01Who this covers
This policy applies to the Catalogie marketing site (catalogie.com) and the Catalogie app (https://app.catalogie.com/). "Catalogie", "we", "us" and "our" mean the independent team that builds and operates the service. "You" means anyone who visits the site or uses the app.
02What we collect
We only collect what the product needs to work. That falls into a few groups.
- Account details: your email address, a password (stored only as a scrypt hash, so we never see or hold the password itself), a display name and a unique username. Optionally, an avatar image, a short bio and a profile cover you pick from catalog artwork.
- Google sign-in (only if you choose it): if you sign in with Google, we receive your email, name and profile image from Google. Google sign-in is optional and off unless you use it.
- Your library and activity: the titles you add and their status, your ratings (out of 10), review notes, favorites, rewatch and replay counts, hours played, pages read, episodes watched, completion dates, and the activity history that powers your dashboard, stats and streaks.
- Social data: who you follow and who follows you, plus any comments you post and reactions you leave.
- Uploads: images you upload for your avatar or as comment attachments. We re-encode them and strip embedded location (EXIF/GPS) data before storing them.
- Notifications: if you turn on push notifications, your browser's push subscription so we can deliver them.
- Technical data: each sign-in creates a session record that includes your IP address and browser user-agent, and our servers keep short-lived request logs. We use this to keep the service secure and running, not to build a profile of you.
The movie, TV, game and book catalog itself (titles, cover art, ratings from providers) is shared reference data, not personal to you.
04How we use your data
- To run your account and sync your catalog across your devices in real time.
- To show your dashboard, statistics, streaks and reminders.
- To send essential emails: verifying your address, resetting your password, and replying to support requests.
- To send the notifications you have opted into.
- To keep Catalogie secure, diagnose problems, prevent abuse and enforce our Terms.
We do not use your data to sell advertising, build advertising profiles, or hand it to data brokers. Recommendations, when we offer them, are drawn from what you actually track, on our own servers. Selling your personal data to anyone is off the table permanently - that is not something we would do even if advertising were introduced later.
05Legal bases (EEA/UK)
If you are in the European Economic Area or the United Kingdom, we process your data under these legal bases: performance of our contract with you (to provide the service you signed up for); our legitimate interests (keeping the service secure, reliable and improving); your consent (for example, push notifications); and compliance with legal obligations. You can withdraw consent at any time where processing relies on it.
07Where your data is stored
Your data lives in our own PostgreSQL database on cloud servers we operate (Oracle Cloud Infrastructure), rather than being scattered across third-party platforms. The database sits on a private network and is never exposed to the public internet. Uploaded images are stored on a server volume, and backups are kept in private object storage. As Catalogie grows we may add servers in additional regions; if that changes where your data is processed, we will update this policy.
08How long we keep it
We keep your account data for as long as your account exists. When you delete your account, it is removed permanently, along with your library, activity history, uploads, comments, follows and sessions; uploaded files are deleted from disk. Operational logs are short-lived and rotate automatically, and queued outgoing emails are cleared once delivered.
09How we protect it
- Passwords are stored only as salted scrypt hashes, so we cannot read them, and we enforce a minimum length and block common passwords.
- All traffic is encrypted in transit with HTTPS (TLS), with HSTS enabled.
- Uploads are validated by their actual content rather than their file name, re-encoded, stripped of embedded location data, and served with hardening headers.
- Our logs redact passwords, tokens, session cookies and email addresses.
No online service can promise perfect security, but we follow a written security policy and keep our dependencies patched.
10Your rights and choices
- Access and portability: you can view your data in the app at any time, and you can email us for a copy of your account data in a portable format.
- Correction: edit your profile and entries directly in the app whenever you like.
- Deletion: delete your account from your settings, which erases your data as described above, or ask us to do it for you.
- Object, restrict or withdraw consent: turn off notifications in settings, and contact us for anything else.
To exercise any of these, email support@catalogie.com. If you are in the EEA or UK and are unhappy with our response, you have the right to complain to your local data protection authority.
11Children
Catalogie is not intended for children under 13, or under the minimum age of digital consent where you live (for example, 16 in parts of the EEA). Please do not use the service if you are younger than that. If we learn that we have collected data from a child below the applicable age, we will delete it.
12What Catalogie costs, and what that means for your data
Catalogie is free to use, forever. Because there is nothing to pay for, we do not collect or store any payment information at all - no card numbers, no billing address, no purchase history. Nothing on this site or in the app asks you for a card.
If we ever do introduce paid features in the future, we will tell every user clearly and in advance - in the app and by email - before anything changes, and we will update this policy first to explain exactly what billing data a payment processor would handle and what we would see. You would never be charged without knowingly choosing a paid option yourself.
Running Catalogie costs money - servers, storage, catalog data and email all have to be paid for. To keep the service alive and free to use, we may in the future introduce advertising as well as, or instead of, paid features. If that happens we will tell every user in advance and update this policy first, setting out what any advertising would involve: whether it uses your data, what an advertising partner would receive, what cookies or similar technologies would be set, and - where the law requires it - asking for your consent before any of that begins.
Two things do not change either way. We will not sell your personal data, and your catalog will not be handed to advertisers or data brokers.
Founding Members - the first 1,000 people to create an account - are permanently exempt from charges. If a paywall is ever introduced, Founding Members will not be charged a cent for it, and their accounts will keep full access for the life of the service.
13Changes to this policy
We may update this policy as the product evolves. If we make a material change, we will let you know in the app or by email. The "last updated" date at the top always reflects the current version.
14Contact us
Questions, requests or concerns about your privacy? Email us at support@catalogie.com and we will help.