Privacy Policy

tvcask (“we”, “us”) is an independent product run by a small team. We are not affiliated with TV Time or Whip Media. You can reach us at tvcask@protonmail.com.

We collect only what we need to run your account and your library:

• Account details: your email address, a display name, an optional username, and an optional avatar image URL. Your password is stored only as a salted hash; we never see it in plain text.
• Profile details: an optional bio, Instagram and Letterboxd usernames, and a website link.
• Your library: the shows and movies you track, their status (watchlist, watching, watched), episodes you mark watched, ratings, favorites, and any lists you create.
• Social activity: who you follow, who you block, reports you submit, and your notifications.
• Device details: if you allow notifications on iOS, a push token and your device platform, so we can send them to you.
• AI connections: if you connect an AI assistant, the name of that assistant, the permissions you approved, and when you connected it.
• Imported data: when you import a TV Time export, we read the shows, movies, watched episodes, favorites, and lists needed to recreate your history. Official TV Time GDPR archives can contain unrelated account, login, device, and network files. tvcask does not open or use those files.
• Basic technical logs: standard server logs (such as request times and error diagnostics) used to keep the service reliable and secure.

We do not use advertising identifiers, ad networks, or cross-app tracking, and the app does not access your camera, contacts, location, or photo library.

• To create and secure your account and sign you in.
• To store and display your tracked shows, movies, episodes, lists, and stats.
• To match your titles against catalog data and show artwork and episode details.
• To show your profile, lists, and activity to others, as described below.
• To send account emails you request, such as email verification and password resets.
• To send notifications you allow, such as new followers and new episodes.
• To give an AI assistant access to your library, if you connect one.
• To keep the service running, debug problems, prevent abuse, and respond to support requests.

Your email address and password are never shown to other people. What else is visible depends on your settings.

Other tvcask members. Unless your profile is private, anyone signed in to tvcask can find you by name or username and see your profile: your username, display name, avatar, follower counts, stats, badges, library, and public lists. Following someone takes effect immediately, with no approval step. People who follow you also see recent activity in their feed, including the titles you track, their status, your progress, favorites, and ratings, along with new public lists.

Anyone with a link. If you turn on your public page, which is off by default, anyone with the link can see your name, username, avatar, bio, links, and public lists, including each list’s name, description, and titles, without an account. They cannot see your email address, watch history, library, stats, badges, or followers. We ask search engines not to index these pages.

You control this:

• Private profile: turning this on hides your profile, activity, and public page from everyone but you, and overrides your public page setting.
• Public page: turning this off makes your page and its list links stop working right away.
• Lists: new lists are private unless you make them public, and you can change this for each list.
• Blocking: blocking someone hides your profile from them while they are signed in. It cannot apply to someone viewing your public page without an account.

Once something has been public, we cannot control copies other people made, such as screenshots, copied text, or link previews saved by messaging apps. Links on your public page go to other sites, which have their own privacy policies.

Access to account details is restricted to authorized administrators and used only to operate and secure the service, investigate import problems, or respond to support requests. Administrative access is logged.

Our administration tools show account details, library totals, and import summaries. They do not expose password hashes, authentication tokens, uploaded files, or individual watch history.

We share the minimum needed with a few providers that help run tvcask:

• TMDB and TheTVDB: we query these services for catalog data (titles, posters, episodes). We send search terms and title identifiers, not your personal details.
• Email delivery: a transactional email provider sends verification and password-reset messages to your address.
• Hosting: our servers and database run with a cloud hosting provider on our behalf.
• Push notifications: if you allow notifications, Expo and Apple deliver them. They receive your push token and the notification text.
• AI assistants you connect: if you connect one, such as ChatGPT, it can read your library and, if you approved it, change your library. Its provider handles that data under its own privacy policy. You can disconnect it at any time in Settings → AI connections.

We do not sell or rent your personal data to anyone.

Your data is stored on our servers and database. On iOS, your login token is kept in the device Keychain, and nothing you track is stored on the device beyond a temporary cache for a fast experience.

You are in control:

• Delete your account in the app: Settings → Security → Delete account (or the equivalent on the web). This permanently removes your account and all of your tracking data and cannot be undone.
• By email: write to tvcask@protonmail.com and we will delete your data.

We keep your data for as long as your account is active. When you delete your account, your personal data and library are removed from our systems. Routine backups are rotated on a short schedule.

Uploaded TV Time ZIP files are parsed in memory and are not stored after the import request. The shows, movies, watched episodes, favorites, and lists created from the import remain in your tvcask account until you remove them or delete your account.

tvcask is not directed to children under 13, and we do not knowingly collect data from them. If you believe a child has created an account, contact us and we will remove it.

Depending on where you live, you may have the right to access, correct, export, or delete your personal data. Email tvcask@protonmail.com and we will help.

If we make material changes, we will update this page and the “last updated” date above. Continued use of tvcask after a change means you accept the updated policy.