Privacy Policy

1. Introduction

This policy covers OmniTrackr ("we," "our," or "us"). We try to collect only what the service needs and to tell you plainly what happens to it. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services.

By using OmniTrackr, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our service.

2. Information we collect

2.1 Account information

When you create an account, we collect:

• Email Address: Used for account verification, password resets, and important notifications
• Username: Your chosen display name, which is visible to other users
• Password: Stored securely using bcrypt hashing (we never store plain text passwords)
• Profile Picture: Optional image you may upload, stored securely on our servers
• Account Creation Date: Timestamp of when your account was created
• Sign in with Google (optional): If you choose to sign up or log in with Google, Google tells us your email address, your first name and a Google account ID. We use the first name once to suggest a username, keep the account ID only to recognise you the next time you sign in with Google, and do not receive your Google password or access to anything else in your Google account
• Successful Login Activity: The most recent successful login time and a running successful-login count, used for account security, support, and aggregate activation measurement
• Visit Days: The most recent day (not the time) you opened OmniTrackr while signed in and a count of the different days you have, used for aggregate return measurement, the Welcome Back Deck, and deciding whether you have been away long enough for a come-back email. No page, search, or session-by-session history is kept

2.2 Content data

To provide our tracking services, we store the media content you add:

• Movies: Title, director, year, rating, watched status, reviews, and poster URLs
• TV Shows: Title, year, seasons, episodes, rating, watched status, reviews, and poster URLs
• Anime: Title, year, seasons, episodes, rating, watched status, reviews, and poster URLs
• Video Games: Title, release date, genres, rating, played status, reviews, cover art URLs, and external links
• Music: Album title, artist, year, genre, rating, listened status, reviews, and cover art URLs
• Books: Title, author, year, genre, rating, read status, reviews, and cover art URLs
• Collections: Private collection names, descriptions, and references to selected library items; collections become directly shareable only when you explicitly publish them
• Activity Journal: Private timestamps, activity types, title snapshots, rating snapshots, and notes that you create, plus first-completion entries created through the finish reflection flow
• Recommendation Postcards: The question, allowed media types, expiration and response limit you choose, plus submitted titles, reasons, guest display names, and owner decisions

Your Activity Journal and weekly playback are private account features. They are not shown to friends, placed on public pages, offered to search engines, or used to show ads.

The optional Welcome Back Deck is built on request from your private Next Up, unfinished-library, reflection, and Activity Journal data after an eligible return (your first log-in or signed-in visit after three or more days away). Eligibility and a signed random activation proof are held in browser session storage for up to 24 hours and cleared when you open an item, dismiss the deck, or log out. To reject duplicate counters, OmniTrackr temporarily retains only a keyed digest of that random proof for up to seven days; it contains no account or media identifier and cannot be joined to your library. OmniTrackr does not store Welcome Back eligibility as a server-side visit history.

Tasteprint is calculated on request from private account aggregates. OmniTrackr does not create a public Tasteprint profile or store the PNG card. Category privacy and tab-visibility choices are excluded by default; if you choose to include them, the image is rendered locally in your browser and shared only through actions you take afterward.

Recommendation Postcard links are unlisted bearer links: anyone who receives a valid link can read that postcard question and its owner's username and can submit one reply while the postcard remains open. Links are excluded from search indexing, carry no ads, expire after the chosen window, and stop at the selected reply limit. Replies are shown only in the owner's account inbox. A reply never changes or enters the owner's library unless the owner explicitly chooses an action.

2.3 Social features data

When using our social features, we collect:

• Friend Requests: Records of friend requests you send and receive
• Friendships: Information about your accepted friend connections
• Notifications: In-app notifications related to friend requests and other activities
• Device notifications (optional): If you turn on notifications from the bell, your browser gives us a push address and encryption keys for that device. We use them only to deliver your OmniTrackr notifications, encrypted, through your browser's push service (for example Google, Mozilla, Apple or Microsoft). Turning them off or signing out removes that device.
• Privacy Settings: Your preferences for what content is visible to friends
• Postcard Invitations: Records of Recommendation Postcards sent directly to accepted friends

If you answer a Recommendation Postcard as a guest, do not include sensitive personal information in your display name or explanation. The postcard owner will see the text you submit.

