Privacy policy

Data controller

WatchTrack is operated in France by AdrCorp (Adrien), which acts as the data controller for the personal data described on this page.

For any privacy-related question or to exercise your rights, you can contact us at adrcorp@proton.me.

Data we collect

We only collect the data needed to operate WatchTrack, personalize the experience, and keep the service secure.

• Account and authentication data: email address, sign-in identifiers, passkeys, and technical session information.
• App and content preferences: language, TMDB country, favorite providers, media types, content filters, and notification preferences.
• Tracking data: watchlist, episode-by-episode progress, watched movies, rewatches, reactions, personal stats, and related activity.
• User-published content: comments, GIFs, uploaded images, bio, avatar, public social profile, follows, and related social activity.
• Import data: files and information imported from a TV Time export to rebuild your history and comments.
• Notification data: push subscription details, technical endpoint, email and push preferences, and minimal technical delivery or failure information.
• Essential technical data: runtime logs, session cookies, language, region, timezone, and local cache stored on your device.

Why we process your data

• Create and secure your account.
• Save your progress, watchlist, and preferences.
• Provide the social features you choose to enable.
• Import data from third-party services at your request.
• Send service-related transactional emails and push notifications.
• Measure overall site usage, improve reliability, and prevent abuse.
• Meet legal obligations and handle requests about your rights.

Legal bases

• Performance of the service: account creation, sync, tracking storage, import, and app personalization.
• Legitimate interest: security, fraud prevention, limited audience measurement, maintenance, and service improvement.
• Legal obligations: responding to lawful requests from competent authorities and handling GDPR-related requests.
• Consent or action from you where applicable: enabling push notifications, publishing content, and turning on a public social profile.

Recipients and processors

Some data is processed by technical providers that help us run WatchTrack.

• Supabase: authentication, database, storage, and parts of the backend.
• Vercel: app hosting and delivery.
• TMDB: catalog data, show and movie metadata, images, and watch-provider availability.
• Umami: limited aggregated audience measurement.
• Resend: transactional email delivery through our server functions.
• DeepL: on-demand translation of user content when you use the translation feature.
• Giphy: GIF search and insertion in comments.
• Browsers, devices, and related push services: technical delivery of push notifications when you enable them.

Transfers outside the European Union

Some providers may host or process part of the data outside the European Union depending on their infrastructure or subprocessors.

When this happens, we rely on GDPR-compatible safeguards such as appropriate contractual protections or any other applicable transfer framework made available by the provider.

Retention periods

• Account, preferences, and tracking data: for as long as the account remains active, then deleted or anonymized after account deletion subject to residual technical or legal constraints.
• Comments, social profile data, uploaded images, and related activity: while the account exists or until you delete the content where the feature allows it, then progressively removed from residual systems.
• Import data: for the time needed to process the import and report its result, then deleted or reduced to the technical information still useful for support and reliability.
• Notification subscriptions and preferences: until you unsubscribe, disable the preference, the subscription becomes invalid, or the account is deleted.
• Technical logs, audience measurement, and security data: for a limited period appropriate to operations, security, and service improvement.

Your rights

Some controls are available directly inside WatchTrack, including data export and account deletion from Settings > Account.

For other requests about your personal data, including access, rectification, objection, restriction, or questions about this policy, you can write to adrcorp@proton.me. We may request reasonable proof of identity when needed.

Security

We implement reasonable technical and organizational measures to protect personal data against unauthorized access, loss, alteration, or disclosure.

No online service can guarantee absolute security, so we also recommend using a strong password and protecting access to your devices.

Cookies, local storage, and trackers

WatchTrack uses cookies and local storage that are strictly necessary to operate the service, for example for session handling, language, region, timezone, PWA state, or local caching of some data on your device.

We also use limited audience measurement through Umami to understand overall site usage and improve the product, without personalized advertising purposes.

A dedicated Cookies and trackers page now complements this policy with a more structured overview of these technologies.

Updates to this policy

This policy may change if WatchTrack evolves, if new features are added, or if the legal framework requires it.

The last-updated date shown at the top of this page indicates the version currently in force.