Effective: June 21, 2026
This Privacy Policy explains how Pullr collects, uses, discloses, retains, and protects personal information when you use our website, applications, APIs, cloud download service, support, and communications.
Pullr is the controller of personal information used to operate the service. For privacy questions or requests, contact [email protected]. This policy does not cover third-party websites, download sources, or content reached through Pullr.
We collect information you provide, including your name, email address, password hash, preferences, newsletter choice, support messages, copyright correspondence, and Telegram account details if you link Telegram. We record your acceptance of the Terms and acknowledgment of this policy.
When you use Pullr, we process source URLs and magnet links, source fingerprints, filenames, file sizes, pull status and history, share identifiers, selected locations, API and OAuth authorization data, IP address, browser and device information, session data, security events, application logs, notification history, and account activity. We may receive abuse, copyright, and infrastructure reports from users, rights holders, hosting providers, and other third parties.
We process account, pull, API, and technical information to perform our contract with you and provide the service. We use legitimate interests to secure Pullr, diagnose failures, measure performance, prevent fraud and abuse, enforce quotas and policies, deduplicate pulls, communicate about the service, send newsletter and product updates to registered users, and improve reliability. We process records when necessary to comply with law, respond to legal requests, establish or defend claims, and protect users and third parties. Where applicable law requires consent for a specific technology or communication, we rely on consent.
Pull share links are unlisted but accessible without an account to anyone who has the link. Shared pages may expose filenames, folder structure, sizes, and downloadable content. Do not use public sharing for confidential or personal data.
We disclose information as needed to infrastructure and hosting providers; Resend for email delivery, contact synchronization when you opt into marketing, and product events; Umami Cloud for website and product analytics; Telegram when you link the bot; Gravatar when an avatar is requested; Bunny Fonts for web fonts; and professional advisers, authorities, claimants, or counterparties where required for compliance, safety, or legal claims. OAuth applications you authorize receive the scopes and information shown during authorization. We do not sell personal information for money.
Pullr uses essential cookies and browser storage for authentication, sessions, security, preferences, and Livewire functionality. We load Umami Cloud analytics for guests and non-admin users to understand usage and performance. Umami may receive technical request information such as IP address, browser, device, referring page, and visited routes according to its configuration and privacy practices. Pullr does not currently provide advertising cookies.
Account information is retained while your account is active. Pull content and operational records are retained until deletion, expiry, capacity cleanup, or a longer period needed by other users sharing the same deduplicated pull. Session, security, application, and analytics records are kept for periods reasonably necessary for operations and investigation. Copyright, abuse, blocked-source, ban, and legal records may be retained longer to enforce policies, prevent repeat violations, and establish or defend claims. Backups may retain deleted data for a limited recovery cycle before being overwritten.
Deleting your account removes your profile and access and detaches the account from its pulls. Shared or deduplicated files may remain available to other users or until normal expiry. We may retain minimal compliance and security records where deletion would undermine legal obligations, fraud prevention, or the rights of others.
We use access controls, encryption in transit, hashed credentials, logging, rate limits, and other technical and organizational safeguards. No internet service is completely secure. Pullr may automatically reject blocked sources, enforce quotas, expire files, identify suspicious activity, and apply escalating copyright strikes. Contact us if you believe an automated or moderation decision is incorrect.
Pullr and its providers may process information in countries other than your own. Those countries may have different privacy laws. Where applicable law requires a transfer mechanism, we will use an available lawful mechanism before making the covered transfer.
Depending on where you live, you may have rights to know or access personal information, correct it, delete it, receive a portable copy, restrict or object to processing, withdraw consent, and appeal a denied request. You may unsubscribe from newsletter and marketing messages without closing your account by contacting [email protected]. We may need to verify your identity and may retain information where an exception applies. Authorized agents may submit requests where local law permits.
California residents may request the categories and specific pieces of personal information collected, correction or deletion, and information about disclosures. Pullr does not knowingly sell personal information or share it for cross-context behavioral advertising. We will not discriminate against you for exercising applicable privacy rights.
Pullr is not directed to children and accounts are limited to adults or people who have reached the age of legal majority where they live. If you believe a child provided personal information, contact us.
We may update this policy as Pullr changes. We will revise the effective date and version and may provide additional notice for material changes.
For privacy requests or complaints, email [email protected]. Describe your request and the account email involved. You may also complain to your local data protection authority where applicable.
