Privacy Policy

Scope

This Privacy Policy describes the information that Subscription Guru ("Subscription Guru", "we", "us") collects when you use the application, the purposes for which that information is processed, and the choices available to you. Subscription Guru collects only the information required to operate the service. It does not display advertising, does not use analytics or tracking services, and does not sell personal information.

Information we collect

Account information. You authenticate using a Google or Microsoft account. Subscription Guru records the email address and display name associated with that account and, where the provider supplies one, an avatar image URL. Passwords are neither received nor stored. The account identifier assigned by the authentication provider is stored only as a keyed cryptographic hash; the raw identifier is not retained.

Content you provide. Your watchlists and the titles they contain, watched and episode progress, list sharing and membership records, subscription-plan settings, and preferences including language and region.

Invitations. Where you invite another person to a shared list by email address, Subscription Guru stores only a keyed hash of that address, used to match the invitation when the recipient signs in, together with a masked display form such as j…@e….com. The raw address is not retained.

Technical data. Encrypted session cookies used to maintain your signed-in state, and standard web-server logs recording IP address, request path and timestamp, retained for security and troubleshooting purposes.

How we use information

Information is processed solely in order to operate the service: to authenticate you, to display your watchlists, to generate subscription plans and calendar exports, to enable list sharing, and to maintain the security of the service. Personal information is not used for advertising, is not used to construct profiles for third parties, and is not sold or rented to any party.

Google user data

Where you authenticate with Google, Subscription Guru requests only the basic profile scopes (openid, email, profile) and, where you select "Keep me signed in", a refresh token. That token is held within your encrypted session cookie and permits a session duration of up to 30 days. Subscription Guru does not access Gmail, Drive, Calendar, contacts or any other Google content.

Subscription Guru's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You may review or revoke Subscription Guru's access at any time from your Google Account connections page.

Microsoft user data

Where you authenticate with Microsoft, Subscription Guru requests only the basic profile scopes (openid, email, profile) from the Microsoft identity platform and, where you select "Keep me signed in", the offline_access scope. The resulting refresh token is held within your encrypted session cookie and permits a session duration of up to 30 days. Subscription Guru reads your email address and display name from the sign-in token and nothing further, and does not access Outlook mail, calendar, contacts, OneDrive or any other Microsoft 365 content. Subscription Guru's use of Microsoft APIs adheres to the Microsoft APIs Terms of Use. You may review or revoke Subscription Guru's access from your Microsoft account app permissions (personal accounts) or your organization's My Apps portal (work or school accounts).

Cookies

Subscription Guru sets essential cookies only: an encrypted session cookie that maintains your signed-in state, valid for up to 24 hours by default or up to 30 days where you select "Keep me signed in", and short-lived cookies used during the authentication handshake. No advertising, analytics or cross-site tracking cookies are set.

Disclosure and third parties

Title, artwork and streaming-availability information is obtained from The Movie Database (TMDB) and TheTVDB. Requests made to those catalogues concern films and television programmes only; no personal information is transmitted to them. Your data is held on infrastructure operated by Subscription Guru. Personal information is disclosed to third parties only where disclosure is required by law.

Retention and deletion

Account data is retained for as long as the account exists. Sessions expire automatically. To request deletion of your account and all data associated with it, contact [email protected] from the email address used to sign in, and the account and its data will be removed. You may also revoke Subscription Guru's access at any time through your Google or Microsoft account security settings.

Security

All traffic is served over HTTPS. Session cookies are encrypted, and identifiers capable of linking you across services, namely authentication-provider account identifiers and invitation email addresses, are stored as keyed hashes rather than as raw values. No internet service can guarantee absolute security. Subscription Guru's approach is to collect the minimum information necessary and to protect the information it holds.

Children

Subscription Guru is not directed at children under 13 years of age, or under the equivalent minimum age in your jurisdiction, and does not knowingly collect their personal information.

Changes to this Policy

Subscription Guru may amend this Policy from time to time. Where it is amended, the effective date shown above will be updated, and the current version will be available at this address. Continued use of the service following an amendment constitutes acceptance of the amended Policy.

Contact

Questions regarding this Policy, and requests concerning your information, may be directed to [email protected].