Privacy
Last updated 2026-10-25
Seasonly is a small, independent service for keeping track of the TV shows you watch. It's run by Cosmin Stejerean, who is the data controller. Questions or requests: privacy@seasonly.tv.
The short version: we keep what's needed to run your account and nothing else. No ads, no analytics or tracking scripts, no selling or sharing your data.
What we keep
- Your email address, to sign you in and to send sign-in codes and important account notices.
- Your shows and watch history: what you follow and which episodes you've marked watched, and when.
- How you sign in: your passkeys' public keys (never anything that could sign in as you), and, if you connect Google or Apple, the account identifier and email address they give us.
- API tokens you create (stored only as hashes), and when they were last used.
- Security records: sign-in code records (deleted after 7 days), when you were last active, and server logs (IP addresses, pages requested, and email addresses in error reports), kept up to 30 days to keep the service working and to stop abuse.
If someone invites you, we keep your email address (and any note the inviter added) so the invite works, and email you the invite. Unused invites are deleted 180 days after they expire.
Why (legal bases)
To provide the service you signed up for (contract), and to keep it secure and free of abuse (legitimate interests). We don't use your data for anything else.
Cookies
Only the ones needed to work: one that keeps you signed in, and short-lived ones during sign-in and when you accept an invite. No advertising or analytics cookies, so there's no cookie banner.
Who else handles it
Service providers that process data on our behalf, only to run Seasonly:
- Fly.io: hosting (servers in the United States).
- Amazon Web Services: sending email (Amazon SES) and storing encrypted backups, in the United States.
- Google or Apple, only if you choose to sign in with them.
Show and episode information comes from TVmaze; we never send them anything about you. Your data is stored in the United States. Where data protection law requires, transfers rely on the providers' data processing terms and standard contractual clauses.
How long
Your account data stays until you delete your account. Other things are deleted automatically:
- sign-in code records after 7 days, and expired sessions and sign-in attempts right away;
- expired API tokens 30 days after they expire;
- used, revoked or expired invites after 180 days;
- server logs within 30 days.
When you delete your account, it and everything tied to it (including the invite you accepted) is removed immediately; backups age out within 30 days.
Your rights
You can see, download, correct and delete your data, and object to or restrict how it's used. Most of this is self-service under Account; to correct something (like changing your email address), email us:
- Download your data as JSON (access and portability).
- Delete your account (erasure).
For anything else, email privacy@seasonly.tv; we'll answer within a month. If you're in the EU/EEA or UK, you can also complain to your data protection authority.
Children
Seasonly isn't meant for children under 16.
Changes
If we change this policy in a way that matters, we'll say so on this page and, for significant changes, email you first.