This policy explains which personal data we process when you use Showlist, why, and what rights you have. It's written to be read: if anything isn't clear, write to us.
The data controller is i-creativi s.r.l.s, a simplified limited liability company registered in Italy, with registered office at Via Villapizzone 26, 20156 Milan (MI), Italy — VAT number 08673460963, Milan Companies Register REA MI-2041659, certified email i-creativi@pec.it. For anything concerning your data you can write to info@i-creativi.com.
Showlist is a service by i-creativi. Full company details are also published at i-creativi.it.
Account data: email address, password (stored only in encrypted form, which we cannot read), display name, username and profile picture if you set one.
Service usage data: the shows and films you follow, the episodes you mark as watched and when, ratings, title states, and the favourite genres you pick during setup.
Content you publish: comments, replies, reactions, attached images, and the people you follow.
Technical diagnostic data: when the app or the site hits an error we record the technical details, along with your account identifier, device model, operating system and app version, and the screen where it happened. In the app this can be turned off in settings, under «Report errors».
Aggregate measurement of site traffic, without cookies and without profiling individuals.
To provide the service you asked for — creating your account, keeping track of what you watch, showing your library and statistics, publishing your comments: the legal basis is performance of the contract (Art. 6.1.b GDPR).
To send you service emails (account confirmation, password reset, notifications you chose to receive): performance of the contract for the necessary ones, your consent for the optional ones, which you can withdraw at any time in settings.
To keep the service secure and working — diagnosing errors, preventing abuse, moderating reported content: our legitimate interest (Art. 6.1.f GDPR) in offering a service that works and respects the people using it.
To comply with legal obligations where they apply (Art. 6.1.c GDPR).
We do not sell your data and we do not pass it on for advertising or third-party profiling.
To run the service we use providers that process data on our behalf, as processors: Supabase (database and authentication, servers in the European Union — Frankfurt), Vercel (hosting for the site and its functions), Resend (sending service emails).
Metadata about shows and films comes from The Movie Database (TMDB); poster images are loaded from their servers, which therefore receive your device's IP address.
Your public content — username, profile picture, comments, who you follow — is visible to other users of the service: that is what it is for.
Data is stored on servers located in the European Union. Some providers may also process it outside the European Economic Area: in that case the transfer relies on the standard contractual clauses approved by the European Commission.
We keep account data for as long as the account exists. When you delete it, the data is deleted with it.
Technical error reports are deleted automatically after 90 days.
At any time you can ask to access your data, correct it, delete it, restrict its processing, object to processing based on legitimate interest, and receive your data in a machine-readable format to take it elsewhere.
Two of these you exercise yourself, without asking anyone: in account settings you'll find «Download your data», which exports everything about you into a file, and «Delete account», which permanently removes account and data.
If you believe the processing breaches the rules you can lodge a complaint with a supervisory authority — in Italy, the Garante per la protezione dei dati personali (www.garanteprivacy.it).
The service is not intended for children under 14. If we find we have collected data from a child below that age without the consent of whoever holds parental responsibility, we delete it.
If we change how we process data we update this document and change the date at the top. When changes are substantial we flag them inside the service, so you can read them before carrying on.