Privacy Policy
Effective date: August 13, 2026
1. Who We Are
BingeSoon is operated by Origin Collective Limited. For any privacy-related questions, contact us via the Contact / Support page.
2. What Information We Collect
Account information: email address, and name/profile info if you sign in with Google.
Usage data: the shows and anime you track, your watch progress (if applicable), and general usage patterns within the app.
Payment information: if you subscribe to Pro, payment is processed by our payment provider (Stripe). We do not store your full card number — Stripe handles this directly, and we only receive confirmation of subscription status and limited billing metadata.
Technical data: IP address, browser type, device type, and general analytics data (such as which pages are visited), collected automatically when you use the Service.
Cookies and similar technologies: we use strictly necessary cookies and local storage to keep you signed in, keep your session secure, and remember basic app preferences such as your cookie choice. These are required for the Service to work and cannot be switched off. We also offer optional analytics cookies, which record anonymous, aggregated usage information (for example which pages and features are used) so we can improve BingeSoon. Optional cookies are only set if you accept them in our cookie banner. You can change your choice at any time using the "Cookie settings" link in the footer, or by clearing cookies and site data in your browser. We do not use advertising or cross-site tracking cookies, and we do not sell your data.
3. How We Use Your Information
We use your information to:
Provide and maintain the Service (e.g. syncing your tracked shows across devices)
Process subscription payments and manage your account
Send you service-related communications (e.g. premiere reminders, if you opt in)
Improve and troubleshoot the Service
Comply with legal obligations
4. Legal Basis for Processing (UK GDPR / EU GDPR)
Origin Collective Limited is the data controller and is based in the United Kingdom. We process personal data in accordance with the UK GDPR and the Data Protection Act 2018, and with the EU GDPR where it applies. Our legal bases are:
Contract — to provide the Service you've signed up for (account, tracking, subscriptions)
Consent — for optional communications like email reminders, and non-essential cookies
Legitimate interests — for basic analytics and service improvement
Legal obligation — where required by law (e.g. tax/billing records)
5. Third-Party Services
We share limited data with the following third parties as necessary to operate the Service:
Stripe (payment processing)
Supabase (database, authentication and account/data storage, provided through Lovable Cloud)
Lovable (application hosting and deployment, served via Cloudflare)
Resend (delivery of account and service emails, and premiere reminder emails if you opt in, sent from notify.bingesoon.com)
TVMaze and anime data providers (public show/anime data — these services do not receive your personal information; we query them for show data, not user data)
Lovable Analytics (aggregated, privacy-friendly usage statistics — only active if you accept optional analytics cookies)
Each of these providers processes data under their own privacy policies and only for the purposes described here.
6. Data Retention
We retain your account and usage data for as long as your account is active. If you delete your account, your personal data is removed immediately and any remaining backups are cleared within 30 days, except where we're required to retain certain records (such as billing and tax records, which UK law requires us to keep for 6 years).
7. Your Rights
Depending on your location, you may have the right to:
Access the personal data we hold about you
Correct inaccurate data
Request deletion of your data
Object to or restrict certain processing
Request a portable copy of your data
Withdraw consent at any time (where processing is based on consent)
To exercise any of these rights, contact us via the Contact / Support page. If you're in the UK and believe we haven't addressed your request properly, you can lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk. If you're in the EU, you can complain to your local data protection authority.
8. Data Security
We use reasonable technical and organizational measures to protect your data, including encrypted storage and access controls. However, no system is completely secure, and we can't guarantee absolute security.
9. International Data Transfers
Your data may be processed in countries outside the United Kingdom, including in the European Union and the United States, where our providers (Supabase, Cloudflare, Stripe and Resend) operate infrastructure. Where personal data leaves the UK or EEA, we rely on appropriate safeguards such as the UK International Data Transfer Addendum and the EU Standard Contractual Clauses.
10. Children's Privacy
The Service is not intended for children under 13 (or the applicable minimum age in your country). We do not knowingly collect personal data from children below this age.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We'll update the "Effective date" above when changes are made, and will notify you of material changes via the Service or email where practical.
12. Contact Us
Questions about this Privacy Policy or how we handle your data? Contact Origin Collective Limited through the Contact / Support page.