Legal
Privacy Policy
Last updated July 6, 2026. This policy explains what we collect, why, and the control you have over your data.
Who we are
WhatToWatch ("we", "us") operates whattowatch.app. The service is run by an individual operator, not a company. For the purposes of the EU/UK General Data Protection Regulation (GDPR), that operator is the data controller and can be reached at privacy@whattowatch.app.
Information we collect
- Account details you provide (email, display name, profile bio) or receive from sign-in providers (Google, GitHub, Telegram).
- Watch activity you create or import: watchlists, watched history, ratings, lists, and scrobble events from connected services.
- Notification preferences and linked accounts (e.g. Telegram chat id for bot delivery).
- Technical data such as IP address, browser type, and approximate usage patterns needed to operate and secure the service.
- Optional push notification subscription endpoints if you enable browser notifications.
How we use information & our legal bases
Under the GDPR we rely on the following legal bases for processing:
- Performance of a contract — to provide the core features you sign up for: tracking, recommendations, the social feed, and notifications you enable.
- Legitimate interests — to keep the service reliable and secure, prevent abuse, and understand aggregate usage through first-party analytics.
- Consent — for optional things you switch on, such as email/Telegram notifications and non-essential analytics. You can withdraw consent at any time.
- Legal obligation — to comply with valid legal requests and enforce our terms.
We do not sell your personal information to third parties.
Service providers
We use infrastructure and integration partners to deliver the service — for example a hosting and edge-compute provider, a movie & TV metadata provider, and the OAuth sign-in providers listed above. They process data only as needed to provide the feature you use, under their own agreements. See Copyright & Attributions for data-source notices and our Cookie Policy for storage details.
International transfers
WhatToWatch runs on globally distributed infrastructure, so your data may be processed on servers outside your home country, including outside the EEA/UK. Where required, transfers rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.
Retention & deletion
We keep your account data while your account is active. You can delete your account yourself at any time from Settings → Account, which permanently removes your personal data (analytics rows are anonymised rather than kept against your identity). Some records may persist briefly in encrypted backups and where retention is required by law.
Your rights
Depending on where you live you have rights over your personal data. Under the GDPR these include:
- Access — get a copy of the data we hold about you. Use Settings → Export to download it yourself.
- Rectification — correct inaccurate data via your profile settings.
- Erasure — delete your account and data via Settings → Account.
- Portability — export your data in a machine-readable format (JSON + CSV).
- Restriction & objection — ask us to limit or stop certain processing.
- Withdraw consent — turn off notifications or analytics consent at any time.
- Complain to a supervisory authority — you may lodge a complaint with your local data protection regulator.
If you are a California resident, the CCPA gives you the right to know what we collect, request deletion, and opt out of the sale of personal information — we do not sell it — without discrimination for exercising these rights.
To exercise any right you cannot complete in-app, email privacy@whattowatch.app. We respond within the timeframe required by applicable law.
Cookies & tracking
We use a single strictly-necessary cookie to keep you signed in and first-party, cookieless analytics to understand aggregate usage. We do not use third-party advertising or cross-site tracking cookies. Full details, and how to opt out of analytics, are in our Cookie Policy.
Children
WhatToWatch is not intended for children under 13 (or the minimum age required in your country). We do not knowingly collect data from them.
Changes & contact
We may update this policy; material changes will be reflected in the "last updated" date above. Privacy questions: privacy@whattowatch.app or via the Help Center.