Privacy Notice
Version: 2026-10-16.1
Operator: a private individual in Slovenia
These notices are a draft until the operator’s full legal name and contact details are completed. Mandatory rights under applicable Slovenian and EU law remain unaffected.
Data and purposes
We store your account name, email, password hash, email verification status, sessions and personal library (including viewing progress) to provide the service. Passwords are not stored in plain text. We retain the version and time of your acceptance to document the agreement. Account services and accepted terms are processed to perform the service agreement; security and moderation records are processed for legitimate interests in protecting users and the service, subject to applicable law.
Administrator access to list content
Other users cannot view your lists. Administrators can review their titles, images and video links for safety and rules compliance; they do not receive your watch history or playback progress through this review. Removal decisions, reasons and an internal audit record are used for moderation and appeals. A per-account record prevents removed content from being restored by outdated devices. Existing accepted recommendations remain personal lists; new public recommendations are disabled.
Storage and providers
Account records and per-account moderation blocks remain while the account exists; contact the operator to request deletion. Moderation notices and internal decision logs are removed after 180 days. Old proposal/report records from previous service versions may remain until the related account is deleted or records are rotated; they are no longer public. The latest seven database backups are retained and older ones are rotated when backups run. Render hosts the application, the configured SMTP provider delivers account emails, and YouTube serves embedded videos. Providers may process data outside the EEA; the operator must verify applicable transfer arrangements before public launch.
Cookies and rights
A necessary session cookie keeps you signed in. Browser storage keeps local preferences and guest library state. This app does not add analytics tracking. Embedded YouTube playback may involve Google cookies and processing under Google’s policies. Contact the operator to request access, correction, deletion, portability, restriction or objection where applicable. You may lodge a complaint with Slovenia’s Information Commissioner (Informacijski pooblaščenec). No optional marketing consent is bundled with registration.
Optional Google sign-in
If you choose Sign in with Google, Google processes authentication under its own privacy policy and provides an account identifier, name, email address and email verification claims. We store the Google identifier linked to your account, not your Google password or an access token for Gmail, Drive or other Google services. We use a necessary, short-lived browser challenge cookie to secure this flow. Matching email addresses do not automatically merge accounts: sign in to your existing account first to connect Google. New accounts must accept the Terms of Use. Non-Gmail accounts without a Google Workspace domain may also need our email confirmation. Google Identity Services loads when you open the account dialog and Google sign-in is configured.
Payments — PayPal and Stripe
For payment verification we store the internal account reference, PayPal order and capture identifiers or Stripe Checkout Session and PaymentIntent identifiers, amount, currency, payment status, timestamps and purchase terms acceptance. Payment is processed on PayPal or Stripe. We do not receive or store your PayPal password or card details. The selected provider receives the purchase amount, internal reference and information required for checkout (including email for Stripe), and processes payer information under its own privacy notice.