Privacy Policy

1. Who is responsible

Rewatch (rewatch.cc) decides how your personal data is used and is the “data controller” for it. You can reach us at [email protected] about anything on this page.

2. What we collect

Your account. Your username, email address and a password, which we keep only as a salted Argon2id hash (we cannot read it). We also record that you accepted the Terms, when, and which version.

What you add. Your profile (display name, bio, pronouns, location, website, avatar, banner, favourites), and everything you do on the site: ratings, likes, what you have watched or listened to and how far, your diary and backlog, reviews, comments, lists, who you follow, block or mute, reports you file, and your notification settings.

Technical data. For each device you sign in on we keep a session record with its IP address and browser (so you can see and end your sessions, and so we can spot misuse). A security log records sign-ups, sign-ins, password and email changes and similar events with the IP address. Counters of failed sign-ins by address and username slow down password guessing. Our servers keep ordinary short-lived request logs.

We do not ask for your real name, date of birth, phone number or contacts. We do not use advertising or analytics trackers.

3. Why we use it

• To provide Rewatch to you: your account, your tracking, your profile and the social features you use (this is the contract between us).
• To keep the site and its people safe: preventing abuse, handling reports and enforcing the rules (our legitimate interest, and sometimes a legal duty).
• To email you about things you asked for or need to know: verifying your address, resetting a password, security notices, and decisions about your account or content. We do not send marketing email.
• To meet legal obligations and answer lawful requests.

4. Who can see what

You choose who sees your profile, diary, ratings, backlog and other sections: everyone, your followers, or only you; a private account hides everything from people who do not follow you. Your email address, password, IP address and sessions are never shown to other members. Moderators can see reported content and account records when they decide a report.

What you make public is public: it can be seen by people who are not signed in and may be found by search engines.

5. Who we share it with

We do not sell your data. We use a few providers to run the service, and they handle data only on our instructions:

• Hosting. Our servers, database and file storage run on a hosting platform (Portways) that also makes daily backups.
• Cloudflare provides our network protection and delivery, so it sees the traffic to the site.
• Zoho Mail delivers the emails we send.
• TMDB, AniList and MusicBrainz supply information about films, series, anime and music. When you search for a title that we do not have, we ask them for it; we send the title or id, not who you are.

We may disclose data if the law requires it, or to protect people from harm. If Rewatch is ever sold or merged we will tell you first and these promises will go with the data.

6. Cookies

We use one cookie that keeps you signed in, and your browser remembers your light or dark preference. Nothing else. See the Cookies page.

7. How long we keep it

• Your account and what you added stay until you delete your account. Deleting is immediate for you (the account is hidden) and permanent after 30 days, when your profile, tracking, reviews, lists, comments, sessions and security history are erased.
• Deleting a review or comment erases its text at once. Sessions end after 30 days without use, or 180 days in all.
• Records of moderation decisions and the reports behind them are kept after an account is deleted, so that we can show that the rules are applied fairly.
• Backups are overwritten on a rolling basis (currently within about two weeks), so erased data can survive in a backup until then, and is not restored.

8. Your rights

Wherever you live, you can ask us what we hold about you, have it corrected or deleted, ask us to limit or stop using it, take it with you, and withdraw consent you gave. You can edit your profile and settings and delete your account yourself in Settings. For a copy of your data, or anything else, write to [email protected]; we will answer within 30 days. If you think we have handled your data wrongly you can complain to the data protection authority where you live.

9. Where your data goes

Our providers may store and process data in other countries than yours. Where the law requires safeguards for that, we rely on them.

10. Children

Rewatch is for people aged 16 and over. We do not knowingly collect data from anyone younger, and will close an account and delete its data if we learn that it belongs to someone who is.

11. Security

The site is served over HTTPS only, passwords are stored as Argon2id hashes, sessions are opaque tokens stored hashed, and access to the data is limited to what running the service needs. No system is perfectly secure; if a breach affects you we will tell you and the authorities as the law requires.

12. Changes

If we change this policy in a way that matters, we will tell you by email or on the site before it applies. The date at the top says when it last changed.