what was recorded: delete the item from your library — its history and notes are deleted with it — or delete your account. Deleting a folder keeps the items in it.

Switching tracking off or excluding a site does not by itself delete anything already in your library.

5. What we never do

These are commitments, not aspirations. If any of them changes, this policy changes first.

We never sell, rent or trade your personal data — to anyone, for any price.
We never show advertising in the Service, and never share data with ad networks or data brokers.
We never build advertising or behavioural profiles, and make no automated decisions with legal effects about you.
We never embed third-party analytics, tracking pixels, session recorders or social media trackers.
We never read your library for marketing, recommendations sold to others, or model training.
We never ask for payment card details — the Service currently has no paid features.

6. Why we process it, and on what basis

Where the GDPR or a comparable law applies, our legal bases are as follows.

Purpose	Legal basis
Creating your account and signing you in	Performance of a contract (Art. 6(1)(b) GDPR)
Storing and showing your library, history and notes — the core function	Performance of a contract (Art. 6(1)(b))
Automatic tracking: recording the videos you play in the browser extension into your library and history	Performance of a contract (Art. 6(1)(b)) — a feature you switch on yourself and can switch off at any time
Recording when you accepted the Terms of Use and gave your consent to the processing of personal data, and which versions	Legitimate interests (Art. 6(1)(f)) — being able to show what was agreed and when
Sending a password reset code you asked for	Performance of a contract (Art. 6(1)(b))
Answering feedback or a collaboration request you sent	Legitimate interests (Art. 6(1)(f)) — responding to you
Keeping the Service secure, preventing abuse, fixing faults	Legitimate interests (Art. 6(1)(f)) — running a safe service
Counting installs anonymously	Legitimate interests (Art. 6(1)(f)) — knowing whether the product works, with no identification of you
Counting visits to this website and clicks on its links anonymously	Legitimate interests (Art. 6(1)(f)) — knowing whether the website is useful, with no identification of you
Complying with law when we must	Legal obligation (Art. 6(1)(c))

Under Russian law (Federal Law No. 152-FZ): we process the personal data of registered users on the basis of the consent you give, separately from these documents, when you register — see the Consent to the Processing of Personal Data. It names the operator, the purposes, the data, what we do with it, who processes it on our behalf, how long the consent lasts and how to withdraw it.

7. Cookies, website statistics and local storage

This website sets no cookies. It does count visits and link clicks, anonymously and without any third-party analytics service:

The counting script is served by this website itself, and the statistics are processed on our own server. No analytics company receives them, and they are not linked to your Lorra account.
If your browser sends Do Not Track or Global Privacy Control, the script does nothing.
Each visit gets a random identifier, kept in your browser's session storage for that tab together with a note of which pages were already counted; the browser clears it when the tab is closed. The script uses no cookies and no local storage.
What is recorded: the pages you open — the path only, without the query string or fragment — and when; the host name of the site you came from; the type of traffic source (such as search or social) and campaign tags, which are kept only if they are on our fixed list. For a link click: the kind of link, its host and path (again without query or fragment) and the link text.
For email and phone links only the kind of link is recorded — never the address, the number or the link text.
Your IP address reaches our server with each request, as with any website. The statistics records contain neither it nor your browser's User-Agent: the address is used only as a keyed hash held in memory, to limit abuse, and is never written down.
Records are deleted after 180 days.

The extension and the mobile app store your session token and preferences in local device storage; the extension also keeps there the automatic tracking data described in section 4. This storage serves only the Service itself — it is not used for advertising or analytics. Your session token never leaves your device except to authenticate you against our API, and clearing the app's data, or removing the extension, removes it.

We do not share your data with anyone except the service providers required to operate the Service, and only to the extent needed:

Provider	What it receives	Why
Our hosting provider, LIMITED LIABILITY COMPANY “TIMEWEB.CLOUD” (ООО «ТАЙМВЭБ.КЛАУД»), Russian TIN 7810945525	All Service data, as stored on the server we rent	Running the servers and database
Google (Gmail SMTP)	Your email address, your login and the reset code, at the moment an email is sent	Delivering password reset emails
Chrome Web Store, Apple App Store, RuStore	Whatever they collect for distribution under their own policies — we receive only aggregate download counts. The Android app is distributed through RuStore; it is not listed in Google Play.	Distributing the apps

The websites in your library are not our providers, but two ordinary requests reach them. When the extension or the app shows a poster, your device loads that image straight from the address the site published — we do not proxy it, so that site sees your IP address, exactly as it would if you opened the page yourself. And when you ask the mobile app to fill in details from a link, our server — not your device — requests that page to read its title and preview image.

We may also disclose data if we are legally required to (a binding court order or lawful request), to protect our rights or someone's safety, or as part of a merger or acquisition — in which case we will notify you beforehand and this policy continues to apply until replaced.

9. Where your data is stored, and international transfers

Lorra's database and files sit on servers in the Russian Federation, rented from the hosting provider named in section 8. The recording, systematisation, accumulation, storage, updating and retrieval of the personal data of citizens of the Russian Federation happen in those databases, as Article 18(5) of Federal Law No. 152-FZ requires.

