Privacy Policy
This policy explains what TvTime Show collects, why, and your choices. We do not sell your personal data. We do not show ads. On first visit we ask which optional cookie categories you allow; only necessary ones run until you choose.
What we collect
- Account: name, email, optional phone (WhatsApp OTP), username, password hash, avatar/cover if you upload them.
- Watch data: shows, episodes, movies, ratings, lists, rewatches, and related timestamps you create.
- Profile: bio and per-section visibility (public / followers-only / private).
- Technical: IP address for rate limits, abuse prevention, and Turnstile human checks; standard server logs.
- Support: messages you send via the contact form or WhatsApp.
Cookies and similar tech
- Necessary (always on): the HttpOnly auth cookie that keeps you signed in, Cloudflare Turnstile bot protection on sign-up, AI picks and the contact form, and your own settings (theme, spoilers, region) kept in your browser.
- Statistics (optional): anonymous first-party usage events with a per-tab random id (no cookie), and Sentry performance traces and session replays with all text and inputs masked. Error reports are always sent so we can fix crashes; they carry no name, email, phone or IP.
- Marketing (optional): measuring which campaigns and shared links bring people to TvTime Show.
We do not use Google Analytics, advertising pixels, or third-party ad trackers. YouTube trailers use youtube-nocookie embeds when shown. Browser Do Not Track or Global Privacy Control also turns statistics off.
How we use data
- Provide and improve the tracker (progress, watch next, stats, social features you opt into).
- Send transactional email (verify, reset password) and optional product mail you can refuse.
- Deliver OTP codes via WhatsApp or email when you use phone auth.
- Protect the Service (rate limits, Turnstile, admin account tools).
- Respond to support requests.
Who we share with
- Cloudflare — hosting, CDN, Email Routing, Turnstile.
- Turso — database.
- Resend — outbound email and marketing contact sync for users who have not opted out.
- TMDB — metadata lookups (not your watch history).
- WhatsApp gateway — OTP delivery when you use phone login.
- OpenAI — only when you use AI Picks. Site admins can review the prompt and raw model reply for those calls (ops / abuse). OpenAI is asked not to store prompts on their side (`store: false`).
Public profile sections you mark public are visible to anyone with the link.
Admin access
Site admins can manage accounts and metadata. They cannot browse another user’s watch content — only aggregate counts. That privacy wall is enforced in code and tests.
Retention and your rights
- Export your data from the app.
- Delete your account in the app or by email — how to delete your account and data.
- Opt out of product email anytime (Settings or unsubscribe link).
- Change profile section visibility anytime.
Children
The Service is not directed at children under 13. Do not create an account if you are under 13.
Changes
We may update this policy.
Contact
Privacy questions: Contact us.