Privacy Policy

11. Data Controller

Let's Mark (letsmark.app and its Discord bot) is run by an individual, not a company. That individual is the controller of your personal data under the EU General Data Protection Regulation (GDPR) and other applicable data protection laws, and can be reached at:

22. Data We Process

We process only the data below. We do not ask for your real name, date of birth, phone number, address or special categories of data (such as health, religion or ethnic origin); we recommend you do not post them in public fields. Card and other payment details are entered on our payment provider's checkout and never reach us.

• Account data: username, email address, a one-way hash of your password (the password itself is never stored), language preference. If you link Discord, only your Discord user ID and Discord language setting.
• Profile data: the profile picture, banner, background image and profile song you upload, your bio, featured titles and profile settings.
• Watch data: the titles you track, their status, the episodes you watched and when, your scores, where you watched, your private notes, your lists, the titles you hid, your votes on episodes and films (the feelings you pick and your favourite character) and what you import from a file or another service.
• Social data: your comments (with the pictures and GIFs you add to them) and reactions, follows, the recommendations you send and receive, your notifications and the comment reports you file.
• Subscription data: only if you subscribe to Premium: the customer and subscription IDs our payment provider gives us, the subscription status, the end of the current period and whether it is set to cancel.
• Search counts: when you open a result from a search, the search text is counted for that day with no account, IP address or device attached. Searches counted at least three times in a week appear under popular searches on the feed; the counts are deleted after 30 days.
• Contact data: the email address, topic, message and page you send through the contact form.
• Technical data: the IP address of your last sign-in, the country derived from it and the time; if you turn on push notifications, your browser's push address and user agent; if you create an auto-track key, a SHA-256 hash of it (not the key itself) and the time it was last used.
• Moderation data: decisions taken over content that broke the rules (comment removals, comment restrictions, suspensions, bans) and the reasons.
• Error and usage measurements: technical details of an error when one occurs, and aggregate visit statistics that use no cookies and do not identify you.

33. Purposes and Legal Bases

We collect your data electronically, through the forms you fill in, your settings and the requests your browser sends; and from Google or Discord if you choose to sign in with Google or link Discord. We process it for these purposes, on these legal bases under GDPR Art. 6(1):

• Creating your account, signing you in and providing the service: performance of a contract (Art. 6(1)(b)).
• Account emails: verification, sign-in codes, password resets, security notices and the notice sent when an inactive account is deleted; performance of a contract and legitimate interest.
• Push and Discord notifications: sent only if you turn them on, and you can turn them off at any time; performance of a contract.
• Providing a Premium subscription: starting the checkout, applying your subscription to your account and stopping it when your account is suspended, banned or deleted; performance of a contract (Art. 6(1)(b)).
• Security, abuse prevention, moderation, fixing errors and improving the service: legitimate interest (Art. 6(1)(f)).
• Legal obligations and legal claims: requests from competent authorities, and establishing, exercising or defending a right (Art. 6(1)(c) and (f)).

44. Advertising, Tracking and Automated Decisions

We do not sell your data or use it for advertising. We do not track you across other sites, so it makes no difference whether your browser sends a Do Not Track signal. Your watch history is used only to recommend titles to you.

The one automated decision we take is this: if the number of your removed comments passes set thresholds, your ability to comment is restricted temporarily or permanently. You can appeal it, and a person reviews the appeal.

55. What Is Public

• Your username, profile picture, banner and background image, bio and profile song are public.
• If your profile is public, your watch list, scores, statistics and connections can be seen by anyone and may appear in search engines. If you make your profile private, only followers you approve can see them.
• Your comments are public on the title's page, even when your profile is private.
• Each list is visible to everyone, to your followers or only to you, as you choose in its settings.
• Your notes are visible only to you.
• If you subscribe to Premium, a Supporter badge appears on your profile. You can hide it like your other badges.

66. Who We Share Data With

To run the service we share only the data each one needs with these service providers. They process your data only on our behalf and for the purposes below. You can request the current list of providers at legal@letsmark.app.

• Hosting and database provider: the server the site runs on, the database and backups.
• Network security and storage provider: network security, storage of your uploads and of backups, and bot checks on the sign-up, sign-in and contact forms.
• Email delivery provider: sending account emails.
• Payment provider (Polar): only if you subscribe; your email address and account ID are sent to start the checkout. Polar sells the subscription as the merchant of record and processes your payment details as a separate controller, under its own privacy policy.
• Error monitoring provider: detecting errors. Hosted in the EU; your name, email and user ID are not sent.
• IP location provider: your IP address may be sent at sign-in to determine your country.
• Google and Discord: only if you sign in with Google or link Discord; authentication and Discord notifications.
• Your browser's push service: only if you turn on push notifications; delivering them to your device.

77. International Transfers

Our providers' servers are in several countries, mainly the US and the EU, so your data is transferred across borders. This is necessary to provide the service and is done with the safeguards applicable data protection law requires.

Posters for films, shows and books load directly into your browser from the servers of the databases we get title information from. Those servers see your IP address and browser details, but we send them no personal data.

GIFs work the same way. The GIF search under comments sends what you type from your browser straight to KLIPY, the GIF service, and a GIF in a comment loads from KLIPY's servers. KLIPY sees your IP address and browser details, but we send it no personal data.

Where the law requires it, or a court or competent authority properly requests it, we share the relevant data with that authority.

88. How Long We Keep Data

• Your account data and content are kept while your account exists. When you delete your account, all of it is deleted immediately and permanently, including your tracked titles, lists, comments, reactions, follows, recommendations, notifications and uploads.
• If you delete your account, your subscription ends and your customer record at our payment provider is anonymised. The provider keeps its own transaction records for as long as tax and accounting law requires.
• Database backups are kept for at most 30 days. Copies of deleted data in backups are removed automatically when that period ends.
• Your last sign-in IP address and country are overwritten at every sign-in; no history is kept.
• Verification links, sign-in codes and password reset links expire within 10 minutes to 24 hours.
• Contact form messages, comment reports and admin action records are deleted automatically after 1 year.
• Moderation records are kept for 1 year. The record of a permanent restriction is kept for as long as the restriction stands.
• Error reports are kept for at most 90 days.
• If you do not sign in for 180 days, we may delete your account. Before deleting it we email you a copy of your watch list, or a notice if the list is empty. Accounts with an active subscription are not deleted for inactivity.

99. Security

Connections are encrypted with HTTPS, passwords are stored as one-way hashes, and admin access is limited. No system is completely secure. If a breach affects your data, we notify the competent data protection authority and affected users as the law requires.

1010. Your Rights

You have the right to:

• Access your personal data and get information about how it is processed and who it is shared with
• Have inaccurate or incomplete data corrected
• Have your data deleted
• Restrict processing
• Receive your data in a portable format
• Object to processing based on our legitimate interest
• Contest a decision made solely by automated means
• Have corrections, deletions and restrictions passed on to those we shared your data with
• Claim compensation for damage caused by unlawful processing

1111. How to Use Your Rights

You can correct your profile in settings, export your watch list and delete your account from Account settings. For anything else, write to legal@letsmark.app from the email address on your account. We respond within 30 days at the latest, free of charge, and may ask for information to verify your identity.

If the law of the country you live in gives you broader rights, those apply too. If you are not satisfied with our answer, you can complain to the data protection authority in your country.

1212. Age Limit

The service is not for anyone under 16. If we learn that someone under 16 has created an account, we delete the account and its data.

1313. Changes

We may update this policy. The current version is always on this page, dated at the top. We give notice of significant changes in advance, on the site or by email.

If a translation of this policy differs from the English version, the English version prevails.