Privacy Policy

What other people can see

Plotmigo is a public season tracker. Creating an account creates a public profile at plotmigo.com/user/ followed by your username. There are no private profiles.

Your profile shows:

• your username, your generated avatar, and your bio if you write one
• the shows you track and the seasons you have watched
• the dates you watched them, when you add dates
• your ratings, your Watchlist, and the shows you dropped
• the reviews you write
• the people you follow and the people who follow you
• the date you started tracking

Anyone can find your profile by searching for your username. People who follow you see what you start, finish, rate, review, and drop in their Following feed. It is the same information your profile already shows. Adding a show to your Watchlist never appears there.

A review also appears on the page of the show it is about and at its own address. Other people can mark it Helpful or report it. Who marked a review Helpful, and who reported it, is not shown to anyone.

Only accounts that Plotmigo has chosen can write for the blog. The posts they publish are public under their username, on the blog, on their profile, and on the pages of the shows a post is about. Drafts are seen by their author alone.

Profile pages are ordinary public web pages. Search engines can index them, and other people can copy or link to what they show.

What stays private

Your email address, your password, how you sign in, and your settings are never shown on your profile or to other people.

What Plotmigo stores

Your account

• Your email address, and whether you have confirmed it.
• A name. With Google sign-in this is the name on your Google account. With email sign-up it is the part of your address before the @. Plotmigo does not display it.
• If you set a password, a salted hash of it. Plotmigo never stores or sees the password in readable form after you submit it.

Google sign-in

If you choose Continue with Google, Plotmigo receives your Google account identifier, email address and whether Google has verified it, name, and profile picture URL. It also receives the sign-in tokens Google issues. Plotmigo requests only basic sign-in permissions (openid, email, and profile). It does not request access to your Gmail, Drive, calendar, or contacts.

Plotmigo uses this information to create your account, verify your sign-in, and recognize you when you return. Google sign-in can also be linked to an existing Plotmigo account with the same email address. Your email address is used for account messages, such as password resets when you request them. Your Google name and picture are not displayed; your public profile uses a separate username and generated avatar.

The Google profile information and sign-in tokens are stored with your account in Plotmigo's Cloudflare database. Google data is not used for advertising or marketing, or sold. The providers that process it and the steps to delete it are described below.

Your profile and tracking

Your username, your bio, and everything you track: shows, season progress, watched dates, ratings, Watchlist, dropped shows, and the time of each change. Plotmigo also stores who you follow, who follows you, and when each follow began.

The reviews you write, with the time you wrote and last edited each one. Plotmigo also stores which reviews you marked Helpful and which reviews you reported.

Sessions and security

• Each time you sign in, a session record with its expiry date, your IP address, and your browser's user agent. This keeps you signed in and helps protect the account.
• Short-lived request counters tied to an IP address, which slow down password guessing and other abuse.
• One-time tokens for confirming an email address (valid for 24 hours) and for resetting a password (valid for one hour).

Moderation

A moderator can hide a review or a post that breaks the rules, and decides whether search engines may index a post. Plotmigo keeps a log of those decisions: what was decided, about which review or post, by which moderator, and when. A hidden review or post stays visible to its author, with a note that it is hidden.

Cookies and storage on your device

Plotmigo sets one essential cookie that keeps you signed in, and may set a short-lived cookie while a Google sign-in is in progress. There are no advertising or analytics cookies, so there is no cookie banner.

Your timezone preference is saved in your browser's local storage. It stays on your device and is never sent to Plotmigo.

Importing from IMDb

An IMDb export file is read inside your browser. The file itself is never uploaded. Only the show identifiers and titles in it are sent to Plotmigo, to find the matching shows. IMDb ratings are not imported.

Services that handle your data

Plotmigo relies on a small number of providers to run. It does not sell your data or share it for advertising.

• Cloudflare hosts the site and its database, including account information and Google sign-in data and tokens. Every request passes through Cloudflare, which processes your IP address and technical request details to deliver and protect the site.
• Google handles Google sign-in and provides the basic account information described above. Your browser connects to Google when you choose this sign-in method.
• Resend delivers the email that confirms your address or resets your password. It receives your email address and that message, including a Google-provided email address if an account message is sent to it. It does not receive your Google sign-in tokens.
• TMDB provides show information and artwork. Plotmigo's server asks TMDB for show information and sends nothing about you. Posters and other artwork load directly from TMDB's image servers, so TMDB receives your IP address and browser details, as any website does when it serves you an image.
• TVmaze provides release schedules. Plotmigo's server asks for them and sends nothing about you.
• YouTube, only on blog posts that include a video. The video's picture loads from YouTube's image servers, so YouTube receives your IP address and browser details. The player loads from YouTube's privacy-enhanced address, and only when you press play.

How your data is protected

Plotmigo uses HTTPS to encrypt data in transit between your browser and the site, and when communicating with Google and Resend. Private account records and Google sign-in tokens are stored in the server's database and are not published on profiles. Authentication and session checks protect account settings and data downloads. Request limits help prevent password guessing and other abuse.

How long data is kept

Plotmigo keeps your account, including stored Google profile information and sign-in tokens, and tracking until you delete your account. Deleting it removes your account, linked Google account records and tokens, profile, shows, progress, dates, ratings, reviews, posts, and sessions from the live database straight away. Database backups kept by the hosting provider can hold deleted data for up to 30 days before they expire.

Usernames are permanent while an account exists. After an account is deleted, its username can be chosen by someone else.

Your choices

• Download your data. Settings has a download with your email address, profile, everything you track, your reviews, and any posts and drafts you wrote, as a JSON file.
• Delete your account. Settings has a permanent delete. It cannot be undone.
• Remove the Google connection. You can remove Plotmigo from your Google Account connections. This does not delete data already stored by Plotmigo. To remove that data, delete your Plotmigo account in Settings, or contact the address below if you need help.
• Edit or clear your bio at any time.
• Remove anything you track. Removing a show, a rating, or a date also removes it from your profile.
• Edit or delete a review at any time. A review stays public until you delete it, even after you remove its show or its rating.

Depending on where you live, the law may give you further rights over your personal data, such as access, correction, deletion, or objection. Write to the address below to use them.

Children

Plotmigo is not meant for children under 13, and they may not create an account. If you believe a child has signed up, write to the address below and the account will be removed.

Changes to this policy

When this policy changes, the new version appears on this page with a new date. A change that affects what is public or how your data is used is announced on the site or by email before it takes effect.

Contact

Questions or requests about your data: contact@plotmigo.com. The Terms of Use cover the rules for using Plotmigo.