FlowConsent
How it worksPricingComparisonsBlogDocumentationLog inTry FlowConsent
Try FlowConsent
CMS

NexusPHP

UnclassifiedOfficial website

NexusPHP is an open-source PHP application for running private BitTorrent tracker communities. It manages user accounts, torrent indexing, upload/download ratio tracking, and community features. When deployed for European users, the operator, not the software, is the data controller responsible for GDPR compliance. Key obligations include user consent for analytics cookies, lawful basis for account data, and appropriate handling of IP address logs.

Block NexusPHP until consentScan my site
Overview

What does NexusPHP do?

What is NexusPHP?

NexusPHP is an open-source PHP web application for running private BitTorrent tracker communities. It provides user registration and management, torrent indexing, upload and download ratio enforcement, seeding bonus systems, forum functionality, and community management tools. NexusPHP is self-hosted: operators deploy it on their own infrastructure. The software itself does not process data; the operator who deploys it is the data controller under GDPR.

What data does a NexusPHP tracker collect?

A NexusPHP tracker typically collects user email addresses, usernames, IP addresses (for ratio enforcement and abuse prevention), upload and download statistics, seeding history, invitation tree data, and any profile information provided by users. Session cookies are used for authentication. IP addresses are particularly significant as they are used to enforce ratio rules and identify abusive users.

GDPR obligations for tracker operators

Operators running NexusPHP trackers for EU users must comply with GDPR as data controllers. Key obligations include: publishing a privacy policy describing all data collected and processed; providing a lawful basis for each processing activity; honoring data subject access, erasure, and portability requests; implementing appropriate retention limits for IP logs; and ensuring server security to protect user data.

IP address logging and legitimate interest

IP address logging for ratio enforcement and security can generally rely on legitimate interest under GDPR Article 6(1)(f), provided the operator documents a balancing test. IP logs should be retained only as long as necessary for the stated purpose and should not be shared with third parties. Users must be informed of IP logging in the privacy policy.

Practical compliance steps

Publish a privacy policy covering all tracker data processing. Implement user data subject rights (access, erasure, portability). Define IP log retention periods and automate deletion. Host on EU infrastructure with a signed hosting DPA. Obtain analytics cookie consent if tracking scripts are used. Configure secure authentication cookies with appropriate attributes.

Compliance

NexusPHP and the GDPR

NexusPHP is classified as “Unclassified”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy.

Legal basis
Contract performance (Art. 6(1)(b)) for user account and torrent tracking data necessary for tracker membership. Legitimate interest (Art. 6(1)(f)) for security and abuse prevention logging. Consent (Art. 6(1)(a)) for non-essential analytics or tracking cookies.
Risk level
medium
Applicable regulations
GDPR, ePrivacy Directive, potential copyright law implications

Impact assessment (DPIA)

A DPIA is advisable for NexusPHP tracker deployments processing large numbers of EU users, particularly given the combination of persistent user accounts, IP address logging for ratio enforcement, and the technically sensitive nature of torrent tracking data.

Sample text for your banner

This private tracker uses NexusPHP. By creating an account, you agree to the processing of your username, email address, and activity data for tracker membership purposes. See our privacy policy for full details.
Cookies and trackers

What NexusPHP sets and contacts

Tracking method
Open-source PHP BitTorrent tracker application, server-side user and torrent data processing, first-party session cookies
Server location
Self-hosted (deployer infrastructure)

Cookies set (1)

NameTypeDurationPurpose
PHPSESSIDsessionSessionStrictly necessary PHP session cookie used for user authentication on NexusPHP tracker

Third-party domains contacted (2)

  • nexusphp.org
  • github.com
Questions

Frequently asked questions about NexusPHP

Can't find your question? Write to us, we answer fast.

What data does a NexusPHP tracker collect?

A NexusPHP tracker collects user email addresses, usernames, IP addresses for ratio enforcement and security, upload and download statistics, seeding history, invitation data, and profile information. Session cookies are used for authentication.

Is the NexusPHP software responsible for GDPR compliance?

No. NexusPHP is open-source software. The operator who deploys and runs the tracker is the data controller responsible for GDPR compliance. The software provides the functionality; compliance is the operator's responsibility.

What legal basis applies to IP address logging on a NexusPHP tracker?

Legitimate interest (Art. 6(1)(f)) can apply for IP logging used for ratio enforcement and security purposes, provided a documented balancing test is maintained. IP logs should be retained only as long as necessary and should not be shared with third parties.

Do I need to publish a privacy policy for my NexusPHP tracker?

Yes. Any NexusPHP tracker serving EU users must publish a privacy policy describing all personal data collected, the legal basis for each processing activity, retention periods, user rights, and contact details for data subject requests.

Do I need a DPIA for my NexusPHP tracker?

A DPIA is advisable for trackers with large EU user bases, given the combination of persistent user accounts, IP address logging for ratio enforcement, and activity tracking data. Smaller private trackers with limited EU users may not meet the scale threshold.

How do I implement data subject rights on a NexusPHP tracker?

Implement an account export feature (data portability), an account deletion flow (erasure), and a process for data access requests. When a user deletes their account, anonymise or delete all personal data including IP logs, seeding history, and profile information.

Where should I host my NexusPHP tracker for GDPR compliance?

EU-based hosting (OVHcloud, Hetzner, Scaleway) with a signed DPA with the hosting provider ensures EU data residency. This eliminates third-country transfer concerns for the tracker data itself.

Can BitTorrent trackers legally operate under GDPR?

Yes, provided they comply with GDPR. The software itself is not illegal. However, trackers distributing copyright-infringing content face separate legal risks unrelated to data protection. GDPR compliance does not address copyright law obligations.

Same category

More services: CMS

See the whole category

Virgool

Virgool is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Virgool supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Virgool ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

CMS

Swagger UI

Swagger UI is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Swagger UI integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Swagger UI helps organizations maintain robust websites that meet user expectations and technical requirements.

CMS

Graffiti CMS

Graffiti CMS is a powerful content management system (CMS) designed to help businesses and developers build, manage, and publish digital content with ease. It offers a flexible architecture that supports custom content types, templates, and workflows, making it ideal for websites of any scale. With Graffiti CMS, teams can streamline content creation, improve collaboration, and deliver engaging web experiences. Its extensible plugin ecosystem and API-first approach ensure seamless integration with.

CMS

Fukasawa

AndersNoren Fukasawa is a popular web platform powering millions of websites worldwide, offering a flexible and extensible foundation for building any type of online presence. It provides themes, plugins, and a user-friendly admin interface for developers and non-technical users. AndersNoren Fukasawa supports e-commerce, blogging, portfolios, and enterprise websites with robust customization options. With a massive community and continuous updates, AndersNoren Fukasawa remains a leading web development choice.

CMS

Ibexa DXP

Ibexa DXP is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Ibexa DXP supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Ibexa DXP ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

CMS

Plate

Plate is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Plate supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Plate ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

CMS

Make your site compliant today.

Free up to 25,000 sessions a month. No credit card, no commitment.

Create my bannerScan my site