Privacy and Data

Privacy & data

What OdysseySearch stores, where, and who sees what.

Where data lives

Path	Content
~/.odyssey/settings.db	encrypted RD token, search history, download log, blacklist, result cache, preferences
~/.odyssey/.salt, .key	key-derivation material for token encryption
~/Downloads/Odyssey/	downloaded files

Everything is outside the repo, so git clone and git pull never touch it.

Token encryption

The Real-Debrid token is scrambled before it's written to disk:

• PBKDF2-HMAC-SHA256, 600,000 iterations, random 16-byte salt
• results in a Fernet key that encrypts the token

It is never written in plaintext, never logged, and never pushed.

What your network sees

• Search — your IP reaches the public trackers (over HTTPS).
• Download — your IP reaches Real-Debrid only. The file bytes come from RD's CDN over a single HTTPS connection.

Your IP does not join the P2P swarm, and you do not upload to strangers.

The honest caveat

Public trackers are public: a query can be observed by the tracker operators. If that's a concern for your threat model, use a VPN on top. The tool doesn't pretend otherwise.