Privacy Policy

1. Data controller

The data controller is ByUs, the publisher of Screen. For any question about your personal data, you can contact us at [email protected].

2. Data we collect

We only collect the data needed for the service to work:

• Account: email address, name, username, password (stored encrypted), profile picture (optional), language and display preferences.
• Sign-in with Google or Apple (optional): the identifier provided by the provider and the associated email address.
• Your activity: episodes and movies marked as watched, ratings, reviews, comments, lists, diary, watchlist, people and accounts you follow.
• Import (optional): the archives you import from TV Time, Letterboxd or IMDb, in order to rebuild your history.
• Technical data: IP address, connection details and server logs, your device notification token (if you enable notifications).

3. Purposes and legal bases

• Provide and run the service, manage your account — basis: performance of the contract.
• Send you notifications (new releases, friends' activity) — basis: your consent, which you can withdraw at any time.
• Ensure security, prevent fraud and abuse — basis: legitimate interest.
• Measure usage and improve the app — basis: legitimate interest.

4. Data sharing and processors

We never sell your data. We use technical providers (processors) strictly to deliver the service:

• TMDB — source of movie and TV metadata. The catalog is always fetched by our server: your personal data is not sent to TMDB.
• Google and Apple — only if you choose to sign in through their service.
• Firebase Cloud Messaging (Google) — delivery of push notifications (device token), if you enable them.
• DeepL — translation of a review or comment, only when you explicitly request it (the relevant text is then sent to DeepL).
• Hosting — our servers are hosted in the European Union (Scaleway).
• Email delivery provider — for transactional emails (verification, password reset).

5. Transfers outside the European Union

Some providers (e.g. Google, Apple, DeepL) may process data outside the European Union. Such transfers are governed by appropriate safeguards, such as the European Commission's Standard Contractual Clauses.

6. Data retention

Your data is kept for as long as your account is active. When you delete your account, your personal data is erased. Some technical logs and backups may be retained for a limited period for security purposes and to comply with our legal obligations.

7. Your rights

Under the GDPR, you have the following rights:

• Access and rectification of your data.
• Erasure: you can delete your account and data directly in the app (Settings → Delete account).
• Portability: you can export your data from the app (Settings → Export my data).
• Objection and restriction of processing, and withdrawal of your consent at any time.

To exercise these rights, contact us at [email protected]. You may also lodge a complaint with your local data protection authority (in France, the CNIL — www.cnil.fr).

8. Security

We implement appropriate technical and organizational measures to protect your data: encrypted passwords, secure connections (HTTPS) and restricted access to data.

9. Children

The service is not intended for children under 13. We do not knowingly collect data about anyone under 13.

10. Cookies and local storage

We only use the cookies and local storage needed for the service to work (login session, preferences). We do not use advertising cookies or third-party tracking.

11. Changes

We may update this policy. In case of a significant change, we will inform you in the app. The last-updated date appears at the top of this page.

12. Contact

For any question about this policy or your personal data: [email protected].