Privacy Policy

1. Introduction

Welcome to OmniTrackr ("we," "our," or "us"). We are committed to protecting your privacy and ensuring you have a positive experience while using our service. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services.

By using OmniTrackr, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our service.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Email Address: Used for account verification, password resets, and important notifications
• Username: Your chosen display name, which is visible to other users
• Password: Stored securely using bcrypt hashing (we never store plain text passwords)
• Profile Picture: Optional image you may upload, stored securely on our servers
• Account Creation Date: Timestamp of when your account was created

2.2 Content Data

To provide our tracking services, we store the media content you add:

• Movies: Title, director, year, rating, watched status, reviews, and poster URLs
• TV Shows: Title, year, seasons, episodes, rating, watched status, reviews, and poster URLs
• Anime: Title, year, seasons, episodes, rating, watched status, reviews, and poster URLs
• Video Games: Title, release date, genres, rating, played status, reviews, cover art URLs, and external links

2.3 Social Features Data

When using our social features, we collect:

• Friend Requests: Records of friend requests you send and receive
• Friendships: Information about your accepted friend connections
• Notifications: In-app notifications related to friend requests and other activities
• Privacy Settings: Your preferences for what content is visible to friends

2.4 Technical Data

We automatically collect certain technical information:

• IP Address: Used for rate limiting and security purposes
• Authentication Tokens: JWT tokens stored in your browser's localStorage for session management
• Browser Information: Collected through Google Analytics for service improvement
• Usage Data: Page views, interactions, and feature usage through Google Analytics

2.5 Cookies and Tracking Technologies

We use the following tracking technologies:

• Google Analytics: To understand how users interact with our service and improve user experience
• Google AdSense: To display relevant advertisements (if applicable)
• Local Storage: To store authentication tokens and user preferences

3. How We Use Your Information

We use the collected information for the following purposes:

• Service Provision: To provide, maintain, and improve our tracking services
• Account Management: To create and manage your account, verify your email, and handle password resets
• Social Features: To enable friend connections and allow you to view friends' collections (respecting privacy settings)
• Communication: To send verification emails, password reset emails, and important service notifications
• Security: To protect against fraud, unauthorized access, and ensure platform security
• Analytics: To analyze usage patterns, improve our service, and understand user preferences
• Legal Compliance: To comply with applicable laws, regulations, and legal processes

4. Data Sharing and Disclosure

We respect your privacy and do not sell your personal information. We may share your information only in the following circumstances:

4.1 With Other Users

• Your username is visible to all users for friend requests
• Your profile picture (if uploaded) is visible to your friends
• Your media collections and statistics may be visible to your friends based on your privacy settings
• You control what content is visible through granular privacy settings

4.2 With Service Providers

• Google Analytics: We use Google Analytics to understand website usage. Google's use of data is governed by their Privacy Policy
• Email Service: We use email services to send verification and password reset emails
• Hosting Provider: Our data is stored on Render.com servers, which provides hosting and database services

4.3 Legal Requirements

We may disclose your information if required by law or in response to valid legal requests, such as:

• Court orders or subpoenas
• Government investigations
• Protection of our rights, privacy, safety, or property
• Prevention of fraud or security threats

5. Your Privacy Rights and Controls

You have the following rights regarding your personal information:

5.1 Access and Update

• Access your account information through the account settings page
• Update your username, email, password, and profile picture at any time
• Export all your data in JSON format through the export feature

5.2 Privacy Controls

• Control visibility of your movies, TV shows, anime, video games, and statistics
• Make any category private, which hides it from all users including friends
• Control which tabs are visible in your profile
• Change privacy settings at any time through account settings

5.3 Account Deletion

• Deactivate your account at any time through account settings
• Reactivate your account within 30 days of deactivation
• Request permanent deletion of your account and all associated data by contacting us
• Note: Some data may be retained for legal or security purposes as required by law

5.4 Data Portability

• Export all your data (movies, TV shows, anime, video games) in JSON format
• Import your data to another account or service

6. Data Security

We implement industry-standard security measures to protect your information:

• Password Security: Passwords are hashed using bcrypt before storage
• Authentication: JWT tokens are used for secure session management
• HTTPS: All data transmission is encrypted using SSL/TLS
• Security Headers: We implement security headers to protect against common web vulnerabilities
• Rate Limiting: We use rate limiting to prevent abuse and protect user accounts
• Database Security: Data is stored in secure databases with access controls

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

7. Data Retention

We retain your information for as long as necessary to provide our services:

• Active Accounts: Data is retained while your account is active
• Deactivated Accounts: Data is retained for 30 days after deactivation, after which it may be permanently deleted
• Friend Requests: Expire after 30 days if not responded to
• Verification Tokens: Expire after 1 hour
• Password Reset Tokens: Expire after 1 hour
• Legal Requirements: Some data may be retained longer if required by law or for legitimate business purposes

8. Children's Privacy

OmniTrackr is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately. If we become aware that we have collected personal information from a child under 13, we will take steps to delete such information.

9. International Users

OmniTrackr is operated from the United States. If you are accessing our service from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States. By using our service, you consent to the transfer of your information to the United States.

If you are located in the European Economic Area (EEA), United Kingdom, or other regions with data protection laws, you have additional rights under GDPR and similar regulations, including the right to access, rectify, erase, restrict processing, object to processing, and data portability. To exercise these rights, please contact us.

10. Third-Party Services

Our service uses the following third-party services:

• Google Analytics: For website analytics. See Google's Privacy Policy
• Google AdSense: For advertising. See Google's Privacy Policy
• Render.com: For hosting and database services. See Render's Privacy Policy

These third-party services have their own privacy policies. We encourage you to review them. We are not responsible for the privacy practices of these third-party services.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. You are advised to review this Privacy Policy periodically for any changes.

Material changes will be communicated through email or a prominent notice on our website. Your continued use of our service after such modifications constitutes your acknowledgment of the modified Privacy Policy.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: