Privacy Policy

This privacy policy applies to crappy-tv ("we", "us"), the community site for verdicts on ended TV shows.

1. Controller

The controller for data processing is the operator named in the Imprint.

2. What data we process

• Account: email address, display name, preferred language and the password-protected account itself — provided at registration.
• Content: comments, state proposals, ratings, "watched" marks and flags you submit.
• Anti-abuse: IP addresses are never stored in plaintext — they are hashed with a daily-rotating salt and truncated to the relevant subnet prefix. Full, natural IP addresses are never persisted.
• Logs: an append-only audit log of registered-user interactions (requirement 10 of the project plan), likewise with hashed/truncated IPs.

3. Purposes and legal bases

Processing serves the operation of the site (Art. 6(1)(b) GDPR — contract), abuse and spam prevention (Art. 6(1)(f) GDPR — legitimate interest in the integrity of the service) and statutory retention or disclosure duties (lit. c).

4. Cookies

We only use strictly necessary cookies — details on the Cookie Notice page. We do not use tracking or advertising cookies.

5. Retention

Audit log entries are minimised in stages: full detail for 90 days, then IP fields are stripped, and entries are deleted after 12 months (Task 41).

6. Your rights

You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), data portability (Art. 20) and objection (Art. 21). Access and deletion are available as self-service tools in your account (Task 40). Contact the address given in the Imprint to exercise your rights; you may also lodge a complaint with a supervisory authority.

7. Third-party processing

For operations we use a hosting provider and an email delivery service (production target: Amazon SES via SMTP); both operate under data processing agreements (Art. 28). Catalog data comes from OMDb/IMDb and TVMaze — see the attributions on the show pages.

8. Analytics

We measure usage with Umami, self-hosted on our own servers. The measurement is cookieless: no cookies are set, no IP addresses are stored, and nothing is shared with third parties — the statistics are aggregate-only (page views, referrers, counts). Because no personal data is involved, we do not ask for consent for this measurement.

Registered users can optionally enable detailed analytics on their profile. When enabled, their events carry a pseudonymous identifier — a random-looking code derived on our server from the account. It contains no personal data and cannot be linked back to the account from the statistics alone. The preference can be withdrawn at any time on the profile page.