Exactly one kind of data leaves the country, and only at the moment it is needed: when you ask to reset your password, the email is delivered through Google's Gmail SMTP service, so your email address, your login and the reset code reach Google LLC in the USA. Nothing else about you is sent there. The consent document names this transfer too.

Where the GDPR or a comparable law applies to you and we transfer personal data out of the EEA, the UK or another region with transfer rules, we rely on an adequacy decision or on the European Commission's Standard Contractual Clauses. You can request details of the safeguards in place by writing to us.

10. How long we keep it

Data	Retention
Account and library	Until you delete the item or your account. Deleting an item removes its history and notes. Deleting your account removes your account, library, folders, collections, history and notes from the live database.
Record of accepted Terms and given consent	For as long as your account exists.
Tracking data in the extension	The state of a video that is playing: until the tab is closed or moves to another page. Updates waiting to be sent: at most the 200 most recent, until they are delivered, you sign out, or tracking is switched off or their site is excluded. All of it: until you remove the extension.
Password reset codes	A code is valid for 15 minutes and can be used once. The record of it — the email address it was sent to and the hash of the code — stays in the database afterwards until we delete it by hand; there is no scheduled clean-up.
Feedback messages	Kept until we delete them by hand — we run no automatic deletion, so we do not promise a fixed period. If you delete your account, feedback you sent is kept without the link to your account, including any contact details you typed into the message yourself.
Server logs	Web-server access logs rotate on the server's standard schedule; the application containers' logs rotate by size — 10 MB per file, five files kept — rather than by age. We keep no copies beyond what those rotations hold.
Anonymous install statistics	Kept indefinitely — they contain no link to your account and no IP address.
Website visit statistics	180 days, then deleted.
Backups	The database is backed up regularly, each backup is kept for 30 days and then rotated out, and access to backups is restricted. Data you deleted can therefore survive in a backup for up to 30 days after you delete it.

11. Security

We take concrete measures rather than vague assurances:

Passwords are hashed with bcrypt and never stored, logged or transmitted in plain text — we cannot read your password.
Traffic between your device and our API is encrypted with TLS (HTTPS).
Access is authenticated with short-lived tokens; your library is only reachable with your own token.
Reset codes are stored hashed, expire in 15 minutes and are single-use.
Administrative access to the database is restricted, and internal services are not exposed to the public internet.
The database is backed up regularly, backups are kept for 30 days, and access to them is restricted to the same people who administer the database.

Being straight with you: no service on the internet is perfectly secure, and we will not pretend otherwise. If a breach affects your personal data, we will notify the competent supervisory authority — under Article 21 of Federal Law No. 152-FZ within 24 hours of learning of it, with the findings of our own investigation within 72 hours; within 72 hours where the GDPR applies — and tell you directly where the law requires it. To the fullest extent the law allows, we are not liable for unauthorised access caused by factors outside our reasonable control, or by your own credentials being reused, shared or compromised elsewhere. Nothing here removes liability that applicable law does not permit us to exclude.

Your part matters: use a password unique to Lorra, and tell us at once if you think your account has been accessed by someone else.

12. Your rights

Depending on where you live, you have some or all of these rights, free of charge:

Access — get a copy of the data we hold about you.
Rectification — correct anything inaccurate, directly in your profile or library, or by asking us.
Erasure — delete items with their history, or your account and all its data. This is built into the app; you do not need our permission.
Restriction and objection — switch automatic tracking off or exclude sites yourself at any time, ask us to pause processing, or object to processing based on legitimate interests.
Portability — receive your library and history in a machine-readable format. There is no export button in the app: write to us and we prepare the file by hand.
Withdraw consent — withdraw your consent to the processing of personal data at any time, by writing to us or by deleting your account, as described in the consent document. Withdrawal does not affect processing carried out before it.
Complain — lodge a complaint with your data protection authority. We would rather you told us first, but it is your right either way.

If you are in California: you may request disclosure of the categories and specific pieces of personal information collected, request deletion, and opt out of "sale" or "sharing" of personal information. We do not sell or share personal information as those terms are defined by the CCPA/CPRA, so there is nothing to opt out of, and we will never discriminate against you for exercising a right.

If you are in Russia: you have the rights granted by Federal Law No. 152-FZ "On Personal Data", including access to your data, correction, blocking or destruction of data that is incomplete, outdated, inaccurate or unlawfully obtained, and withdrawal of consent.

13. Children

The Service is not directed at children under 16 (or the minimum age of digital consent where you live, if lower — but never under 13). We do not knowingly collect data from children. If you believe a child has given us personal data, write to us and we will delete it.

14. Changes to this policy

We may update this policy as the Service evolves. The version and effective date at the top always show the current version. If a change materially affects your rights or how we use your data, we will notify you in the app or by email before it takes effect. We will not make a change that reduces your privacy retroactively.

15. Contact

Privacy questions, data requests and complaints: info@deralign.com. Tell us what you want and from which account. Requests about your personal data are answered within 10 working days, which we may extend once by 5; other questions as a rule within 14 working days.

Questions about this document? Write to info@deralign.com.