WatchMe takes the protection of your personal data seriously. This policy describes what data we collect, why, how long we retain it, and what your rights are under the General Data Protection Regulation (GDPR).
Last updated :
The data controller is the informal structure Ascencia, represented by Ahmed Karim, reachable at [email protected].
Ahmed Karim also acts as data protection officer (DPO) for WatchMe.
Account: email address, password (hashed, never stored in plain text), display name, avatar, profile slug.
Preferences: theme (light/dark), interface language, time zone, preferred title language, accent color.
Activity: films and series tracked, statuses (to watch, in progress, completed, etc.), ratings, watch dates, personal lists, reviews, favorites, follows, notifications, forum messages.
Technical: IP address (temporarily, in server logs), user-agent, date and time of access. This data is used for security and debugging.
Providing the service (contract performance): account management, displaying your library, lists, reviews, notifications.
Service security (legitimate interest): abuse detection, access logs, attack protection.
Communication with you (contract performance): transactional emails (account validation, password reset, enabled notifications).
We do not use your data for advertising purposes and we do not sell it.
WatchMe uses cookies that are strictly necessary for the service to operate (authentication session, UI preferences). Google reCAPTCHA is loaded on the contact page to prevent spam; no advertising tracker is used.
Full details on the Cookie policy page.
Your primary data is hosted by Contabo GmbH (Germany, European Union). Some technical providers may also receive only the data required for their service: email delivery, the OAuth provider you choose, and external image hosting.
We do not sell your data or share it with data brokers, advertising networks, or third-party analytics services.
Account data: retained as long as the account is active. In case of deletion, personal data is erased within 30 days (subject to legal retention obligations).
Technical logs: retained for a maximum of 12 months.
Public content (reviews, forum messages): retained as long as they are not deleted by their author or moderated. After account deletion, this content may be anonymized rather than erased to preserve discussion consistency.
WatchMe's primary data is hosted within the European Union. Optional use of an OAuth provider or loading external resources may involve processing outside the EU; in that case it depends on the safeguards implemented by the provider concerned.
Passwords are hashed using a modern algorithm (argon2 or equivalent). Connections to the service are encrypted via HTTPS.
Despite all precautions, no platform is invulnerable. In case of a data breach affecting your rights, we will notify you as soon as possible in accordance with GDPR.
You have, at any time, the following rights over your personal data: access, rectification, erasure ("right to be forgotten"), restriction, objection, portability, withdrawal of consent, and the right to define post-mortem directives.
To exercise these rights, write to us at [email protected]. We will respond within a maximum of one month.
If, after contacting us, you consider that your rights are not respected, you may lodge a complaint with the French data protection authority (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, or online at cnil.fr.
This policy may be updated to reflect legal or technical changes. Users will be notified by email or in-service notification in case of a material change.
A question? Write to us at [email protected]