Privacy Policy

This notice explains what personal data Epilog processes, why, and what rights you have. It concerns the use of Epilog, a personal TV show and movie tracker.

1. Data controllers

The data controllers are Alberto Fontana and Alessio Pazzani, whom you can contact at info@epilogtv.com for any matter regarding your personal data.

2. What data we process

• Account data: name, email address, password (stored only in encrypted form). If you sign in with Google, we receive your email address, name and profile picture from your Google account, and we store your Google account identifier to link subsequent sign-ins. We also record your last sign-in date.
• IP address: processed temporarily for security and to limit repeated sign-in attempts.
• Viewing data: the shows and movies you follow, the episodes you’ve watched and their states — your library.
• Import from other services: if you choose to import, the export file you upload is processed to populate your library.
• Comments and interactions: the comments you write on episodes and movies, your replies and your “likes”. This is content you choose to publish and, as a rule, it is visible to other users of the service; you can publish it anonymously, in which case we do not show your identity to other users.
• Connections between users: if you use the social features, we store who you follow, who follows you and any pending follow requests.

3. Why we process it and on what legal basis

• Providing the service (managing your account, library and comments): performance of the contract with you (art. 6.1.b GDPR).
• Security and abuse prevention (e.g. limiting sign-in attempts): our legitimate interest (art. 6.1.f GDPR).
• Google sign-in, when you use it: performance of the contract (art. 6.1.b GDPR).

Providing email and password (or signing in with Google) is required to create and use the account: without this data you can’t register. The other data derives naturally from your use of the service. We do not carry out profiling or automated decision-making on your data.

4. Your library’s visibility and social features

Epilog includes social features: other registered users can search for you by name, see your library (the shows and films you follow, watched episodes, statistics) and follow you.By default your library is public, meaning visible to any user signed in to Epilog — it is not visible on the open web to people without an account. You can make itprivate at any time from Settings → Privacy: from then on only the followers you expressly approve can see it, and new follow requests wait for your approval. Your recent activity may also appear to your followers as a suggestion (“suggested by”) on their Summary screen, under the same visibility rules. Your name remains findable in search even with a private library; your email and account data are never visible to other users.

Legal basis: performance of the contract (art. 6.1.b GDPR) for the social features you choose to use; your library’s visibility is a service setting under your control.

5. Who we share it with

To run the service we rely on a few providers:

• TMDB — provides metadata and images for shows and movies; images are loaded by your browser from TMDB’s servers.
• Google — only if you use Google sign-in, to verify your identity.
• KLIPY — only if you consent to the “Third-party” category: GIFs in comments are loaded by your browser from KLIPY’s servers.
• Railway — the hosting provider the service runs on.
• AWS (Amazon Web Services) — for sending service emails (e.g. password recovery) and for database backups, stored on AWS servers within the European Union.
• Other users — the comments and interactions you choose to publish are visible to other users of the service (anonymously, if you choose to publish them that way).

Some providers may be located outside the European Union (e.g. in the United States); in that case the transfer relies on the safeguards provided by the GDPR (e.g. standard contractual clauses). We do not sell your data and do not use it for advertising.

6. How long we keep it

We keep your data as long as your account exists. When you delete your account, the associated data is erased. If you posted comments that other users have already replied to, a placeholder (“Comment deleted”) with no identifying information remains in place of the text, so conversations aren’t broken.

If the service closes, data retention, portability and deletion follow theService continuity and closure clause of the Terms of Service.

7. Security

We take appropriate technical and organisational measures to protect your data. Passwords are stored only in encrypted form (bcrypt hash) and are never visible in clear text; traffic to the service travels over an encrypted connection (HTTPS); session cookies are readable only by the server and sent only over a secure connection; and we limit repeated sign-in attempts to prevent abuse. No system is 100% secure, however, so we can’t guarantee absolute protection.

8. Your rights

As a data subject you have the right to:

• access your data and obtain a copy;
• request its rectification or erasure;
• request restriction of, or object to, processing;
• receive your data in a portable format;
• withdraw at any time the consent you gave (for example for third-party cookies, via «Cookie preferences»), without affecting the lawfulness of processing done before withdrawal;
• lodge a complaint with the supervisory authority (in Italy, the Garante per la protezione dei dati personali).

9. How to exercise your rights

You can exercise some rights directly in the app, without contacting us: from Settings you candownload a copy of your data and delete your account (along with your whole library) on your own. For the other rights — or if you prefer — you can write toinfo@epilogtv.com: we reply without undue delay and in any case within one month of the request. To make sure the request really comes from you, we may ask you to confirm your identity. For cookies and third-party services see the Cookie Policy.

Version 2026-07-20