Privacy Policy

This policy explains what personal data Watchvoy (watchvoy.com) processes, why, and what rights you have. It covers visitors, members and advertisers. Visitors in Türkiye can also read our KVKK disclosure notice.

Data controller

The data controller is Pasific Bilişim Teknolojileri ve Medya Sanayi Ticaret Anonim Şirketi, Osman Yılmaz Mah. 649/1. Sk. No: 2, Gebze / Kocaeli, Türkiye (tax number Cơ quan thuế Uluçınar, số 7220482262, MERSIS 0722048226200016). For any privacy question or request, write to [email protected]. We have not appointed a separate data protection officer, so this address reaches the team responsible for data protection.

Data we process

• Technical data: IP address, the country derived from it, browser and device type, pages visited and time of the request. We use it to choose your country, deliver pages and protect the site against abuse. Server logs are kept for a short time and then deleted.
• Account data, if you create an account: email address, username, password (stored only as a hash), country and language, profiles, watchlist, lists, viewing history on Watchvoy, ratings, availability alerts, comments and notification settings.
• Email: we send account emails (confirmation, password reset, alerts you asked for) through our own SMTP mail server. Messages you send to our addresses are received in our mailbox over IMAP and shown in our administration panel together with your name, email address and the content, so we can answer them.
• Contact form: name, email address, subject, message and, to stop spam, your IP address and the time of sending.
• Ad measurement: when an ad is shown or clicked we count it with a single-use token, together with the placement, country, page type and time. Tokens are deleted after 2 days, and only daily totals are kept, for about 13 months. If you consent, the wv_fk cookie limits how often you see the same ad. Ads are targeted only by context (page, country, language, genre), never by a personal profile.
• Affiliate clicks: when you follow a link to a streaming service through Watchvoy we record the time, title, service, country, the page you came from and a pseudonymous visitor code computed from your IP address with a key that changes every day, plus your account ID if you are signed in. We use this to count clicks, prevent double counting and reconcile commissions with partners. Partners only learn that a visitor came from Watchvoy. These records are kept for up to 24 months.
• Analytics: only if you allow measurement, Google Analytics 4 (Google Ireland Ltd / Google LLC) collects usage statistics such as pages viewed and device type. Without consent it runs in consent mode and sets no analytics cookies. Ad storage and ad personalisation signals are always denied, so Google Analytics data is not used for advertising.
• Advertiser data: company name, contact person, email, country, website, billing details, campaigns, creatives, payment requests, bank transfer references and receipts, and correspondence.

Purposes and legal bases

• Providing the site and your account, sending the emails you asked for and answering your messages: performance of a contract (GDPR Art. 6(1)(b)).
• Security, abuse prevention, fraud-free ad and affiliate measurement and improving the service: our legitimate interests (Art. 6(1)(f)).
• Analytics and the ad frequency cookie: your consent (Art. 6(1)(a)) where the law requires it, including in the EU, EEA, UK, Switzerland and Türkiye. You can withdraw consent at any time with the Privacy choices link at the bottom of every page.
• Advertiser accounts, invoices and accounting records: performance of a contract and legal obligations (Art. 6(1)(b) and (c)).

Who receives data

We do not sell your personal data and do not share it for cross-context behavioural advertising. We share data only with service providers acting on our instructions: our hosting provider (servers in Germany), Cloudflare (content delivery and security), Google (Analytics, only with consent) and our email provider. We disclose data to authorities only when the law requires it. When you press play on a free title, YouTube (privacy-enhanced mode) or the Internet Archive receives the data your browser sends to load their player.

International transfers

Some providers, such as Cloudflare and Google, may process data outside your country, including in the United States. Transfers rely on adequacy decisions, the EU-U.S. Data Privacy Framework or standard contractual clauses, and for Türkiye on the safeguards in Article 9 of Law No. 6698.

Retention

• Account data: until you delete your account. Comments you posted may stay without your name.
• Ad measurement: single-use tokens 2 days, daily totals about 13 months.
• Affiliate clicks: up to 24 months.
• Emails and contact form messages: as long as needed to handle your request and for up to 2 years afterwards.
• Analytics: 14 months in Google Analytics.
• Advertiser contracts, invoices and payment records: 10 years, as required by Turkish commercial and tax law.

Your rights

Depending on where you live, you have the right to access your data, correct it, delete it, receive it in a portable format, restrict or object to its processing, withdraw consent and not be subject to decisions based solely on automated processing. Residents of Türkiye have the rights in Article 11 of Law No. 6698 (see the KVKK notice). California residents may ask what we collect and ask us to delete it, and we do not sell or share personal information. Send requests to [email protected]. We answer within 30 days. You may also complain to your data protection authority, in Türkiye the Personal Data Protection Authority (KVKK).

Cookies

See our cookie policy for the list of cookies and how to change your choices.

Children

Watchvoy is not directed at children under 13, and we do not knowingly collect their data. If you believe a child has created an account, contact us and we will delete it.

Changes

We update this policy when our processing changes. The date of the last update is shown at the top of this page.