PT EN DE

Privacy Policy

Last updated: 21/08/2026

1. Data Controller

Data controller: Joana Dias. For data protection inquiries, contact: joana.jou@gmail.com

2. Legal Basis for Processing

We process your data based on: (a) contract performance (article 6(1)(b) GDPR), (b) your explicit consent (article 6(1)(a) GDPR), and (c) legitimate interest in maintaining security and operating the service (article 6(1)(f) GDPR).

3. Personal Data Collected

We collect the following personal data:

  • Identity data: email, encrypted password (for direct login) or name and profile picture (via Google OAuth)
  • Preference data: movie rating history, personalized recommendations
  • Technical data: IP address, browser type, access date/time, session cookies
  • Optional data: preferred streaming platforms, display name, avatar

4. Purpose of Processing

Your data is processed for:

  • Secure authentication via email/password or Google OAuth
  • Account management and security
  • Delivery of personalized movie and series recommendations
  • Legal compliance and regulatory requirements
  • Security, fraud prevention and abuse protection

5. Data Sharing with Third Parties

Your data is shared with the following processors:

  • Google LLC (Google OAuth - optional) - only email and name for authentication
  • The Movie Database (TMDB) - movie data only (does not receive personal data)
  • Hetzner Online GmbH - infrastructure hosting (servers in Germany, EU)

6. Data Subject Rights (GDPR)

You have the following rights under GDPR:

  • Right of access: obtain a copy of your personal data
  • Right of rectification: correct inaccurate or incomplete data
  • Right of erasure (right to be forgotten): request deletion of your data
  • Right to restrict processing: limit processing of your data
  • Right to data portability: receive your data in a structured format

To exercise any of these rights, contact: joana.jou@gmail.com

7. Data Retention

We retain your personal data only for as long as necessary to provide the service and comply with legal obligations. Upon account deletion request, your data is deleted within 30 days, except where retention is required by law. Audit data and security logs may be retained for up to 3 years.

8. Data Security

We implement appropriate technical and organizational measures to protect your data, including: HTTPS encryption, bcrypt password encryption, role-based access control, continuous security monitoring and regular testing.

9. International Transfers

Your data is processed on servers located in Germany (European Union). We do not transfer data outside the European Economic Area without explicit consent.

10. Cookies and Tracking

We use only strictly necessary cookies to maintain your login session. We do not use tracking, analytics or advertising cookies.

11. Contact and Complaints

For privacy inquiries: joana.jou@gmail.com. If you believe your GDPR rights have been violated, you may file a complaint with the data protection authority in your jurisdiction.

12. Changes to This Policy

We may update this policy periodically. Significant changes will be communicated via email with 30 days notice.