Privacy Policy
Last updated: 25 October 2026
OK to Watch? helps parents decide whether a film or series suits their child. This page explains what data we keep and why, who we share it with and what your rights are. Write to (contact address to be added) with any questions.
1. Data we keep
When a parent creates an account, this data is kept on our servers, tied to that account:
- Account: your email address and when you sign in.
- Child profiles: a name or nickname, age and age group, the picture and colour you chose, and the limits in the six categories.
- Lists: watch lists and favourites, for you or for each child.
- Your ratings: stars, a thumbs up or down and an optional note. Others only see the count and the average.
- Permissions: which title you allowed for which child, for how long, and your optional note.
- Parent PIN: not the PIN itself, only a one-way hash of it.
- The streaming services you subscribe to.
2. Data that stays on your device
Without an account, your profiles, lists and settings are kept only in your browser or on your phone. In the mobile app, "watched" marks and kids-mode settings always stay on the device. When you sign in, the profiles and lists on the device move to your account.
3. Children's data
Children don't create accounts; a parent creates and manages their profiles. We keep only what is needed to tailor the evaluations, and you can use a nickname instead of a real name. A child's age is kept so their limits match their age and their profile opens correctly on your other devices.
4. What we use data for
We use your data for:
- Creating your account and sending you sign-in links.
- Checking titles against your child's age and limits.
- Keeping your profiles, lists and settings in sync across devices.
- Checking your PIN when you give a permission.
We show no ads, sell no data and don't collect your location. Your email address is used only for sign-in links.
5. Services we use
The app works with these service providers:
- Supabase: sign-in and the database. Data is stored in the European Union (Frankfurt).
- Google Cloud: the app's server.
- Resend: sending sign-in emails.
- Sentry: monitoring errors in the website and the mobile app. When something fails, it receives only the technical details of the error (the lines of code where it happened), the browser or device type, the operating system and the app version; never your name, your email address or anything about your children.
- Anthropic (Claude): the AI model that writes the evaluations. It only receives a title's TMDB details (title, plot, genres, age rating and the like); nothing about you or your child is sent.
- TMDB and Fanart.tv: title details, posters and images. Your browser or phone loads posters directly from these services, so they see your IP address.
- YouTube (Google): trailers. When you open a trailer, the video loads from YouTube's cookie-free address (youtube-nocookie.com), so YouTube sees your IP address. If you don't open a trailer, nothing goes to YouTube.
6. Transfers outside Turkey and the EU
Account and child data is stored in the European Union. Anthropic operates in the United States, but receives no personal data. Error reports sent to Sentry may also be processed abroad; they contain no names or email addresses. When images load from TMDB and Fanart.tv, or a trailer from YouTube, your IP address reaches these services abroad.
7. Cookies and browser storage
We use a session cookie to keep you signed in. Your profiles, lists and settings are also kept in your browser's local storage. We use no advertising or tracking cookies.
8. Keeping and deleting data
We keep your data while your account exists. "Delete my account" on the Family page permanently deletes your account and everything tied to it (child profiles, lists, ratings, permissions, PIN). For data on a device, clear your browser data or use "Bu cihazdaki verileri sıfırla" (reset data on this device) in the mobile app.
9. Your rights
Under Turkey's Personal Data Protection Law (KVKK) and the GDPR you can:
- Find out whether and how your data is processed.
- Know which services it is shared with.
- Ask for incomplete or wrong data to be corrected.
- Ask for your data to be deleted.
- Object to processing and ask for any damage to be made good.
10. Contact us
Write to (contact address to be added) about your rights or this policy. If we change it, we update the date above and announce significant changes in the app.