Privacy Policy

Last updated: October 1, 2026

1. Who we are

Binge Boss is a free TV series tracking and subscription cost optimization tool. The service is published and operated by Sebastian Sintorn, a sole trader based in Gothenburg, Sweden, trading as Sintorn Studios (sintornstudios.com). Sebastian Sintorn is the data controller for the purposes of the EU General Data Protection Regulation.

The same publisher owns and operates every version of Binge Boss: the web app at bingeboss.tv, the iOS app on the Apple App Store (App Store ID 6766888809, listed under the developer name Daniel Sebastian Sintorn), and the Android app (package tv.bingeboss.android). The Binge Boss name, logo and app icon are our own original work.

For questions about this policy, contact us at privacy@bingeboss.tv.

2. What data we collect

When you sign in with Google, we collect:

Account information: Your name, email address, and profile photo from your Google account.
App data: The TV shows you add to your library, which episodes you mark as watched, and your selected region/country.

We do not collect any data if you use the app without signing in. In that case, all data is stored locally in your browser only.

3. How we use your data

We use your data to:

Sync your show library and watch progress across devices.
Calculate personalized subscription recommendations.
Generate anonymized, aggregated usage statistics (number of users, popular shows).

We do not sell, share, or use your data for advertising purposes.

4. Legal basis for processing (GDPR)

We process your personal data based on:

Consent (Art. 6(1)(a)): You choose to sign in and sync your data. You can withdraw consent at any time by deleting your account.
Legitimate interest (Art. 6(1)(f)): Aggregated statistics to improve the service.

5. Where your data is stored

Your data is stored in:

Google Firebase (Firestore): Your show library and watch progress are stored in Google Cloud infrastructure.
Your browser (localStorage): A local copy of your data for offline access, your selected region, and consent preferences.

Firebase servers may be located in the United States. Data transfers are covered by Google's Standard Contractual Clauses (SCCs) and Data Processing Agreement.

6. Data retention

We keep your data for as long as your account exists. When you delete your account, all associated data is permanently removed from our servers within 30 days.

7. Your rights

Under GDPR, you have the right to:

Access: View all data we have about you (available in your profile settings).
Rectification: Correct inaccurate data.
Erasure: Delete your account and all associated data using the "Delete Account" option in the app.
Data portability: Export your data (available in your profile settings).
Withdraw consent: Stop syncing by signing out, or delete your account entirely.

8. Email reminders

If you opt in to email reminders, we collect and store:

Email address: Cached from your Google account to send reminders.
Subscription dates: Upcoming subscribe/cancel dates calculated from your plan.

This data is used solely to send you timely reminders about when to subscribe to or cancel streaming services. Emails do not contain tracking pixels. You can disable reminders at any time from the planner, which also clears all stored reminder data.

9. Push notifications

If you opt in to push notifications, we collect and store:

Device token: A unique identifier generated by your browser or device, used to deliver push notifications via Firebase Cloud Messaging (FCM).
Platform: Whether the token is from a web browser, iOS, or Android device.
Notification preferences: Which types of notifications you want to receive (reminders, show updates, news).

Push notifications are sent for the same events as email reminders (subscription timing), plus new episode alerts and app news. You can disable push notifications or individual notification types at any time from the Planner settings. Disabling removes your device token from our servers. We store a maximum of 10 device tokens per account.

10. Family & Friends connections

You can invite other people to connect with you, so that you can plan streaming together. Nothing is shared until someone you invite accepts, and accepting is the consent: the text shown before the Accept button says what becomes visible. We record which version of that text was shown.

When you use this feature we store:

Display name and avatar colour: The name you choose, shown to the people you connect with. We do not show them your email address or account name.
Invite links: Each link is unique, works once for one person, and expires after 14 days. We store who created it, when, when it expires and the private name you gave it (for example "Anna") so you can see who has answered. The link itself is not stored, only a one-way hash of it, and you can cancel or rename an unused link at any time. The name is removed from the invite when the link is used, and every invite record is deleted 30 days after it expires.
Private nicknames: When someone accepts your named link, that name becomes your private nickname for them; you can change or clear it, and they can give you a nickname of their own. Nicknames are visible only to the person who set them, never to the other person. A nickname is deleted when the connection is removed or either account is deleted. Please use a first name or nickname, not an email address or phone number.
Connections: Which two accounts are connected, and when the connection was made or removed.
Visibility and planner choices: Which of your titles you have hidden from connections, your default for new titles, and whose watchlists count in your Planner.
An audit log: When invites are created, cancelled or accepted, and when connections are removed. It holds account identifiers and timestamps only, and exists so that consent can be demonstrated.

What your connections see: the titles in your library that you have not hidden, and how far along you are in each (for example "watching, 3 of 10 episodes"). Someone opening your invite link before accepting sees only your display name, never the private name you gave the link. Connections cannot see your email address, your hidden titles, your reminder settings or anything else in your account.

Removing a connection: either person can remove a connection at any time. Access ends immediately in both directions, and both libraries stay as they were. Deleting your account removes all your connections, invite links and nicknames, removes you from other people's Planner choices, and deletes the nicknames others have given you. The data export (JSON) includes your nicknames and invite names. Audit log entries are kept for as long as needed to demonstrate consent and contain no library data.

11. Third-party services

Google Firebase: Authentication, data storage, and push notifications (Firebase Cloud Messaging). Firebase Privacy Policy
TMDB (The Movie Database): TV show metadata, posters, and streaming availability. We send search queries and show IDs to TMDB. TMDB Privacy Policy
Resend: Email delivery for subscription reminders (only if you opt in). We share your email address and reminder content with Resend for delivery. Resend Privacy Policy · Data Processing Agreement
ipapi.co: One-time IP-based country detection for new visitors to set the correct region. Only your IP address is sent; no data is stored by us. ipapi.co Privacy Policy
Ko-fi: Optional donation widget. If you interact with the Ko-fi button, Ko-fi's own privacy policy applies. Ko-fi Privacy Policy
Google Analytics (GA4): Anonymized usage analytics to understand how the app is used (e.g., which features are popular, navigation patterns). On the web, only activated if you choose "Accept all" in the consent banner; in the iOS and Android apps, only if you accept the analytics prompt (changeable in Settings). Events include which screens are opened, shows added or marked watched (by TMDB ID), search terms, and plan calculations — never your name, email or library contents. IP addresses are anonymized. No personal data is shared with Google for advertising. Google Privacy Policy · GA4 Data Practices

We do not use any advertising or tracking services beyond the anonymized analytics described above.

12. Cookies and local storage

We use browser localStorage for:

Essential: Your show library and watch progress (offline access), consent preferences.
Analytics (only with consent): Timestamps of your first visit and first use of key features (adding a show, calculating a plan, creating an account), used to measure onboarding. Cleared if you withdraw consent or delete your account.
Preferences: Your selected region/country, library view mode (list/grid), provider display settings, planner strategy, and cached region data.

If you choose "Accept all" in the consent banner, Google Analytics may set cookies (e.g., _ga, _ga_*) to distinguish unique visitors and track sessions. These cookies are only set with your explicit consent and can be cleared through your browser settings.

You can clear all stored data at any time through your browser settings.

13. Children's privacy

Binge Boss is not directed at children under 16. We do not knowingly collect data from children.

14. Changes to this policy

We may update this policy from time to time. Significant changes will be communicated through the app. The "Last updated" date at the top indicates the latest revision.