← Spectoo

Privacy Policy

Version 1.0 · Effective 15 July 2026

This policy explains what personal data Spectoo collects, why, and what your rights are. It applies to the website at spectoo.app and the Spectoo mobile applications (the “Service”). We process personal data under the UK GDPR and, where it applies, the EU GDPR.

1. Who is responsible

An individual trading as “Spectoo” (the “Operator”, “we”, “us”), based in the United Kingdom, is the data controller for the Service. Contact for anything in this policy: [email protected].

2. Data we collect

  • Account data — email address, username, display name, avatar, bio, and language preference.
  • Watch activity — what you log as watched (including platform, device, and timestamp where you provide them), your ratings, collections, and watchlists.
  • Content you post — comments, reviews, and any images or GIFs you upload.
  • Social data — who you follow and who follows you.
  • Waitlist data — if you join the pre-launch waiting list, your email address (and an optional note). We use it only to notify you when Spectoo launches.
  • TV Time imports — if you upload a TV Time export, we process its contents to populate your account, then delete the uploaded file.
  • Technical data — server logs and telemetry (via OpenTelemetry) used to keep the Service running and secure. We do not use third-party product-analytics or advertising trackers.

3. Why we use it (lawful bases)

  • To provide the Service (performance of a contract): accounts, tracking, social features, imports, and exports.
  • To keep the Service secure and working (legitimate interests): logs, telemetry, abuse prevention, moderation.
  • To email the waitlist about launch (consent): you can withdraw at any time by contacting [email protected].

4. What is public

Spectoo is a social platform and profiles are public by default. Your profile (username, name, avatar, bio), your comments and reviews, media you upload with comments, your lists, ratings, watch activity shown on your profile, and your follow relationships are visible to anyone unless you enable the private-profile setting. Uploaded comment media is stored in a publicly accessible storage bucket — treat anything you attach to a comment as public. Think before you post.

5. Who processes your data

We use a small number of service providers (processors):

  • Supabase — database, authentication, and file storage, hosted in the EU (AWS eu-central-1, Frankfurt, Germany).
  • Vercel — web hosting and telemetry collection.
  • GIPHY — when you search for GIFs, your search query is sent to GIPHY to return results.

Where these providers store data outside the UK/EEA, transfers are protected by appropriate safeguards (the UK International Data Transfer Agreement/Addendum or EU Standard Contractual Clauses, as applicable).

6. How long we keep it

  • Account data and content — until you delete your account (or the specific content).
  • Waitlist emails — until we have notified you of launch, then deleted.
  • TV Time import files — deleted once the import completes.
  • Logs and telemetry — kept for a short rolling window for security and debugging, then discarded.

7. Your rights

Under the UK/EU GDPR you can: access your data; correct it; delete it (you can delete your account in-app); export it (the built-in export tool covers portability); object to or restrict certain processing; and withdraw consent where processing is based on consent. Contact [email protected] to exercise any right. You also have the right to complain to the UK Information Commissioner’s Office (ico.org.uk) or your local supervisory authority.

8. Children

The Service is not intended for children under 13, and we do not knowingly collect their data. If you believe a child under 13 has an account, contact [email protected] and we will delete it.

9. Cookies

We only set cookies that are strictly necessary to sign you in and keep your session secure (Supabase authentication cookies). We do not use advertising or analytics cookies, which is why there is no cookie consent banner. If this ever changes, this policy and the site will be updated first.

10. Changes and contact

We may update this policy as the Service evolves; the effective date above always reflects the current version, and material changes will be announced through the Service. Questions, requests, complaints: [email protected].

This policy is drafted in English. If it is translated, the English version prevails.