← Docs

Privacy Policy

Covers the Pantheon Roku channel, and applies the same way to every other Pantheon client (web, mobile, other TV platforms).

Effective: 2026-07-11

🔒 Pantheon is self-hosted software, not a service. There is no central Pantheon server anywhere. Every account, watch history, and setting described below lives only on the media server that you — or whoever set up your household's Pantheon — installed and configured. The app's developer has no server to send your data to, and never sees it.

1What this app is

The Pantheon Roku channel is a client for a self-hosted media server (Kairos/Hermes) that you connect it to directly by entering that server's address. It plays your own media library and live channels, the same way a browser pointed at your own server would. Nobody else's Pantheon install can see your data, and this channel never talks to any server other than the one you configure.

2What data this channel handles

Data	Where it's stored	What it's for
Server address you enter	On this Roku device only (channel registry)	So the channel knows which server to connect to
Account username & password	Sent directly to your server over the connection you configured; the channel itself doesn't keep the password afterward	Signing in
Session token (issued after sign-in)	On this Roku device and on your server	Keeps you signed in without re-entering your password
Device pairing ID & pairing token	On this Roku device and on your server	Lets a companion app (Hades on web or mobile) send playback commands to this specific Roku
Watch history & playback position	Your server only	Continue Watching / resume-where-you-left-off
Parental-control / content-rating settings	Your server only	Applied per-account by whoever administers your server

Uninstalling the channel removes everything in the first four rows from this Roku device. Anything stored on your server is controlled entirely by your server's admin, the same as any other file or database on that machine.

3What this app does not do

No advertising, and no ad SDKs of any kind.
No analytics, telemetry, or crash-reporting sent to any third party.
No data is sold, rented, or shared with anyone — there's no one to share it with; it never leaves your own server.
No communication with any address other than the one you explicitly entered when connecting.

4Children's privacy

Pantheon isn't a public service directed at children — it's private software an adult installs and administers for their own household. That admin can configure restricted, content-rating-limited profiles for other members of the household (see the parental-control settings above), but the developer has no relationship with, or visibility into, any individual end user.

5Changes to this policy

If what this channel stores or sends changes, this page will be updated and the effective date above will move. Since there's no account system tying you to the developer, there's no mechanism (or need) to notify individual users directly — check back here if you want the current version.

6Contact

Questions about this policy or the software itself: open an issue on GitHub, or email cmpederson89@gmail.com.