Privacy Policy

Serivore — last updated: September 30, 2026

1.Who is responsible for your data

Serivore is a TV show tracking app published by Maxence Bekier ("we"). For any question about your data: contact@serivore.app.

2.What data we collect

Your account. An email address and a password (stored only in hashed form, never in plain text) — or, if you choose Sign in with Apple, the identifier Apple provides and the (possibly relay) email address Apple passes to us. Confirming your address is mandatory: for this we keep a temporary token and the date the link was sent. A token of the same kind, valid for one hour, is created if you ask to reset your password.

Your profile. A display name, a public handle and, if you wish, a profile picture and a banner. You can make your account private: your library and activity are then visible only to people you approve.

The content you create. Your show library, your watch history (episodes watched and dates), your ratings, comments, reactions, character votes, your lists and the profiles you follow. This is the heart of the service: without this data, Serivore cannot work.

Moderation. The reports you send us (targeted content, reason, optional note), your block and hide lists, as well as moderation measures applied to your account (suspensions, with their history). This data is used solely to keep the space healthy, as described in our Terms of Service.

Technical data. Our servers keep technical logs for security and diagnostics: the IP address and time of requests, and, for every action that changes something (creating an account, adding a show, marking an episode, posting a comment, following someone…), an audit entry recording which account acted, the action and its result, the date and the IP address it came from. Only moderation reads this log, to investigate abuse or fraud. Once a day, a single entry also records that your account was active that day; it is our only measure of active users. Your session tokens are stored securely on your device (iOS Keychain), where they are removed if you reinstall the app, and in hashed form on our servers. If you signed in with Apple, the app also keeps Apple’s identifier for your account on the device, to notice when you revoke Serivore’s access from your Apple Account settings.

Notifications. If you turn on episode release notifications, your device sends us an Apple push token and its time zone, which we keep in order to deliver those alerts at the right local time. They are deleted along with your account, and turning notifications off in your device settings makes it inert.

What we do not collect. No location, no contacts, no advertising identifier, no usage analytics. Your show and GIF searches go through our servers without being linked to your account. Your display preferences (content language, selected tab) stay on your device.

3.Why we use it

We process your data for three purposes, each with a legal basis under the GDPR:

• Providing the service (account, syncing your library across your devices, social features) — performance of a contract.
• Securing and moderating the service (authentication, technical logs, report review, graduated moderation measures) — legitimate interest.
• Optional features you enable yourself (profile picture, public profile) — your consent, withdrawable at any time.

We use your data neither for advertising, nor for profiling, nor to sell it to anyone.

4.Where your data goes

Your data is hosted by OVHcloud, in the European Union. Your profile images are stored with OVHcloud.

Show metadata (titles, synopses, artwork, cast) comes from TheTVDB, air times from TVmaze, streaming availability from TMDB (JustWatch data), and GIF search from KLIPY. These services are queried by our servers, without passing on your identity. Show artwork, however, is loaded by the app directly from TheTVDB's CDN (artworks.thetvdb.com), which therefore sees your device's IP address, as any image server does.

Two providers are involved for your account: Infomaniak (Switzerland, a country covered by a European Commission adequacy decision) delivers our emails — address confirmation, password reset, moderation notices — and therefore receives your address; Apple delivers push notifications to your device.

We do not share your personal data with any other third party, except where required by law.

5.How long we keep it

• Account, profile and content: for as long as your account exists. Deleting your account erases everything: library, watch history, comments, reactions, ratings, lists, follows, profile images. If deletion is decided by moderation, a complete copy of your data is emailed to you before erasure.
• Reports and moderation measures: for as long as the accounts concerned exist — the suspension history is needed to handle repeat offenses.
• Deleting a suspended account: if you delete your account while it is suspended, we keep a fingerprint (SHA-256 hash) of your email address and, if you signed in with Apple, of your Apple identifier — never the address itself — along with the end date and number of your suspensions, until the suspension would have ended. If you sign up again with the same address or Apple account in the meantime, the new account is suspended until that same date. The purpose is to keep a suspension from being evaded (legitimate interest); the record is then deleted automatically.
• Never-confirmed accounts: if an address is not confirmed within seven days, the corresponding account is deleted automatically. It could never be used, and the address becomes available again to whoever it belongs to.
• Technical logs and audit entries: 12 months at most. Audit entries outlive a deleted account for the rest of that period, so that abuse can still be investigated after the fact; they are then purged automatically. The daily activity records are deleted with the account.
• Sessions: expired tokens are purged automatically.

6.Your rights

Under the GDPR, you have the rights of access, rectification, erasure, portability, restriction and objection regarding your data. The simplest way:

• Rectify: your profile and email can be edited directly in the app.
• Erase: "Delete my account" in the app immediately and permanently removes your account and all associated data.
• Export: "Download my data", in the app and on web.serivore.app, builds a complete, readable archive on request (account, library, watch history, ratings, comments, lists) — without having to write to us.
• For everything else: contact@serivore.app. We reply within 30 days.

If you believe your rights are not being respected, you can lodge a complaint with the CNIL, the French data protection authority (cnil.fr), or with your local supervisory authority.

7.Security

All communication between the app and our servers is encrypted (HTTPS). Passwords are hashed with a robust algorithm (bcrypt) and are never accessible to us in plain text. Refresh tokens are hashed at rest. Server access is restricted and the database is not publicly exposed.

8.Minimum age

Serivore includes social features and is intended for people aged 15 and over (the digital age of consent in France, where the service is based). If you believe a child under 15 is using the service without parental consent, please write to us.

9.The serivore.app website

This website sets no tracking cookies and embeds no third-party analytics.

Serivore's web client, at web.serivore.app, gives access to the same account as the app. When you sign in there, it keeps your session token and display preferences (language, theme, region) in your browser's local storage. These are not cookies, nothing is passed to a third party, and signing out clears them.

10.Changes to this policy

If this policy changes substantially, we will let you know in the app before the changes take effect. The date of the last update is shown at the top of this page.