Privacy Policy

When you create an account, we store:

• Email and password (password is hashed, we never see or store it in plain text)
• Display name (optional)
• Profile picture URL (if you sign in with Google)

If you sign in with Google, we receive your email and profile info from Google's OAuth service.

You can use tvcal without creating a full account. Guest accounts let you try the app quickly. We still create a guest session and store session security data (such as IP address and user agent). If you later create a real account, your watchlist transfers over.

We store which shows you add to your watchlist and when you added them. This is the core of what makes tvcal useful.

We use strictly necessary cookies to keep you logged in. These session cookies are essential for the app to function and are not used for tracking or advertising.

For account and guest sessions, we also collect your IP address and browser/device info (user agent) on our server. This helps us detect unauthorized access and maintain session security.

We use Umami, a privacy-focused analytics tool. Unlike Google Analytics, Umami:

• Doesn't use cookies for tracking
• Doesn't track you across websites
• Anonymizes your data

We track basic usage events like adding shows to your watchlist and signing up. This helps us understand how people use tvcal so we can improve it.

We may add additional analytics tools in the future to better understand how the app is used. We genuinely care about your privacy and will always choose privacy-respecting options over invasive tracking.

We store a few preferences in your browser:

• Theme preference (dark/light mode)
• Feature flags for beta or experimental features
• Watch provider region preference
• Signup popup dismissal preference

Most of this data stays in your browser. Some preferences (for example your selected watch provider region) are used to personalize requests you make in the app.

We fetch show information from TMDB (The Movie Database) and TVMaze to power the calendar. We only send show IDs to these services—never your personal information.

If you choose to sign in with Google, we receive the following information from Google's OAuth service:

• Your email address
• Your name
• Your profile photo URL

We use this information solely to create and identify your tvcal account. This allows you to sign in without creating a separate password.

Limited Use Disclosure: tvcal's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We only use Google user data to provide and improve the user-facing features of tvcal (account creation and sign-in)
• We do not transfer Google user data to third parties, except as necessary to provide the service, comply with applicable law, or as part of a merger/acquisition with user consent
• We do not use Google user data for advertising, retargeting, surveillance, credit assessment, or any purpose unrelated to the core functionality of tvcal
• We do not sell Google user data to any third party
• Human access to Google user data is limited to investigating support issues at your request, security purposes, or legal compliance

If we ever need to use your Google data for a new purpose beyond what's described here, we will notify you and obtain your consent first.

tvcal is hosted on Railway. Your data is stored in a SQLite database on their infrastructure. Railway maintains appropriate security measures for hosted applications.

Your data may be transferred to and processed in the United States. By using tvcal, you consent to this transfer. We ensure appropriate safeguards are in place to protect your data in accordance with this privacy policy.