Transmitted over an encrypted (HTTPS) connection and used exactly once, in memory, to log into your account and install the addon configuration. It is never written to a database, file, or log — once the setup process finishes (success or failure), it is discarded and cannot be recovered by us. This is a hard technical property of how the setup process works, not just a policy we follow.
This one is different, and we want to be direct about it rather than bury it in general language: your Real-Debrid key is stored, encrypted, on our server — and we can decrypt it. It has to work this way. The addon needs the key, in usable form, every single time it resolves a stream for you. There's no version of this service that works without some ongoing, recoverable access to that key on our end.
Once your addon collection is installed into your Stremio account, that installation is stored by Stremio and syncs to every device you're logged into — this is how Stremio's own cross-device sync works, and it happens entirely on Stremio's infrastructure, outside our control. We can't reach into your Stremio account after setup, and neither option below removes anything from your Stremio account or your other devices.
Treat that addon install link like a password. It contains an access token, and anyone who has the link can use your Real-Debrid account through the addon — no login, no password needed. It's stored in your Stremio account and syncs to your devices, which is outside our control. If you think the link has been shared or exposed, refresh your Real-Debrid token (see below) — that immediately invalidates it.
Two ways to do this, and you don't need our involvement for the faster one:
Neither option cancels or affects your Real-Debrid subscription with Real-Debrid itself — that's managed entirely on their end.
We don't sell your information to third parties. We don't use your credentials to access your account for any purpose beyond the one-time setup you paid for. We don't store your streaming account password under any circumstances.
If setup fails (for example, due to a mistyped password), you can retry using the same payment confirmation without being charged again. Each retry follows the same handling described above for your password — nothing beyond the order record itself is retained between attempts.
If we ever discover that stored data covered by this policy — your Real-Debrid key, specifically — was accessed or exposed in a way it shouldn't have been, we will notify affected customers by email without undue delay once we understand the scope of it.
Questions about this policy, or a request to review/delete your stored configuration: [email protected]