Privacy

Last updated: October 24, 2026

LunoRX is built so your data stays on your computer first. This page summarizes how the app really works, based on the project documents.

What is stored on your computer

Playlists, liked songs, listening history, settings and files kept for offline listening are stored on your computer. On Linux they are in ~/.local/share/io.lunorx.desktop and stay there after you uninstall.
Lyrics files you create with the Lyric Maker tool are plain text files in ~/Documents/LunoRX Lyrics/.
You can delete your listening history from inside the app.

Your YouTube login and the sync token are stored in your system password storage (Keychain, Credential Manager or Secret Service).
The app does not write them to a file, put them in logs, send them to a server or show them on screen.
On Linux without GNOME Keyring or KWallet, login does not work. The app does not store them unsafely instead.

YouTube Music: the app searches and plays music by talking to YouTube Music directly, so what that service collects applies.
Lyrics services: the app sends only the song title, artist name, length and album name (when known), or the words you type when you search for lyrics yourself. It never sends your login or account details. You can turn each source off in Settings > Playback & audio.
Sync (optional): if you connect a LUNOR-X server, the app sends your account and playlists. The server does not receive your YouTube login or your searches. You can run your own server, and the app works without one.
Listening stats (optional, off unless you turn it on): if you turn it on and connect a server, the app sends song titles, artist names, track ids, play counts and the time each song was last played, stored in your account on that server. If you leave it off, stats stay on your computer.
Anonymous usage counts (optional, off by default): if you turn it on, the app sends counter names and counts, such as how often the app opened or which kind of error happened, with a random install id. It never sends song titles, artists, searches or account details. The app shows you exactly what the next upload will contain.
Playlist share links: if you create a share link, anyone with the link can see that playlist's name, description and songs without signing in. You can revoke the link at any time.

Because most data is on your computer, you can view, back up and delete it yourself. If your computer and the server disagree, the app asks which version to keep. It never overwrites quietly.
If you use a server that someone else runs, that server's operator controls the data under Thailand's Personal Data Protection Act B.E. 2562 (2019).

Open an issue at https://github.com/LunoRX-RS/desktop/issues (do not post personal information). For security matters, report privately at https://github.com/LunoRX-RS/desktop/security