Privacy Policy

1. Who is responsible for this processing

Popz is an app developed by Gorret Labs (Guillaume Gorret), an individual publisher based in France, acting as data controller for the processing described below. This policy explains what data Popz collects, why, who it is shared with, and how to have it corrected or deleted.

2. Data we collect

• Account: sign-in happens through your Google account via Firebase Authentication. Popz receives and stores your email address and a Firebase identifier tied to your account, used to identify your data and let you sign back in.
• Tracking data (watchlist): the series and films you add, your episode-by-episode progress, and your display preferences.
• Notification token: a device push token, stored so we can notify you when a new episode is released.
• Technical data: IP address, device type, and server logs, kept temporarily for security and to keep the service running properly.

Popz does not collect your name or payment details, and never stores your Google password: sign-in is fully delegated to Google/Firebase.

3. Why this data is used

• To run progress tracking and the upcoming-episodes calendar (performance of the service).
• To send new-episode notifications, if you enabled them (consent).
• To keep the service secure and diagnose incidents (legitimate interest).

4. Sharing with third parties

• TMDB (The Movie Database): provides show/film metadata and posters; Popz queries TMDB without sending data that identifies you personally.
• Firebase Authentication (Google): handles sign-in with your Google account and passes us your email address and Firebase identifier when you sign in.
• Firebase Cloud Messaging (Google): delivers push notifications to your device.

Popz never sells data and displays no advertising.

5. Cookies

This site (popz.fr) uses no tracking cookies and no third-party analytics. The mobile app contains no advertising SDK.

6. Data retention

Tracking data is kept as long as you use the app. The notification token is deleted as soon as you disable notifications or uninstall the app. Technical logs are kept for at most 30 days.

7. Your rights

Under the GDPR, you have the right to access, rectify, erase, restrict, and port your data, and to withdraw your consent to notifications at any time (in the app's settings). You can delete your account and all your data directly from the app (Settings > Delete my account): deletion is immediate and permanent. For any other request, write to privacy@popz.fr. You may also lodge a complaint with the CNIL (the French data protection authority).

8. Security

Data is stored on a dedicated database, isolated from other services, and reachable only by the Popz API. Traffic between the app and our servers is encrypted (HTTPS).

9. Changes

This policy may be updated; the "last updated" date at the top reflects the version in force. Substantial changes will be flagged inside the app.

10. Contact

For any question about this policy: privacy@popz.fr.