Privacy Policy

Data controller

Anten is operated by Faruk Kılınç, an independent developer (Turkey). Application channel for any GDPR/KVKK question or request: kilincfaruk2@gmail.com. We respond within 30 days.

Data we collect

Account details: your email address and encrypted authentication credentials (stored in Supabase Auth; we never see your password in plain text). Your email is used only for sign-in, account recovery and essential account notices — we never send marketing emails and never share your address with anyone.

Watch data: the shows you follow, the episodes/movies you mark as watched with their dates, and your lists.

TV Time import: only the watch records inside the zip you upload are extracted and written to your account; the zip file itself is not kept after processing. The import job record (the extracted watch list) is summarised on completion and removed no later than when you delete your account.

Preferences: your region and owned-platform selections (for recommendations and 'where to watch'), and your interface view preferences.

Push subscription (optional): if you allow notifications, your browser's push endpoint and app language are stored.

Abuse protection: per-day request counters for fair-use limits (e.g. number of searches).

Language preference is kept in the 'anten-lang' cookie; theme and view preferences are kept in your browser's localStorage.

How we use it

Only to provide the service: showing your follow list, computing upcoming episodes, building your stats, and (if enabled) sending new-episode notifications.

No profiling, no ad targeting, no selling of data. No analytics or tracking cookies.

Infrastructure providers

Your data is processed on: Supabase (database and authentication; servers in Tokyo, Japan) and Vercel (app hosting; serving region Tokyo). Cross-border transfer occurs to this extent.

Show/movie metadata (posters, episode lists, air dates) comes from TMDB; when you search, your search text is sent to TMDB — your watch history is never uploaded. Posters load in your browser directly from TMDB's image server (image.tmdb.org), so TMDB can technically see your IP address and which titles' posters you view. Watch-provider data comes from JustWatch. This product uses the TMDB API but is not endorsed or certified by TMDB.

If you enable notifications, new-episode alerts are delivered via your browser's push service (Google, Mozilla or Apple, depending on your device); notification content is end-to-end encrypted (VAPID) so only your device can read it.

Cookies

Only strictly-necessary/functional cookies and local storage are used: session cookies (keep you signed in), 'anten-lang' (your language), and — in your browser's localStorage — your theme/view preferences and the notification-banner dismissal state. There are no ad or analytics cookies, so no cookie-consent banner is needed.

Retention and deletion

Your data is kept for as long as your account exists. 'Delete Account' in Settings permanently removes your account and all your data (watch history, lists, subscriptions, import records) in one step.

Your rights

Under GDPR (and Turkish KVKK) you have the right to access, rectify, delete and port your data. Access/portability: use 'Download My Data' in Settings to export your entire watch history, lists and preferences as JSON anytime. Deletion: 'Delete Account', one step. For anything else, email us; we respond within 30 days.

Security and breach notification

We apply reasonable technical measures to protect your data: row-level security (RLS) on every table, encrypted connections, and admin keys used only server-side in a confined way. No system is 100% secure, however; if a data breach affects your rights, we will notify the competent authority and you within the timeframes required by applicable KVKK/GDPR rules.

Changes

If we make a significant change to this policy, we update the date above and announce it in the app where appropriate.