Privacy policy

Data controller

The controller of your personal data is Levent Acar (MergeQuill), Kızılırmak Mah. 1445 Sk. No: 2/1 İç Kapı No: 113, 06530 Çankaya/Ankara, Türkiye. Send any privacy questions or requests to [email protected].

Data you give us

Account details: username, email address and password. Your password is stored only in a one-way hashed form; if you turn on two-factor authentication, your authenticator secret and recovery codes are stored encrypted.

Profile details: an optional profile photo and bio.

Preferences: language, region, timezone, spoiler protection and the streaming platforms you use.

Communications: the information you send us when you email us, and our correspondence with you.

Data created as you use the service

Your watchlist, the episodes and films you watched and when, your ratings, your archive and the moment you accepted the terms of use.

Technical details: IP address, browser and device details (user agent), session records, sign-in times and security logs, used to keep you signed in and to keep the service secure.

This data is collected through the site and its application interface (API), partly by automated means, through cookies and server logs. Details of the cookies are in our Cookie policy. We do not receive data about you from other sources such as data brokers or social networks.

How we use your data

Providing the service: creating your account and managing your session, showing you your list, your watch history and the calendar of the series you follow, and remembering your preferences.

Communication: sending service emails such as password resets, email verification and security alerts, and answering your questions. We do not send marketing emails.

Security and compliance: preventing and detecting unauthorised access, fraud and abuse, meeting our legal obligations, responding to lawful requests, protecting our rights and enforcing the terms of use.

Your data is not used for advertising, is never sold and is not used for profiling, and no automated decisions with legal or similarly significant effects are made about you. The site has no advertising or analytics trackers.

Legal bases

Your account, profile, preference and usage data are processed because they are necessary to enter into and perform our membership agreement with you (KVKK art. 5/2-c; GDPR art. 6(1)(b)).

Technical and security logs rely on our legitimate interest in keeping the service secure (KVKK art. 5/2-f; GDPR art. 6(1)(f)) and on our legal obligations (KVKK art. 5/2-ç; GDPR art. 6(1)(c)).

Where a right must be established, exercised or defended, the relevant data may be processed for that purpose (KVKK art. 5/2-e). If we ever need to use your data for any other purpose, we will ask for your explicit consent first, and you can withdraw it at any time.

Who we share your data with

Service providers: the hosting, database and email delivery providers we need to run the service. They process your data only on our instructions and under the security measures set by contract.

Professional advisers: lawyers, accountants and auditors, to the extent their services require.

Authorities: competent public authorities and courts, where the law requires it.

Business transfers: a successor in a transfer of the service, a merger or a similar transaction, to the extent the transaction requires.

Your list, ratings and profile details are not shown to other users or to the public.

Third-party content

Posters and images load directly from TMDB’s servers (image.tmdb.org), so your browser sends your IP address and browser details to TMDB. None of your account or usage data is sent to TMDB.

When you play a trailer, the video loads through YouTube’s privacy-enhanced mode (youtube-nocookie.com) and YouTube processes data under its own privacy policy. No connection to YouTube is made unless you play a trailer.

When you follow a link to a streaming platform, that site’s own policies apply.

Retention

Your data is kept while your account is open. When you delete your account the data tied to it is deleted; copies left in backups are kept apart from any other processing until they are permanently removed in the backup cycle.

Technical and security logs are kept for as long as their purpose requires, and records the law requires us to keep are held only for that period. After that, data is deleted, destroyed or anonymised.

Security

We protect your data with technical and organisational measures such as one-way hashed passwords, encrypted connections (HTTPS), optional two-factor authentication and access controls. No internet service can guarantee complete security; if a data breach occurs, we will inform you and the competent authority as the law requires.

International transfers

Our service providers may be located in other countries, so your data may be processed outside the country you live in. Such transfers are made with the safeguards required by KVKK art. 9 and the GDPR, such as adequacy decisions or standard contractual clauses. Write to us for details of the safeguard used.

Your rights

On the Account page you can see and correct your data, download a machine-readable copy of it and delete your account.

Under KVKK art. 11 you have the right to learn whether your data is processed and, if so, to request information about it; to learn the purpose of the processing and whether the data is used for that purpose; to know the third parties in Türkiye or abroad to whom it is transferred; to have it corrected if incomplete or inaccurate, and erased or destroyed where the legal conditions are met; to have those actions notified to the third parties it was transferred to; to object to an outcome against you that results solely from automated analysis; and to claim compensation if you suffer damage from unlawful processing.

If you are in the European Economic Area or the United Kingdom, under the GDPR you also have the right to access, correct and erase your data, to restrict its processing, to data portability, to object to processing based on legitimate interests, and to withdraw your consent.

Send requests from the email address on your account to [email protected]; we may ask for further information to verify your identity. We respond free of charge within 30 days at the latest and, if we refuse a request, we tell you why.

If you are not satisfied with our response, you can complain to the Personal Data Protection Board (KVKK) in Türkiye, to the data protection authority of your country in the EU, or to the Information Commissioner’s Office (ICO) in the United Kingdom.

Children

tvfollow is not intended for children under 16 and does not knowingly collect data from them. If you believe a child under 16 has given us data, write to us and we will delete it as the law requires.

Changes to this policy

This policy may be updated from time to time; the current version and its date are always published on this page. We announce significant changes by email to the address on your account or by a prominent notice on the site.

Contact

Data controller: Levent Acar (MergeQuill), Kızılırmak Mah. 1445 Sk. No: 2/1 İç Kapı No: 113, 06530 Çankaya/Ankara, Türkiye. Email: [email protected].