What we hold, and why

Who holds it

watchlogg is run by Oleksandr Zemlianoi, a sole proprietor (ФОП) registered in Ukraine, who is the data controller for everything described here. Reach us at hello@watchlogg.com, and we will answer any request below within a month. Everything is stored in the European Union — our database and servers run in the Netherlands, and the analytics service named below is on its EU installation.

What the browser extension sends

The extension runs on the sites you approve, one at a time, and on no others. It ships with permission for no video site at all; each one is a choice you make in its popup and can withdraw in the same place. On a site you have approved, when something plays, it sends us:

• The address of the page. How we tell one show apart from another on a site, and what makes "you have answered this once already" possible.
• What the page says is playing — its title, and the season and episode if the page or the address carries them. Read from the page's own text and video element, nothing more.
• How far through it you are, and whether it is playing or paused, so a part-watched episode comes back where you left it.
• Your account token, so we know whose diary to write to. It is issued by us, to you, and is only ever sent to us.

That is the whole payload. The extension contains no analytics and no third-party code: every request it makes goes to api.watchlogg.com. It does not read pages on sites you have not approved, does not collect what you type, click or search for, and does not follow you around the web.

What the account holds

• Who you are: username, email address, and a phone number if you added one. If you signed in with Google we keep the link to that account, never its password.
• What you watched: titles, episodes, dates and times, plus anything you rated, reviewed, tagged, hid or put on your watchlist.
• How you signed in: for each active session, the device type, operating system, browser and IP address, so you can see and end sessions you do not recognise.
• Your settings, including who may see your profile. New accounts are private: nothing is visible to anyone else until you change that yourself.

What we never do

We do not sell your data, share it with advertisers, or use it to build a profile for anybody else. There is no advertising on watchlogg and no plan for any. Nothing you watch is shown to another person unless you make your profile public or share something yourself.

Who else is involved

• TMDB and TheTVDB supply the catalogue — titles, posters, episode lists. We ask them about films and shows; we never tell them who asked. Posters load directly from TMDB's image servers, so your browser contacts them the way it would any image host.
• Brevo sends our email — sign-in links, verification, and anything you have asked to be told about. It receives your email address and nothing else.
• PostHog (EU) tells us which screens of the web app get used and where they break. It runs in the app only — never in the extension, and not on this site, which carries no analytics at all.
• Railway hosts the servers and the database, in the Netherlands.

Cookies

Two, and neither is for advertising. One keeps you signed in. The other is a bare marker saying somebody is signed in, so a page can draw the right buttons before it has asked the server anything — it carries no name, no address and no way to act as you.

How long we keep it

Your diary is kept for as long as your account exists, because a viewing history that quietly expires is not a diary. Sessions expire on their own. Delete your account and everything above goes with it, permanently and without a waiting period — there is no shadow copy to restore, so export first if you want one.

Your rights

Under the GDPR you can see, correct, export, restrict or delete what we hold, and object to our holding it. Two of those do not need to involve us at all — in Settings you can download everything in one file, or delete the account outright. For the rest, or to complain, write to hello@watchlogg.com. You may also complain to your national data protection authority.

We hold this data to provide the diary you asked for — that is the contract between us — and, for keeping the service secure and working, our legitimate interest in it not falling over or being broken into.

Children

watchlogg is not for children under 13, and we do not knowingly hold their data. If you believe we do, write to us and it will be removed.

Changes

If what we collect changes, this page changes with it and the date at the top moves. A change that widens what the extension sends will also ask your permission again in the browser, because that is how browser permissions work — you will not learn about it only from a page you had no reason to revisit.