Privacy
Last updated 21 August 2026
Whatzon tracks television shows and emails you when one gets a return date. This page says exactly what it stores to do that, who else sees any of it, how long it is kept, and how to make it go away. It describes what the software actually does — it was written from the database schema, not from a template.
What is collected
Things you give it
| Your email address | Identifies the account and is where alerts are sent. Required — there is no way to use Whatzon without one. |
|---|---|
| Your password | Stored only as a salted scrypt hash. The password itself is never written to the database, and cannot be recovered from what is stored — which is why a forgotten password is reset rather than looked up. |
| The shows you track | Show name, network, return date, your alert lead time, and any notes you add. |
| Your “My Next Watch” list | Things you mean to start watching. |
| Share links you create | The link and what it points at, so it keeps working until you revoke it. |
| Reviews you write | The show, your rating, and what you wrote. A review is public — it appears on the site under your display name, which is the point of writing one, and it is the only thing here that other people can read. Nothing else about you is shown alongside it: not your email address, not the rest of your show list. |
Things it records as you use it
| Your searches | Including the text you type. When you use the description search, the query is stored against your account along with the time, how many results came back, and how confident the match was. This is used to see whether search is working and what it costs to run. |
|---|---|
| Daily AI usage | A running cost total per day, used to enforce the per-account spending cap. |
| Your IP address | Held temporarily, and only to rate-limit failed logins so nobody can guess at passwords. It is not attached to your account record, and the entry clears once the limit expires. |
| A session cookie | One cookie, so you stay signed in. It is not used for tracking or advertising, and it is not shared. |
| Server logs | The web server records requests, which includes IP addresses, in the ordinary way. They are used to operate and secure the service. |
Whatzon does not sell your data, and does not share it with anyone for marketing. The list below is everyone who receives any of it, and why.
Who else sees it
| An AI model | When you search by description, the text of your search is sent to a third-party AI provider to interpret it. Your email address, your account and your list are not sent — only the words you typed. Whatzon uses these providers through their business APIs, where what you send is not used to train their models. Write to the address below if you want to know which provider is in use at any given time. |
|---|---|
| TVmaze | The source of the show catalogue. Whatzon fetches show data from it; nothing about you is sent. |
| The email provider | Receives your address in order to deliver alerts and account emails. |
| Backblaze B2 | Holds encrypted offsite backups of the database. Nobody reads them; they exist so the service can be restored. |
| The hosting provider | Runs the server the application sits on. |
Advertising
Whatzon is free and is expected to carry advertising in order to stay that way. Once ads are running, Google and its partners will use cookies to serve them, and may use your prior visits to this and other sites to choose which ads you see. Google's use of advertising cookies is described in Google's advertising policy, and you can turn off personalised advertising at Google Ads Settings.
If you are in the UK or the EEA you will be asked for consent before any advertising cookie is set, and you can decline or change your answer later. Advertisers are never given your email address, your show list, or anything you searched for.
How long it is kept
| While your account exists | Your shows, lists, reviews, searches and account details are kept until you remove them or close the account. |
|---|---|
| When you delete your account | Deleting your account from the profile screen requires your password and immediately ends access and signs you out everywhere. The underlying records are held briefly rather than erased on the spot, so that an accidental deletion can be undone. Your reviews stop being visible immediately, along with everything else. |
| Permanent erasure | On request, or after a recovery period, the account is purged: every record keyed to it is deleted, including your searches, your show lists and your reviews. This is irreversible. |
| Backups | Backups roll off after 14 days, so a purged account can persist in a backup for up to that long before it is gone from those too. |
| Login rate-limit entries | Cleared automatically when the limit expires. |
What you can ask for
You can ask for a copy of what is stored about you, ask for it to be corrected, or ask for it to be erased permanently, by writing to the address below. You do not need to give a reason. Depending on where you live you may have these rights in law; they are offered here regardless of where you live.
Security
Traffic is encrypted in transit. Passwords are stored only as salted scrypt hashes. Failed logins are rate-limited. Backups are restricted to their owner and stored encrypted offsite. None of this makes a breach impossible; if one occurs and affects you, you will be told.
Children
Whatzon is not directed at children under 13 and does not knowingly collect their information. If you believe a child has created an account, write to the address below and it will be removed.
Changes
If this policy changes in a way that affects what is collected or who receives it, the date at the top will change and the change will be announced in the app. This page is kept in the same version control as the software, so its history is a record rather than a claim.