This Privacy Notice explains how Watchlistd ("we", "us", "our"), operated by Aleksa Kostandinov in Serbia, collects, uses, and protects your personal data when you use watchlistd.net (the "Service"). We act as the data controller for the personal data described here.

1. Data we collect

• Account data: email address, username, display name, password (stored hashed), and optional profile details you add (bio, avatar, links, etc.).
• Content you create: ratings, reviews, lists, watchlist entries, comments, follows, and similar activity.
• Usage and device data: IP address, browser type, pages viewed, and similar log data, used for security and to operate the Service.
• Cookies: required cookies for login/sessions, and third-party cookies from advertising and analytics partners (see below).

We do not collect or store your payment card details. Payments are handled by Polar (see "Payments").

2. How we use your data

• To create and operate your account and provide the Service;
• To verify your email address and secure your account;
• To display your public profile, reviews, and lists to other users;
• To manage subscriptions and entitlements (Pro/Plus);
• To prevent abuse, fraud, and security incidents;
• To communicate with you about your account (e.g. activation, important notices);
• To show advertising to free users.

Our legal bases include performance of our contract with you (providing the Service), our legitimate interests (security, improvement, advertising), your consent (where required, e.g. certain cookies), and compliance with legal obligations.

3. Payments

Subscription payments are processed by Polar, which acts as Merchant of Record. Polar collects and processes your payment information under its own privacy policy. We receive limited information from Polar (such as subscription status and a customer identifier) needed to grant your subscription.

4. Advertising and analytics

We display ads to free users through partners such as Google AdSense. These partners may use cookies and similar technologies to serve and measure ads, potentially based on your activity over time and across sites. You can learn about and control personalized advertising through Google's Ads Settings and tools like the EU/your-region consent options. Paid (Pro/Plus) users are not shown ads.

5. Sharing your data

We share data only as needed:

• Service providers (hosting, email delivery) that process data on our behalf;
• Polar for payment processing;
• Advertising partners (e.g. Google) as described above;
• TMDB, which provides film data (your requests for film pages may involve their API);
• When required by law or to protect rights, safety, and security.

We do not sell your personal data.

6. Data retention

We keep your data while your account is active. If you delete your account, we remove or anonymize your personal data within a reasonable period, except where we must retain certain records for legal, security, or accounting reasons.

7. Your rights

Depending on your location, you may have the right to access, correct, delete, or export your data, to object to or restrict certain processing, and to withdraw consent. You can edit much of your data in your account settings, delete your account at any time, or contact us to exercise your rights. You may also have the right to lodge a complaint with your local data-protection authority.

8. Security

We use reasonable technical and organizational measures to protect your data (including hashed passwords and encrypted connections). No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

9. Children

The Service is not intended for children under 16 (or the minimum age in your country). We do not knowingly collect data from children below that age. If you believe a child has provided us data, contact us and we will delete it.

10. International transfers

Your data may be processed in countries outside your own, including by our service providers. Where required, we rely on appropriate safeguards for such transfers.

11. Mobile application

We offer a Watchlistd mobile application (currently for Android, distributed through the Google Play Store). The app displays the same Watchlistd service as the website, so this Privacy Notice applies in full when you use the app.

The app itself does not collect additional personal information beyond what is described in this Notice. Specifically:

• Account and usage data are handled exactly as on the website (see sections 1–2), because the app uses the same account and servers.
• Device permissions: the app requires internet access to load the service. It does not access your contacts, location, microphone, or files unless a feature you actively use requires it, in which case Android will ask for your permission first.
• Notifications: if you choose to enable push notifications, a device notification token may be processed solely to deliver those notifications. You can turn notifications off at any time in your device settings.
• No separate ad tracking by us: we do not collect your advertising identifier. Any advertising shown follows section 4, and is not displayed to Pro/Plus members.
• Google Play: when you download or use the app, Google may collect certain information in accordance with its own policies, which we do not control.

You can stop all app data processing by signing out and uninstalling the app. Data associated with your account remains until you delete your account (see section 7).

12. Changes

We may update this Policy from time to time. We will update the date above and, for material changes, take reasonable steps to notify you.

13. Contact

For privacy questions or requests, contact us at [email protected].