2.4 Technical data

We automatically collect certain technical information:

• IP Address: Used for rate limiting and security purposes
• Authentication Tokens: JWT session tokens stored primarily in an HttpOnly cookie; legacy browser storage may remain during the transition from older sessions
• Browser Information: Collected through Google Analytics on the public landing experience when browser privacy signals do not request limited tracking
• Usage Data: Public landing page views and interactions collected through Google Analytics; private dashboard activity is not sent to Google Analytics
• Welcome Back Totals: Anonymous daily counts of decks shown, items opened, and decks dismissed. A non-reversible digest of a random 24-hour activation proof is retained for up to seven days only to prevent duplicate counting; neither the aggregate rows nor these temporary receipts contain an account, media, search, IP, or page-history field
• Public Safety Reports: A fixed report reason, the public review or collection version, timestamp, and one-way hash derived from a signed browser token; report records do not include free-text allegations or a stored IP address

Files submitted to the Import Studio are processed to create the preview or confirmed import you request. Previewing performs no database writes. OmniTrackr does not publish migration files or imported review text, and confirmed CSV imports mark reviews private by default.

2.5 Cookies and tracking technologies

We use the following tracking technologies:

• Google Analytics: To understand visits to the public landing experience; the private signed-in dashboard does not load Google Analytics, and the public loader honors supported Global Privacy Control and Do Not Track signals
• Google AdSense: To display relevant advertisements (if applicable)
• Browser Storage: Local storage keeps interface preferences and supports legacy authentication sessions; session storage temporarily holds Welcome Back eligibility for the current browser session
• Public Visitor Cookie: A signed, HttpOnly, same-site token used to deduplicate collection reactions, collection views, collection reports, and public review reports without browser fingerprinting

2.6 Google ads and advertising cookies

OmniTrackr may use Google AdSense and other Google publisher products to display ads on public pages. As a result, Google and its partners may collect, share, and use data when you visit pages that contain Google ads. This may include cookies, web beacons, IP addresses, device identifiers, browser information, ad interactions, and other identifiers used for ad serving, ad measurement, fraud prevention, frequency capping, aggregated reporting, and personalization where allowed.

For more detail about where ads may appear and how OmniTrackr intends to keep ads limited, see the Advertising Policy.

Third-party vendors, including Google, may use cookies to serve ads based on your prior visits to OmniTrackr or other websites. Google's use of advertising cookies enables it and its partners to serve ads based on visits to this site and other sites on the internet. You can learn more about how Google uses information from sites and apps that use Google services at Google's partner sites policy page.

You can manage or opt out of personalized ads through Google Ad Settings. You can also opt out of some third-party vendors' use of cookies for personalized advertising by visiting aboutads.info, where available.

3. How we use your information

We use the collected information for the following purposes:

• Service Provision: To provide, maintain, and improve our tracking services
• Account Management: To create and manage your account, verify your email, and handle password resets
• Social Features: To enable friend connections and allow you to view friends' collections (respecting privacy settings)
• Communication: To send verification emails, password reset emails, and important service notifications
• Weekly Email: If you turn it on, a weekly email about upcoming releases for titles in your library, your goals and challenges, and titles your friends added that week. Friends' titles come only from categories they have not made private, the same lists you can already open from the Friends panel. Every email has a one-click unsubscribe
• Come-back Emails: If you have not visited for 30 days, we may send a short check-in about titles in your library, at most once every 60 days and never more than twice without a visit in between. Every one has a one-click link to unsubscribe from product updates, and weekly-email subscribers do not get them
• Security: To protect against fraud, unauthorized access, and ensure platform security
• Public Content Safety: To combine independent, rate-limited reports, temporarily unlist an exact reported review or collection version, and notify its author; a substantive edit reruns the checks and can restore a revised version automatically
• Analytics: To analyze usage patterns, improve our service, and understand user preferences
• Legal Compliance: To comply with applicable laws, regulations, and legal processes

4. Data sharing and disclosure

We respect your privacy and do not sell your personal information. We may share your information only in the following circumstances:

