Privacy Policy

On registration we store your email address, display name, a hashed password and optional profile information (e.g. avatar color). Legal basis: Art. 6 (1) (b) GDPR (performance of contract).

Your cheat sheets, saved titles, ratings, notes, comments, friendships and invites are stored to provide the service. Legal basis: Art. 6 (1) (b) GDPR.

When signing in with Apple, Apple transmits a pseudonymous Apple ID and, at your option, your email address (possibly as an Apple relay address) to us. Provider is Apple Inc., One Apple Park Way, Cupertino, CA 95014, USA. Legal basis: Art. 6 (1) (b) GDPR.

When accessing the site, technical data (IP address, date and time, user agent, referrer) is briefly processed in server logs to ensure operation, security and stability. Legal basis: Art. 6 (1) (f) GDPR (legitimate interest).

Transactional and notification emails (e.g. registration confirmation, password reset, optional summaries) are sent from the sender domain notify.spicky.de via the provider Resend (Resend, Inc., USA). We process your email address and a delivery log (status, timestamps) for this. Legal basis: Art. 6 (1) (b) GDPR or Art. 6 (1) (a) GDPR for optional notifications, which you can revoke at any time in settings.

Movie and TV metadata is sourced via the Open Movie Database (OMDb). Streaming availability data may be retrieved from third-party providers. No personal data is transmitted to these services.

When you report other users’ content by email to hello@spicky.de, we process the contents of that message (email address, reported content, reason) to review and act on it. When you block other users in the app, we store this block relationship to enforce visibility rules. Legal bases: Art. 6 (1) (f) GDPR (legitimate interest in a safe platform) and Art. 6 (1) (c) GDPR. Reports are retained for up to 12 months for evidence and repeat-offence review.