Privacy Policy

The short version

• The app stores what you tell it you have watched, and your account email.
• There is no advertising, no analytics, and no tracking of any kind. No third

party is paid for your attention, because nobody is selling it.

• Nothing is ever sold or shared for marketing.
• Deleting your account deletes everything, immediately and for good.

What is collected

Your account

• Your email address.
• Your password, which is stored only as a hash by our authentication provider.

It is never visible to us in readable form.

• A display name, if you choose to set one. It is optional.

If you sign in with Google instead, Google gives us your email address, your name and a link to your profile picture. Nothing else. We do not receive your Google password, your contacts, your calendar, or access to any other Google service.

What you watch

• Which films and series you have added, and which list each one is in.
• For series, which episodes you have marked watched and how many times.
• When you marked them — a timestamp for each viewing. This is what the

monthly figures on your profile are built from.

• When you finished something, once per complete watch-through.

Your preferences

Which tab the app opens on, how far ahead the timeline looks, which country's streaming availability to show, how each list is sorted, which genre rows you have chosen, and which streaming service you have filtered to.

What is not collected

No location data. No contacts. No advertising identifier. No device fingerprinting. No usage analytics, crash reporting or behavioural tracking. No microphone, camera or photo access. The app asks for no permissions on Android beyond internet access.

Where it is stored

On your device. Your list lives on your phone and the app reads from there, which is why it works with no connection. It is stored in the app's private storage, which other apps cannot read.

On our server. The same list is copied to a database hosted by Supabase so it survives losing your phone and follows you to a new one. Every row is tied to your account and protected by row-level security, meaning the database itself refuses to return your rows to anyone signed in as someone else.

Your session is kept on your device so you stay signed in between launches.

Who else sees anything

The app talks to a small number of outside services. This is all of them.

TMDB (themoviedb.org) supplies every title, poster, cast list, episode list and air date in the app. Requests go from your phone directly to TMDB, so TMDB receives your IP address and can see what you search for and which titles you open. It does not receive your account, your email or your list. TMDB's own privacy policy governs what they do with that.

JustWatch, through TMDB, supplies streaming availability — the "where to watch" information and the platform filter. The same request carries it, so the same applies.

YouTube hosts the trailers. If you play one, the video is loaded from YouTube inside the app, and at that point YouTube and Google receive your IP address and the fact that you watched that trailer, and may set cookies, exactly as if you had opened the video in a browser. Trailers only load when you tap one; nothing is loaded from YouTube until then.

Supabase hosts the account system and the synced copy of your list. They are the data processor for that storage.

Google, only if you choose to sign in with Google. If you sign in with an email and password, the app never contacts Google at all.

Expo delivers over-the-air updates to the app. Your device asks whether a newer version is available, which tells Expo the app's version and your device's general details. It carries nothing about you or your list.

Importing from Trakt does not contact Trakt. The export file you choose is read on your phone and never leaves it. The only network requests an import makes are to TMDB, to fetch the artwork for the titles it found.

Nothing is sold. Nothing is shared for advertising. There is no third party receiving your data for their own purposes.

Why we are allowed to hold it

Under the GDPR, the lawful basis for storing your account and your list is performance of a contract: they are the service. An app that tracks what you have watched cannot do that without recording what you have watched.

There is no processing based on legitimate interest, and none based on consent, because there is no optional processing to consent to.

Your rights

You can, at any time:

• See everything held about you. Your list is visible in the app, in full.
• Correct it. Every field is editable in the app.
• Delete it. Settings → Delete account removes your account and, with it,

every row belonging to you. This is immediate and cannot be undone. There is no grace period and no archived copy.

• Take it elsewhere. Ask and you will be sent your data as a JSON file.

If you are in the EU or UK you also have the right to complain to your data protection authority. In Portugal that is the CNPD.

How long it is kept

Until you delete it. There is no automatic expiry, because a record of what you watched in 2019 is the point of the app rather than stale data.

Deleting your account removes it immediately. Backups taken by our hosting provider before that point roll off on their own schedule, within 30 days.

Children

The app is not directed at children and should not be used by anyone under 16 in the EU, or under 13 elsewhere. No age is collected, so this is stated rather than enforced.

Changes

If this policy changes in a way that affects what is collected or who sees it, the app will say so before the change takes effect. The date at the top always reflects the current version.

Contact

Questions, requests, or a data export: support@theblanklist.com

This product uses the TMDB API but is not endorsed or certified by TMDB.