Privacy Policy

1. Introduction and Scope

Where to Watch ("we", "our", or "us") operates the free, non-commercial website wheretowatch.stream (the "Service"). We provide a free movie and TV show discovery platform for users 18 years and older, featuring content information including mature ratings and descriptions.

This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our free Service. By using our Service, you consent to the collection and use of information in accordance with this policy.

Age Requirement: Our Service is intended for users 18 years and older due to mature content ratings and descriptions. By using our Service, you confirm you are at least 18 years old.

Controller Information: For the purposes of data protection law, Where to Watch is the data controller of your personal information.

2. Information We Collect

2.1 Personal Information

We may collect the following personal information:

• Contact information (email address, name) when voluntarily provided
• Account information if you create an account
• Communication data when you contact us
• Survey responses and feedback

2.2 Usage and Technical Data

• Search queries and interaction data
• Pages visited, time spent, and click patterns
• Referral sources and exit pages
• Session duration and frequency of visits
• Device information (type, OS, browser, screen resolution)
• Network information (IP address, ISP, approximate location)
• Performance metrics and error logs

2.3 Cookies and Tracking Technologies

We use various tracking technologies including:

• Essential Cookies: Required for basic site functionality
• Analytics Cookies: Help us understand site usage and performance
• Preference Cookies: Remember your settings and preferences
• Web Beacons: Small graphics for tracking email opens and clicks
• Local Storage: Browser storage for improved user experience

2.4 Information from Third Parties

We may receive information from third-party services like analytics providers, advertising networks, or social media platforms when you interact with our content on those platforms.

3. Legal Basis for Processing (GDPR)

We process your data based on the following legal grounds:

• Consent: When you provide explicit consent for specific purposes
• Legitimate Interests: For analytics, security, and service improvement
• Contractual Necessity: To provide services you request
• Legal Obligation: To comply with applicable laws and regulations

4. How We Use Your Information

We use collected information for:

4.1 Free Service Operations

• Providing and maintaining our free movie/TV discovery platform
• Processing search queries and delivering content information
• Displaying movie ratings, descriptions, and streaming availability
• Remembering your preferences and settings for better experience
• Ensuring content is appropriate for our 18+ user base

4.2 Analytics and Performance

• Analyzing usage patterns and trends
• Monitoring site performance and uptime
• Identifying and fixing technical issues
• Optimizing user experience and interface design

4.3 Security and Compliance

• Detecting and preventing fraud, abuse, and security threats
• Enforcing our terms of service and policies
• Complying with legal obligations and law enforcement requests
• Protecting intellectual property rights

4.4 Communications

• Responding to your inquiries and support requests
• Sending service updates and important notices
• Providing technical support and troubleshooting

5. Information Sharing and Disclosure

5.1 Third-Party Service Providers

We may share information with trusted third parties who assist us in:

• Hosting and Infrastructure: Vercel, Cloudflare for site delivery and security
• Analytics: Google Analytics, other analytics providers for usage insights
• Content Data: TMDB API for movie and TV show information
• Email Services: For transactional emails and communications
• Security Services: For fraud detection and abuse prevention
• Affiliate Networks: VPN affiliate programs (we do not share personal data with these partners)

5.2 Legal Disclosures

We may disclose your information when required by law or to:

• Comply with legal process, court orders, or government requests
• Protect our rights, property, or safety, or that of our users
• Enforce our terms of service and policies
• Prevent fraud, abuse, or illegal activities

5.3 Business Transfers

In the event of a merger, acquisition, bankruptcy, or sale of assets, your information may be transferred to the new entity, subject to this privacy policy.

5.4 We Don't Sell Your Data

We don't sell, rent, or trade your personal information.Even though we might earn from VPN affiliate links, we don't share your data with anyone. Simple as that.

6. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws than your country.

When we transfer your data internationally, we implement appropriate safeguards such as:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions by relevant data protection authorities
• Certification schemes and codes of conduct
• Technical and organizational security measures

7. Data Retention

We retain your information for different periods based on:

• Personal Data: As long as you use our Service or as required by law
• Usage Data: Up to 26 months for analytics purposes
• Log Data: Up to 12 months for security and troubleshooting
• Cookies: As specified in our cookie preferences (typically 30 days to 2 years)
• Legal Holds: Extended retention when required for legal proceedings

After the retention period, we securely delete or anonymize your information unless longer retention is required by law.

8. Your Privacy Rights

8.1 Rights Under GDPR (EU/UK Users)

• Right of Access: Request copies of your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your data ("right to be forgotten")
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a portable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time
• Right to Lodge Complaints: File complaints with supervisory authorities

8.2 Rights Under CCPA (California Users)

• Right to Know: What personal information we collect and how we use it
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: Opt-out of the sale of personal information (we don't sell data)
• Right to Non-Discrimination: Equal service regardless of privacy choices
• Right to Correct: Request correction of inaccurate information
• Right to Limit: Limit use of sensitive personal information

8.3 How to Exercise Your Rights

To exercise your privacy rights, contact us at [email protected] with:

• Your full name and email address
• Description of your request
• Verification information to confirm your identity

We will respond to your request within 30 days (or as required by applicable law). Some requests may take longer if they are complex or numerous.

9. Cookie Management

You can control cookies through:

• Cookie Banner: Manage preferences through our cookie consent banner
• Browser Settings: Disable cookies in your browser preferences
• Opt-Out Tools: Use industry opt-out tools for advertising cookies
• Do Not Track: We respect browser Do Not Track signals

Note: Disabling certain cookies may affect site functionality and your user experience.

10. Data Security

We implement comprehensive security measures including:

10.1 Technical Safeguards

• TLS/SSL encryption for data transmission
• Secure hosting infrastructure with Vercel and Cloudflare
• Regular security updates and patch management
• Automated backup and disaster recovery systems
• Network firewalls and intrusion detection

10.2 Administrative Safeguards

• Access controls and authentication requirements
• Regular security training for personnel
• Incident response and breach notification procedures
• Vendor security assessments and agreements

10.3 Data Breach Response

In the event of a data breach, we will notify affected users and relevant authorities within 72 hours as required by law, providing details about the breach and steps being taken to address it.

11. Age Requirements and Content Warnings

18+ Only: Our Service is intended exclusively for users 18 years and older. This is due to the nature of movie and TV content information we provide, which includes mature ratings, adult themes, and potentially graphic content descriptions.

We do not knowingly collect personal information from anyone under 18 years of age. If you are under 18, please do not use our Service or provide any information to us.

If you are a parent or guardian and believe someone under 18 has provided us with personal information, please contact us immediately at [email protected]. We will promptly delete such information from our records.

12. Third-Party Links and Content

Our Service may contain links to third-party websites, services, or content. This Privacy Policy applies only to our Service. We are not responsible for the privacy practices of third-party sites.

We encourage you to review the privacy policies of any third-party sites you visit through our Service.

13. VPN Affiliate Links

We may include VPN affiliate links on our site and earn a small commission if you sign up through them. This doesn't affect your privacy - we don't share your data with VPN companies or track you for marketing.

It's just a way to help keep this free site running. That's it.

14. California Shine the Light Act

California residents may request information about our disclosure of personal information to third parties for their direct marketing purposes. We do not share personal information with VPN affiliate partners or any third parties for direct marketing purposes.

15. Nevada Privacy Rights

Nevada residents have the right to opt-out of the sale of their personal information. Since we are a free, non-commercial service and do not sell personal information, this right does not apply to our practices.

16. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors.

When we make material changes, we will:

• Update the "Last Updated" date at the top of this policy
• Notify you via email or prominent notice on our website
• Provide a summary of key changes
• Obtain consent for material changes where required by law

Your continued use of our Service after changes take effect constitutes acceptance of the updated policy.

17. Contact Information

For questions, concerns, or requests regarding this Privacy Policy or our data practices:

For EU/UK Users: You also have the right to lodge a complaint with your local data protection authority if you believe we have not addressed your concerns adequately.

For California Users: You may also contact the California Attorney General's office regarding privacy concerns.

18. Severability

If any provision of this Privacy Policy is found to be unenforceable or invalid, the remaining provisions will continue to be valid and enforceable to the fullest extent permitted by law.