Privacy Policy – MovieScout
Last updated: October 2026
MovieScout ("we", "our", or "the Service") is an application licensed under the PolyForm Noncommercial License 1.0.0 designed to help users discover, search for, and manage personal lists of movies and TV shows. We are committed to protecting your privacy and complying with applicable data protection laws, including the European General Data Protection Regulation (GDPR / RGPD, Regulation (EU) 2016/679).
1. Data Controller
For the purposes of the GDPR and other data protection regulations, the Data Controller responsible for your personal data is the maintainer of the MovieScout project:
2. Information We Collect
MovieScout collects only the minimum necessary data to provide cross-device synchronization and application features:
- Authentication Data: When signing in using supported identity providers (such as Google, and where available, Email or Facebook), we receive basic profile identifiers provided by the authentication provider, such as your user ID, display name, email address, and avatar URL.
- User Content and Preferences: Your personal tracking lists (Watchlist, Rateslist), custom ratings, season/episode progress, notifications, and application settings.
- Technical Logs (Local only): Debug logs are kept locally on your device or in development mode, unless explicitly submitted for diagnostics.
We do not sell, rent, or trade your personal data with third parties for commercial or advertising purposes.
3. Legal Basis for Processing (GDPR / RGPD)
Under Article 6 of the GDPR, we process your personal data under the following legal bases:
- Performance of a Contract (Art. 6(1)(b) GDPR): Processing authentication identifiers and personal lists is necessary to deliver the requested service (storing and synchronizing your watchlist and ratings across devices).
- Legitimate Interests (Art. 6(1)(f) GDPR): Detecting regional availability of streaming content through IP geolocation and system locale to present relevant regional media catalogs.
- Consent (Art. 6(1)(a) GDPR): When you choose to authenticate via supported identity providers (such as Google, Email, or Facebook), you provide consent for MovieScout to access your basic authentication profile.
4. Third-Party Services and Data Processors
To operate the Service, MovieScout uses trusted third-party providers acting as Data Processors or external metadata providers:
- Supabase: Acts as our cloud database and backend authentication infrastructure (*Data Processor*). Your user profile, lists, and ratings are stored in secure Supabase databases encrypted in transit (TLS) and at rest.
- Identity Providers (Google, Meta/Facebook): Used exclusively to authenticate your identity. Their collection and handling of authentication data is governed by their respective privacy policies.
- The Movie Database (TMDB): Used to retrieve public media metadata and artwork. This product uses the TMDB API but is not endorsed or certified by TMDB.
- OMDb: Used to fetch external review scores.
- JustWatch: Used to display streaming platform availability.
- IP Geolocation Providers (ipwho.is, ipinfo.io): Used exclusively to detect your initial geographic region to display the appropriate regional streaming availability. No user accounts or personal profiles are associated with these requests.
5. Your Rights Under GDPR (RGPD)
Under the European Union General Data Protection Regulation, you have the following rights regarding your personal information:
- Right of Access (Art. 15): You have the right to request a confirmation of whether your data is being processed and obtain a copy of your personal data.
- Right to Rectification (Art. 16): You may request correction of inaccurate or incomplete personal information.
- Right to Erasure / Right to be Forgotten (Art. 17): You can request complete deletion of your account and associated cloud data.
- Right to Restriction of Processing (Art. 18): You can request the limitation of the processing of your data under certain circumstances.
- Right to Data Portability (Art. 20): You may request to receive your data in a structured, commonly used, and machine-readable format.
- Right to Object (Art. 21): You have the right to object to processing where applicable.
- Right to lodge a complaint: You have the right to file a complaint with a competent supervisory authority (such as the Spanish Data Protection Agency - AEPD).
6. Account and Data Deletion (Google Play & Meta Compliance)
We respect your right to completely delete your account and personal data at any time. You can delete your account using either of the following methods:
Method A: Inside the App (Immediate)
- Open the MovieScout application on your mobile device.
- Open the side menu (Drawer) or Profile screen.
- Select Delete Account (or tap your profile options).
- Confirm the deletion prompt. Your account, profile, watchlists, ratings, and cloud records will be permanently removed immediately.
Method B: Web-Based Request (Without App Installed)
In accordance with Google Play Account Deletion and Meta Data Deletion requirements, you may request deletion without installing the app:
- Send an email to xcarolr@gmail.com with the subject line
MovieScout Account Deletion Request.
- Specify the email address associated with your MovieScout account (e.g., your Google or Facebook login email).
- Upon verification, your account and all associated cloud data will be permanently wiped from our Supabase database within 30 days, and you will receive a confirmation email.
Data Retention Note: When an account is deleted, all stored lists, ratings, and profile references are permanently deleted. We do not retain backup archives of deleted accounts.
7. Children's Privacy
MovieScout is not targeted at children under the age of 13 (or under 16 within the European Economic Area). We do not knowingly collect personal identifiable information from children. If you believe that a minor has provided us with personal information, please contact us immediately, and we will promptly delete such data.
8. Security of Your Data
We implement standard security measures to protect your data. All data transfers between your client device, Supabase, and third-party APIs are transmitted using secure HTTPS/TLS encryption.
9. Changes to This Privacy Policy
We may update our Privacy Policy periodically to reflect changes in legal requirements or app features. The revised policy will be posted on this page with an updated revision date.
10. Contact Us
If you have any questions, requests, or concerns regarding your privacy or data protection, please contact us at: