# Privacy

Content Tracker is a personal dashboard. It has no visitor accounts, no advertising, no analytics and no third-party tracking scripts. This page lists exactly what the site stores, where, and how to remove it.

## What is stored in your browser

The application keeps a small amount of state on your own device so that a reload does not lose your place:

- **localStorage**: `ct-theme` (light or dark preference), `ct-media-cache` (title metadata and poster lookups, kept so the same title is not looked up twice), `ct-imdb` (resolved IMDb ids), `ct-cal-filters` and `ct-cal-region` (the release calendar's last filters), and `ct-goal` / `ct-goal-year` (a device-local fallback for the yearly watch goal).
- **sessionStorage**: `ct_admin_session` marks an unlocked admin tab. It is cleared when the tab closes.
- **Cookie**: `ct_admin` is set only after a successful admin sign-in. It is HttpOnly, Secure, SameSite=Strict and expires when the browser session ends. Visitors who never sign in never receive it.

None of this is sent to the site as analytics. Clearing site data in your browser removes all of it.

## What the server stores

- **The watchlist**: the titles, seasons, genres, platforms, episode counts, screentime and watch dates shown on the dashboard, held in a Cloudflare D1 database.
- **Suggestions**: if you use the Submit page, the title, type, genre, platform, note and date you enter are stored in the same database and shown publicly on the Submit page. Do not put personal information in a suggestion note; it is visible to everyone.
- **Admin writes**: changes made from the admin panel are stored in the watchlist with the time they were made.
- **Server logs**: Cloudflare, as the host, processes standard request data (IP address, user agent, requested URL, response status) to deliver the site and protect it. The application itself does not write those logs to its database.

## Rate limiting

Submissions are rate-limited so the suggestion list cannot be flooded. The limiter counts recent writes per connection in memory and does not store IP addresses in the database or associate them with an entry. A successful submission records only the entry fields listed above.

## Third parties

- **Cloudflare** hosts the site and the database.
- **TMDB** supplies film and series metadata and hosts poster images; **TVmaze** supplies episode data and hosts poster images; **Watchmode** supplies streaming-release data; **OMDb** supplies ratings. Those requests are made by the site's server functions, except poster images, which your browser loads from `image.tmdb.org` or `static.tvmaze.com` and which therefore see your IP address as any image request does.
- **IMDb** is a link target, not an embedded service. Following a title link takes you to IMDb under IMDb's own privacy policy.

There are no advertising networks, no social widgets, no fonts loaded from a third-party CDN and no analytics pixels on any page.

## Your choices

- Clear the site's storage in your browser to remove the local state listed above.
- Email soni.soni.parth@gmail.com to ask for a suggestion you submitted to be removed, or to correct a watchlist entry. Include the title and the date so the row can be found.
- Because there are no accounts, there is no profile to delete; there is nothing tied to your identity unless you chose to put it in a suggestion note.

## Children

The site is a personal media log rather than a service aimed at children, and it collects no information from visitors beyond what is described here.

## Changes

If this policy changes, the date below changes with it. The site has no mailing list, so the page itself is the notice.

Last updated: 21 October 2026.

## Contact

Questions about this policy go to soni.soni.parth@gmail.com. The [contact page](https://contenttrackerdashboard.pages.dev/contact) has the other routes.