1. Introduction
Welcome to TV Lista ("we," "our," or "us"). We respect your privacy and are committed to protecting your personal data. This privacy policy will inform you about how we look after your personal data when you visit our website and use our Progressive Web App (PWA), and tell you about your privacy rights and how the law protects you.
2. Information We Collect
2.1 Information You Provide
- Google Account Information: When you sign in with Google, we collect your name, email address, and profile picture.
- Favorite Channels: The TV channels you mark as favorites.
- Alert Preferences: TV show alerts you set up, including programme titles, channels, and notification preferences.
2.2 Information We Collect Automatically
- Usage Data: Pages visited, time spent, features used (via Fathom Analytics - privacy-focused, GDPR compliant).
- Device Information: Browser type, device type, operating system.
- Push Notification Subscriptions: Your browser's push notification endpoint (required for alerts).
- Local Storage: Favorites and preferences stored locally in your browser.
3. How We Use Your Information
We use your information to:
- Provide and personalize our TV guide service
- Save your favorite channels across devices (when signed in)
- Send push notifications for TV show alerts you've requested
- Improve our service through privacy-focused analytics
- Ensure the security and proper functioning of our service
- Comply with legal obligations
4. Legal Basis for Processing (GDPR)
We process your personal data under the following legal bases:
- Consent: Google sign-in, push notifications, cookies
- Contractual Necessity: Providing the TV guide service
- Legitimate Interests: Service improvement, security, analytics
5. Data Sharing and Third Parties
We share your data only with:
- Google: For authentication (Google OAuth)
- Fathom Analytics: Privacy-focused analytics (no personal data shared)
- Microsoft Azure: Cloud hosting and data storage (GDPR compliant)
- Push Notification Services: Browser vendors (Google, Apple, Mozilla) for delivering alerts
We do NOT sell your data to third parties or use it for advertising.
6. Data Storage and Security
- Storage Location: Microsoft Azure (Europe region for EU users)
- Encryption: Data encrypted in transit (HTTPS) and at rest
- Access Controls: Strict access controls and authentication
- Retention: We keep your data while your account is active, plus 90 days after deletion
7. Your Rights (GDPR & CCPA)
You have the right to:
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate data
- Erasure: Request deletion of your data ("right to be forgotten")
- Data Portability: Receive your data in a machine-readable format
- Withdraw Consent: Opt out of notifications, delete account
- Object to Processing: Object to certain uses of your data
To exercise these rights, sign out and delete your account, or contact us at [email protected]
8. Cookies and Local Storage
We use:
- Essential Cookies: Authentication session (required for service)
- Local Storage: Favorites, preferences (stored in your browser)
- Analytics Cookies: Fathom Analytics (privacy-focused, no tracking)
You can clear local storage and cookies through your browser settings.
9. Children's Privacy
TV Lista is not directed at children under 13 (or 16 in the EU). We do not knowingly collect data from children. If you believe we have collected data from a child, please contact us immediately.
10. International Data Transfers
Your data may be transferred to and processed in countries outside your country of residence. We ensure appropriate safeguards are in place (e.g., Standard Contractual Clauses) to protect your data in compliance with GDPR.
11. Changes to This Policy
We may update this privacy policy from time to time. We will notify you of significant changes by posting a notice on our website or sending you an email. Continued use of the service after changes constitutes acceptance.
12. Contact Us
For privacy-related questions or requests, contact us at:
13. Supervisory Authority
If you are in the EU/EEA, you have the right to lodge a complaint with your local data protection authority if you believe we have not complied with data protection laws.