Privacy policy

Personal data ("data") is processed by us only to the extent necessary and for the purpose of providing a functional and user-friendly website, including its content and the services offered there.

Under Art. 4(1) of Regulation (EU) 2016/679, the General Data Protection Regulation ("GDPR"), "processing" means any operation performed on personal data, with or without automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction.

The controller responsible for this website within the meaning of data protection law is:
Marcel Strahl
Am End 9A
41189 Mönchengladbach
Germany
Email: [email protected]

With regard to the data processing described below, users and data subjects have the right

• to confirmation of whether data concerning them is being processed, to information about the data processed, to further information about the data processing, and to copies of the data (see also Art. 15 GDPR);
• to rectification or completion of incorrect or incomplete data (see also Art. 16 GDPR);
• to the immediate erasure of data concerning them (see also Art. 17 GDPR), or, alternatively, if further processing is required under Art. 17(3) GDPR, to restriction of processing under Art. 18 GDPR;
• to receive the data concerning them that they have provided, and to have this data transferred to other providers/controllers (see also Art. 20 GDPR);
• to lodge a complaint with the supervisory authority if they believe that data concerning them is being processed by us in violation of data protection law (see also Art. 77 GDPR).

In addition, we are obliged to inform all recipients to whom data has been disclosed of any rectification or erasure of data or restriction of processing carried out under Art. 16, 17(1), 18 GDPR. However, this obligation does not apply if such notification proves impossible or involves disproportionate effort. Without prejudice to this, users have the right to be informed of these recipients.

Users and data subjects also have the right under Art. 21 GDPR to object at any time to the future processing of data concerning them, where such processing is based on Art. 6(1)(f) GDPR. In particular, an objection to processing for direct marketing purposes is permissible.

Data processed when you use our website is deleted or blocked as soon as the purpose of storage no longer applies, no statutory retention obligations preclude erasure, and no differing information is provided below for individual processing operations.

For registration, we process your name, email address, and a hashed password. The data is deleted when you delete your account. Legal basis: Art. 6(1)(b) GDPR.

Marked titles, ratings, watched episodes, and selected streaming services are stored with your account to provide core product features. Legal basis: Art. 6(1)(b) GDPR.

We fetch metadata and availability server-side from TMDB and JustWatch. No personal data about you is sent to these providers.

If you follow other users or share a watchlist, released content becomes visible to those people.

a) Session cookies
We use so-called cookies on our website. Cookies are small text files or other storage technologies that are placed and stored on your device by the browser you use. These cookies process certain information about you, such as browser or location data or your IP address, to a limited extent.

This processing makes our website more user-friendly, effective, and secure, for example by enabling sign-in and maintaining your watchlist.

The legal basis for this processing is Art. 6(1)(b) GDPR where these cookies process data for the initiation or performance of a contract. Where processing does not serve that purpose, our legitimate interest lies in improving the functionality of our website; the legal basis is then Art. 6(1)(f) GDPR.

b) How to remove cookies
You can prevent or restrict the installation of cookies through your browser settings. You can also delete cookies that have already been stored at any time. Preventing or restricting cookies may mean that not all functions of our website can be used to their full extent.

c) Cookies set and used on this website

Cookie name	Description	Set when
viewora_session	Associates your session with your signed-in account.	always, as it is necessary.
XSRF-TOKEN	Protects forms and actions against cross-site request forgery.	always, as it is necessary.

We use Matomo on our website. This is self-hosted open-source software that lets us analyze how our website is used. It processes the page(s) of our website visited, the time spent, and the frequency of visits.

Unlike a standard installation, our Matomo instance sets no cookies on your device and honors your browser’s Do-Not-Track setting. For signed-in users we use an irreversibly hashed user ID to attribute events; this does not allow us to identify you.

Legal basis is our legitimate interest in analyzing and optimizing our website, Art. 6(1)(f) GDPR.

To secure our website and optimize load times, we use the Cloudflare service as a so-called CDN (Content Delivery Network). This is a service provided by Cloudflare, Inc., 101 Townsend Street, San Francisco, California 94107, USA, hereinafter referred to as "Cloudflare".

Legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure operation of our website and its optimization.

When you access our website, your requests are routed through Cloudflare's servers. Statistical access data about the visit to our website is collected in this process, and Cloudflare may store a cookie on your device via your browser. This access data includes

• your IP address,
• the page(s) of our website you accessed,
• the type and version of the browser you use,
• the operating system you use,
• the website from which you accessed our website (referrer URL),
• the time you spent on our website, and
• the frequency with which you access our pages.

The data is used by Cloudflare for statistical analysis of visits and for the security and optimization of the service.

If you do not agree with this processing, you can prevent the installation of any cookies through the appropriate settings in your browser. See the "Cookies" section above for details.

Cloudflare provides further information on the collection and use of data as well as your rights and options for protecting your privacy at https://www.cloudflare.com/privacypolicy/.

If you contact us via the contact form or by email, the data you provide will be used to process your request. Providing this data is necessary to process and answer your request — without it, we may not be able to answer your request, or only to a limited extent.

Legal basis for this processing is Art. 6(1)(b) GDPR.

Your data will be deleted once your request has been fully answered and no statutory retention obligations preclude erasure.

For technical reasons, in particular to ensure a secure and stable website, data is transmitted by your browser to us or our web space provider. These so-called server log files include the type and version of your browser, your operating system, the site from which you accessed our website (referrer URL), the page(s) of our website you visit, the date and time of access, and the IP address of the internet connection used.

This data is stored temporarily, but not together with other data about you. The legal basis for this storage is Art. 6(1)(f) GDPR. Our legitimate interest lies in improving the stability, functionality, and security of our website.

The data is deleted after no more than seven days, unless further retention is required for evidentiary purposes, in which case the data is exempted from deletion, in whole or in part, until the incident has been finally clarified.