4.1 With other users

• Your username is visible to all users for friend requests
• Your profile picture (if uploaded) is visible to your friends
• Your media collections and statistics may be visible to your friends based on your privacy settings
• Your Activity Journal and weekly playback are not shared with friends
• Your Tasteprint is private unless you independently share a downloaded card or copied summary
• You control what content is visible through granular privacy settings

4.2 With service providers

• Google Analytics: We use Google Analytics to understand website usage. Google's use of data is governed by their Privacy Policy
• Google AdSense and advertising partners: Public pages may display ads through Google AdSense. Google and its partners may use cookies, web beacons, IP addresses, device identifiers, and similar technologies for ad delivery, personalization, measurement, reporting, security, and fraud prevention
• Email Service: We use email services to send verification and password reset emails
• Hosting Provider: Our data is stored on Render.com servers, which provides hosting and database services

4.3 Legal requirements

We may disclose your information if required by law or in response to valid legal requests, such as:

• Court orders or subpoenas
• Government investigations
• Protection of our rights, privacy, safety, or property
• Prevention of fraud or security threats

5. Your privacy rights and controls

You have the following rights regarding your personal information:

5.1 Access and update

• Access your account information through the account settings page
• Update your username, email, password, and profile picture at any time
• Export your media library, custom tabs, and Activity Journal in JSON format through the export feature

5.2 Privacy controls

• Control visibility of your movies, TV shows, anime, video games, music, books, and statistics
• Make any category private, which hides it from all users including friends
• Control which tabs are visible in your profile
• Change privacy settings at any time through account settings

5.3 Account deletion

• Deactivate your account at any time through account settings
• Reactivate your account within 90 days of deactivation
• Request permanent deletion of your account and all associated data by contacting us
• Note: Some data may be retained for legal or security purposes as required by law

5.4 Data portability

• Export all your data (movies, TV shows, anime, video games, music, books) in JSON format
• Import your data to another account or service

6. Data security

We implement industry-standard security measures to protect your information:

• Password Security: Passwords are hashed using bcrypt before storage
• Authentication: JWT tokens are used for secure session management
• HTTPS: All data transmission is encrypted using SSL/TLS
• Security Headers: We implement security headers to protect against common web vulnerabilities
• Rate Limiting: We use rate limiting to prevent abuse and protect user accounts
• Database Security: Data is stored in secure databases with access controls

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

7. Data retention

We retain your information for as long as necessary to provide our services:

• Active Accounts: Data is retained while your account is active
• Deactivated Accounts: Data is retained for a 90-day reactivation window, after which the account is no longer eligible for self-service reactivation and may be permanently deleted
• Friend Requests: Expire after 30 days if not responded to
• Verification Tokens: Expire after 1 hour
• Password Reset Tokens: Expire after 1 hour
• Public Safety Reports: Retained as needed to prevent duplicate reports, measure abuse, and protect public review and collection surfaces; a revised review or collection starts a new current report version
• Legal Requirements: Some data may be retained longer if required by law or for legitimate business purposes

8. Children's privacy

OmniTrackr is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately. If we become aware that we have collected personal information from a child under 13, we will take steps to delete such information.

9. International users

OmniTrackr is operated from the United States. If you are accessing our service from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States. By using our service, you consent to the transfer of your information to the United States.

If you are located in the European Economic Area (EEA), United Kingdom, or other regions with data protection laws, you have additional rights under GDPR and similar regulations, including the right to access, rectify, erase, restrict processing, object to processing, and data portability. To exercise these rights, please contact us.

10. Third-party services

Our service uses the following third-party services:

• Google Analytics: For website analytics. See Google's Privacy Policy
• Google AdSense: For advertising on public pages. See Google's Privacy Policy, Google's advertising technology page, and Google's partner sites page
• Render.com: For hosting and database services. See Render's Privacy Policy

These third-party services have their own privacy policies. We encourage you to review them. We are not responsible for the privacy practices of these third-party services.

11. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. You are advised to review this Privacy Policy periodically for any changes.

Material changes will be communicated through email or a prominent notice on our website. Your continued use of our service after such modifications constitutes your acknowledgment of the modified Privacy Policy.

12. Contact us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: