Privacy Policy

1. Who is responsible for this processing

Popz is an app developed by Gorret Labs (Guillaume Gorret), an individual publisher based in France, acting as data controller for the processing described below. This policy explains what data Popz collects, why, who it is shared with, and how to have it corrected or deleted.

2. Data we collect

• Tracking data (watchlist): the series and films you add, your episode-by-episode progress, and your display preferences.
• Trakt account: if you connect your Trakt account, Popz receives an OAuth access token to read and sync your watch history. Popz never stores your Trakt password.
• Notification token: a device identifier (Firebase Cloud Messaging token) used to notify you when a new episode is released.
• Technical data: IP address, device type, and server logs, kept temporarily for security and to keep the service running properly.

Popz does not collect your name, email, or payment details: the app does not require its own account.

3. Why this data is used

• To run progress tracking and the upcoming-episodes calendar (performance of the service).
• To send new-episode notifications, if you enabled them (consent).
• To keep the service secure and diagnose incidents (legitimate interest).

4. Sharing with third parties

• TMDB (The Movie Database): provides show/film metadata and posters; Popz queries TMDB without sending data that identifies you personally.
• Trakt: syncs your watch history if you link your account.
• Firebase Cloud Messaging (Google): delivers push notifications to your device.

Popz never sells data and displays no advertising.

5. Cookies

This site (popz.fr) uses no tracking cookies and no third-party analytics. The mobile app contains no advertising SDK.

6. Data retention

Tracking data and the Trakt token are kept as long as you use the app. The notification token is deleted as soon as you disable notifications or uninstall the app. Technical logs are kept for at most 30 days.

7. Your rights

Under the GDPR, you have the right to access, rectify, erase, restrict, and port your data, and to withdraw your consent to notifications at any time (in the app's settings). To exercise these rights, write to privacy@popz.fr. You may also lodge a complaint with the CNIL (the French data protection authority).

8. Security

Data is stored on a dedicated database, isolated from other services, and reachable only by the Popz API. Traffic between the app and our servers is encrypted (HTTPS).

9. Changes

This policy may be updated; the "last updated" date at the top reflects the version in force. Substantial changes will be flagged inside the app.

10. Contact

For any question about this policy: privacy@popz.fr.