Privacy Policy

Information we collect

Account information — only if you create an account: your email address, your password (stored only as a one-way argon2id hash — we never see or store it in plain text), your display name, and your subscription tier and renewal date.

Anonymous device identifier — if you use Tahaara without an account, we generate a random ID and store it on your device. It lets us remember your filter preferences and attribute your scene-accuracy votes without identifying you personally.

Content-filtering activity — the titles you look up (platform, title, year, season/episode) so we can fetch the right scene-timestamp list, and any accuracy votes you submit (“this flag was right/wrong”), linked to your account or device ID.

Public Wiki contributions — if you vote or edit on the Wiki, your display name (or initials) and trust score are shown publicly on the leaderboard.

Payment information — if you subscribe to Premium, our payment processor Stripe collects and stores your card details directly; we never see or store your card number. We share your name, email, and an internal account ID with Stripe so it can process billing.

Technical data — your IP address is used momentarily to prevent abuse (rate limiting). We do not store it.

We do not use cookies, and we do not use any advertising or analytics trackers of any kind.

How we use your information

• To provide the service: fetch and apply the right scene timestamps to the title you’re watching.
• To maintain your account, subscription, and preferences across devices.
• To prevent abuse and enforce fair use of the service.
• To improve the accuracy of our scene database, using aggregated voting and lookup data.
• To respond to support requests you send us.

What we never do

• We never sell your personal information.
• We never upload, store, or transmit the video you’re watching — structurally, our systems only ever handle text timestamps and category labels, never video or audio content.
• We never use your viewing or filtering activity for advertising, and we don’t share it with advertisers.

Who we share data with

We use a small number of service providers to run Tahaara. Each only receives what it needs to do its job, and none may use your data for their own purposes.

• Stripe — payment processing for Premium subscriptions. Receives your name, email, and an internal account ID.
• DigitalOcean — hosts our API and web application.
• Crunchy Bridge — hosts our database (account, activity, and voting data), in an EU data center.
• Upstash — a temporary cache for scene-timestamp lookups. It's disposable and holds nothing long-term.

Data retention

• Account data is retained while your account is active. If you request deletion, we delete it within 30 days, except for the minimal records our payment processor or tax law requires us to keep.
• Aggregated, anonymized activity data (title lookups, accuracy votes) is retained indefinitely once it’s no longer linked to an identifiable account or device ID, since it’s used to keep our scene database accurate for everyone.
• You can request that we delete the data tied to your specific account or device ID at any time — see Contact us, below.

Your rights

European Economic Area (GDPR). You have the right to access, correct, delete, restrict, or object to our processing of your personal information, and the right to data portability. We process your data on the basis of performing our contract with you (providing the service) and our legitimate interest in preventing abuse and improving the product.

California (CCPA/CPRA). You have the right to know what personal information we collect, request its deletion, and request its correction. We do not sell or share your personal information, so there is nothing to opt out of.

Canada (PIPEDA). Tahaara, Inc. is based in Ontario, Canada, and we handle personal information in line with PIPEDA's principles: collecting only what we need, being transparent about why, and giving you access to and control over your information.

Children's privacy

Tahaara is not directed at children, and you must be at least 16 years old to create an account or use the service. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with personal information, contact us and we'll delete it.

Data security

Passwords are hashed with argon2id and never stored in plain text. All data in transit between your device, our extension, and our servers is encrypted (HTTPS/TLS). No system is perfectly secure, but we take reasonable steps to protect your information.

Where your data is hosted

Our database is hosted in the European Union. Our application servers run on DigitalOcean's infrastructure. Data may be processed in other countries by the service providers listed above, each under their own data-protection commitments.

Changes to this policy

If we make material changes to this policy, we'll update the date at the top of this page. We don't currently send email notifications of changes, so if you want to stay current, check back here occasionally.

Contact us

Questions about this policy or your data? Email us at [email protected].

Tahaara, Inc. · Ontario, Canada
This policy is governed by the laws of the Province of Ontario, Canada, without regard to conflict-of-laws principles.