Privacy Policy

what2c.tv helps you find highly-rated series and movies and keep one watchlist across your devices. This page describes exactly what the service stores about you and why. It is written to be read, not to be skimmed past.

What we collect

If you create an account

Accounts are handled by Firebase Authentication (Google LLC). We receive and store:

• your email address, and a Firebase-generated user ID;
• if you sign in with Google, the basic profile information Google returns for that sign-in — your email address and account identifier.

We never see or store your password. When you use email and password, the password goes directly to Firebase Authentication, which stores it hashed. When you use Google sign-in, no password reaches this service at all.

A record of each sign-in

Each time you sign in, we keep a security record of it: when, whether it was with Google or an email and password, the kind of device and browser, the IP address it came from, and the approximate place (country, and where available region and city) that our network provider, Cloudflare, reads from that address. It lets us spot sign-ins that don’t look like you, and it is not used for analytics or advertising, so it is kept whatever you choose for analytics. Each record is deleted after one year, and all of them are deleted with your account.

What you save in the app

Your watchlist and the preferences attached to it — the titles you save, their status, your ordering, your selected streaming services and region — are stored in Cloud Firestore against your user ID, so that the same list appears on every device you sign in on.

While you are signed in, and analytics is allowed, we also note at most once a day the kind of device you use the app on — the Android app, or a browser on Android, iPhone, Windows, Mac or Linux — so we know which platforms our users need. Only that kind is kept, never the device model or anything that identifies the device, and it is deleted with your account.

Usage analytics

We record a small, fixed set of engagement events through Google Analytics for Firebase: opening a title, submitting a search, adding or removing a watchlist item, playing a trailer or one of our own videos, and clicking through to a streaming provider. Searches are recorded once per search you submit, with whether it found anything and roughly how long it took, never as you type. We do not attach your email address or user ID to these events.

Trailers and our own videos play in a player provided by YouTube, which is loaded only when you press play (a trailer’s preview picture comes from YouTube’s image server before that). Once a player is loaded, YouTube’s own privacy policy applies to it.

We also use Microsoft Clarity to see how pages are used, so we can find what is confusing or broken: it records clicks, taps, scrolling and mouse movement, and the page as it looked, as session replays and heatmaps. What you type into any field, and your name and email address where the app shows them, are masked in the browser and never sent. Clarity keeps this for up to 13 months, and we do not attach your user ID or email address to it.

We also measure how fast pages load, through Firebase Performance Monitoring: load times, which page, and how long the site’s own network requests took, with their query strings removed so no search text is included.

If you are in the European Economic Area, the UK or Switzerland, none of this runs until you choose “Allow” in the banner we show you. Everywhere else it runs by default. Anyone can switch it on or off under Cookies and local storage.

The same channel also records errors: when something in the page fails, we send the error’s text (shortened) and the path of the page it happened on, so we can tell that the app is broken without waiting to be told. This carries no stack trace and no session recording, and only the first few distinct errors of a visit are recorded.

Crash reports from the Android app

If the Android app crashes or freezes, Firebase Crashlytics (Google LLC) sends us a crash report: where in the app’s code it failed and the error message, the app version, your device model and Android version, its free memory and disk space, whether it is rooted, and a random identifier for the installation, so we can tell how many devices a crash affects. We do not attach your email address, user ID or watchlist to crash reports. Crash reports are kept for 90 days. The website sends no crash reports.

From app version 2.5.5, crash reports follow the same choice as analytics. In the European Economic Area, the UK or Switzerland the app sends none until you choose “Allow”; a crash before that is kept on your phone and deleted if you say no. Anyone can turn them off under Cookies and local storage.

What we do not do

• We do not sell or rent your personal information to anyone.
• We do not show third-party advertising, and we do not run advertising trackers.
• We do not ask for or store payment details. The service is free.
• We do not build a profile of you from anything other than what you explicitly save in the app.

Where the data lives

The service runs on Google Cloud and Firebase, with its application backend in the europe-west1 region. Firebase Authentication, Cloud Firestore, Firebase Crashlytics and Google Analytics are operated by Google and are subject to Google’s own terms and privacy practices. Using the service means your data is processed by Google on our behalf. Microsoft Clarity is run by Microsoft Corporation. We share the usage data described above with Microsoft, which handles it as an independent controller under its own privacy statement, not only on our behalf. We tell Clarity, on every visit, that it may not use this data for advertising.

Where the catalogue data comes from

Title information, ratings, artwork and streaming availability are fetched from third-party sources — including TMDB, TVmaze, TheTVDB, Simkl, JustWatch, IMDb, Agregarr, MDBList, Wikidata and OMDb. These requests are made by our servers, not by your browser, and they do not carry your identity. Clicking through to a streaming provider takes you to that provider’s own site, where their privacy policy applies rather than this one.

Cookies and local storage

We use browser storage for the things the app cannot work without: keeping you signed in (or, if you leave “Remember me” unchecked, only until you close the tab), remembering your region and streaming-service preferences, your watchlist on this device, the offline shell that lets the app start quickly, and your answer to the cookie question.

Analytics uses storage of its own, and only when it is allowed: Google Analytics sets the cookies _ga and _ga_… (kept up to two years) and Firebase Performance Monitoring keeps a random installation identifier. Microsoft Clarity sets the cookies _clck (up to a year) and _clsk (one day). Turning analytics off stops all three and deletes their cookies. In the Android app it also stops crash reports.

How long we keep it

Your account and watchlist are kept for as long as your account exists. Sign-in records are kept for one year. Cached search and recommendation results are server-side, keyed by the query rather than by you, and expire on their own.

Your choices

• You can browse and search without an account. An account is only needed to save things.
• You can change or clear your watchlist at any time from within the app.
• You can delete your account and everything stored against it yourself, immediately, from the Profile screen. See Delete your account for the steps and for exactly what is removed.
• If you can no longer sign in — or you want a copy of your data rather than its deletion — email the address below. We action those requests within 30 days.

Children

The service is not directed at children under 13, and we do not knowingly collect personal information from them. The app can filter results by age rating, but that is a content preference, not an age verification.

Changes

If this policy changes materially we will update the date at the top of this page. Continued use after a change means you accept the updated policy.

Contact

Questions, data access requests and deletion requests: [email protected].