Privacy Policy

1. Who this covers

This policy applies to TrackQ Accounts, WatchQ, FilmQ, and the public TrackQ website (together, the “Services”). “TrackQ,” “we,” and “us” refer to the operator of these Services. The Privacy Lead is responsible for our privacy practices and can be reached at support@trackq.co.

TrackQ is designed primarily for people in Canada. Depending on where you live, federal or provincial privacy laws may apply.

2. Information used across TrackQ

3. TrackQ Accounts

Accounts is the identity service shared by WatchQ and FilmQ. It stores the account and security information described above, your connected-app state, Catvatar, legal-consent record, email-change and deletion requests, and app sessions. A connected app receives the profile fields and account identifier needed to recognize you.

Security tokens, recovery codes, and push-subscription keys are stored hashed or encrypted where appropriate. Email is used for verification, account recovery, security codes, important service notices, and messages you specifically request.

4. WatchQ

WatchQ stores your TV list and status, watched and unwatched episodes, watch timestamps, show and episode likes or dislikes, hidden shows, blocked languages, schedule and notification preferences, notifications and read state, and show reports. If web push is enabled, it stores an encrypted push endpoint and keys plus basic device information needed to deliver the alert.

WatchQ combines your choices with catalogue, image, schedule, airtime, and availability data from third-party sources. Comments and public discussions are not currently active. If we enable them later, we will explain the new collection before it begins.

5. FilmQ

FilmQ stores your queue and history, watched dates, reactions and optional notes, “watched alone” or selected companions, hidden movies and blocked people, studios, genres, keywords, or languages. It also stores shared-list names, owners, memberships, invitations, movies added, who added them, and member watch responses.

Other members of a shared list can see the list information, member identity, movies, additions, and watch responses that are part of that shared space. FilmQ also stores notifications, read state, reports, and—when enabled—encrypted web-push delivery details.

6. Why we use information

• To provide the account, tracking, discovery, schedule, shared-list, and notification features you request.
• To verify identity, protect accounts, enforce limits, and detect misuse.
• To personalize recommendations from your lists, reactions, hidden items, and blocked preferences.
• To maintain, diagnose, and improve reliability and accessibility.
• To respond to support, reports, legal requests, and safety concerns.

We ask separately before using information for an optional purpose that is not needed to provide the feature you requested.

7. Who receives information

We disclose only what is reasonably needed to operate a feature:

• Hosting, database, email, and security providers process technical or account information on our behalf.
• Web-push services operated by your browser or device provider receive encrypted subscription details and the notification payload needed to deliver alerts.
• TMDB supplies movie and TV metadata and images; TVMaze supplies TV airtimes; Watchmode supplies availability information; and YouTube may receive connection data when you open an embedded trailer. Catalogue lookups may include a title or external identifier.
• Other FilmQ shared-list members receive the shared content described above.
• Authorities or professional advisers may receive information when legally required or reasonably necessary to protect rights and safety.

Some providers may process information outside your province or outside Canada, where different laws may apply. We do not sell or rent personal information.

8. Cookies and on-device storage

We use essential session cookies to keep you signed in and protect requests. The apps may use local storage, session storage, and service-worker caches for update acknowledgement, selected interface state, faster loading, and installed-app behaviour. We do not currently use third-party advertising cookies or behavioural analytics.

9. Retention and deletion

We keep information only while needed for the purposes above, legal obligations, security, or dispute resolution. Account sessions can remain active for up to six months unless you sign out or revoke them. Verification links generally expire after 24 hours, password-reset links after one hour, email-change codes after 30 minutes, and sign-in MFA codes after about 10 minutes.

Your lists, history, reactions, notes, preferences, and shared content remain until you remove them, leave the relevant feature, disconnect the app, or delete the account, subject to shared-list ownership and legal or security needs. Deletion removes or de-identifies active data through the deletion process. Limited security, audit, backup, and legal records may remain until their operational or legal retention period ends.

10. Safeguards

We use measures appropriate to the sensitivity of the information, including HTTPS, restricted administrative access, password hashing, token hashing, encryption for selected secrets, secure cookie settings, MFA for privileged access, and access logging. No online service can promise absolute security.

11. Your choices and rights

• Review and correct profile information through TrackQ Accounts.
• Change app preferences, reactions, lists, history, blocks, and notifications within each app.
• Revoke signed-in devices and app sessions.
• Disable browser notifications in the app and in device settings.
• Disconnect one app or request deletion of the entire TrackQ account.
• Ask for access to, correction of, or an explanation about your personal information by contacting us.

You may withdraw optional consent, but a feature may stop working if the information is necessary to provide it. We may need to verify your identity before completing a privacy request.

12. Young users

The Services are not directed to children under 13, and they may not create an account. If you are under the age of majority where you live, use the Services only with permission from a parent or guardian. Contact us if you believe a child provided information without appropriate consent.

13. Changes and complaints

We will post the updated date when this policy changes. If a change creates a new material use of personal information, we will provide a clear notice and seek consent where required.