Privacy Policy

WillSee (Побачимо) is a social watchlist for movies and TV. This policy explains what information we collect when you use the app or this website, why we collect it, who we share it with, and the choices you have — including exporting or deleting everything, any time.

You can use WillSee as a guest with no account at all. If you sign in, we ask for the minimum needed to sync your list across devices and connect you with friends — never more. We never sell your data. Your friends can't see anything you've marked hidden or anything you've saved while Ghost mode is on.

Account info: if you choose to sign in, we receive a name, email, and a stable identifier from Apple or Google — never your password, which those providers keep. Guests get a device-generated identifier instead of an account.

Launch waitlist: if you join on this website, we store the email address you enter, the page language, the time you joined, and — if you arrived from a promoted link — the campaign tags carried in that link's address (utm_source, utm_medium, utm_campaign), so we can send launch updates and know which channel brought you. We do not attach website analytics data to your waitlist email.

Your watchlist: titles you save, your Will see / Watching / Seen / Dropped status, ratings, episode progress, and notes you add.

Import files: when you use a one-time code to import CSV files, we retain the parsed rows and result report for up to 30 days so the import can finish and you can review unmatched items. The resulting library and watch-history entries remain until you remove them or delete your account.

Phone number (optional): if you verify your phone to make yourself findable by friends, we send a one-time code via Telegram or SMS and store only a salted, irreversible hash of your number — never the number itself.

Phone contacts (optional): if you choose to find friends already on WillSee, we hash your contacts' phone numbers on your device before we ever see them, and use the hashes only to match against other hashed numbers already in our system. We never store your contacts' names, and we never see an unhashed phone number that isn't your own.

Sign-in security and friend suggestions: when your device signs in or refreshes its session, we record a salted, irreversible hash of your network address — never the address itself. We use it to spot suspicious sign-ins and to power “People you may know” for small shared networks (like a home Wi-Fi); busy public networks are ignored, and these hashes are deleted automatically after 30 days.

Images you scan: a photo of a poster, screen, or screenshot you choose to scan is sent to our image-recognition provider (Anthropic) to identify the title, then discarded — we don't keep a library of your scanned photos.

Website usage data: if you consent, Google Analytics records page views and store-badge clicks, session statistics, approximate geolocation, and browser/device information. It uses a first-party _ga cookie to distinguish visits. We do not send your name, email, account identifier, or personal library contents to Google Analytics.

We process account, watchlist, social, and recognition data to provide the service you request — our contract with you is the basis for that core processing. When you join the launch waitlist, we use your email only to send the launch updates you requested; you can unsubscribe at any time. We rely on your consent for website analytics, push notifications, and any future optional processing that requires it. We rely on legitimate interests for security, fraud prevention, moderation, and service reliability, after weighing those interests against your rights. We do not use your data to build an advertising profile, and we do not sell it.

TMDB (The Movie Database) supplies the catalog of movie and TV metadata and posters you see in the app — no personal data about you is sent to TMDB. Anthropic processes images you actively choose to scan, solely to identify the title. Apple and Google process sign-in if you choose those options, under their own privacy policies. If you verify your phone number, the one-time code is delivered by Telegram or an SMS carrier (Twilio) — they receive your number only to deliver that code. Resend, our email delivery provider, receives waitlist email addresses solely to deliver the launch updates you requested — nothing else about you. Firebase Crashlytics (Google) receives crash and error diagnostics — device model, OS version, and technical stack traces tied to a pseudonymous identifier, never your name, email, or content — so we can find and fix crashes. Google Analytics receives the consented website usage data described above. We keep advertising storage, ad user data, ad personalization, and Google Signals disabled in the tag. We never sell personal data to anyone, and we only share what's listed above — never a broader trade of user data to third parties.

The WillSee website uses Google Analytics only after you choose Accept in the cookie banner. Google Analytics may then set first-party _ga and _ga_<container-id> cookies to distinguish visits and understand aggregate website use; their default lifetime is up to two years. We keep Google advertising storage, ad user data, ad personalization, and Google Signals disabled. Choosing Decline prevents the analytics tag from loading. You can revisit the choice with Cookie settings in the footer.

Ghost mode and per-title hiding are absolute: when you hide an entry or your whole activity, it never surfaces to friends — not in a feed, not in a recommendation, not as a count. This is enforced in how our systems read your data, not just in what the interface shows.

We keep account and library data while your account is active. We keep a waitlist email until you unsubscribe, ask us to remove it, or the launch-update purpose ends. A deletion request removes your active profile, library, ratings, lists, and friend connections, subject to limited retention for fraud prevention, security, legal obligations, and backups. Hashed network addresses are deleted automatically after 30 days. Before launch, we will publish the actual retention periods for backups and every retained category; we will not claim a period that our operations cannot meet.

You can export your entire watchlist as CSV in the app and can initiate deletion in the app or from the web deletion page. Depending on where you live, you may also have rights to access, correct, erase, restrict, receive a portable copy of, or object to processing of your data, and to withdraw consent without affecting earlier lawful processing. Contact support@willsee.app to exercise a right. We aim to respond within one month; where law allows, we may extend that period and explain why. You may also complain to the supervisory authority where you live.

WillSee’s launch age gate and minimum age are under legal review because social features require a country-specific approach. We will publish the final age rule before launch and remove accounts that we learn do not meet it. Parents or guardians can contact support@willsee.app about a child’s data.

WillSee does not make solely automated decisions that have legal or similarly significant effects on you. Image recognition is AI-assisted and probabilistic: you choose an image, see a proposed match, and decide what to save. We do not train our models on your uploaded images.

We use encryption in transit, access controls, and operational safeguards. The operator, hosting locations, backup locations, and transfer safeguards are factual launch disclosures that remain under legal review. They will be published here before the app is available; we will not imply an adequacy decision or contractual safeguard that has not been put in place.

If a personal-data breach requires notice under applicable law, we will notify the relevant authority and affected people within the required timeframes.

For material changes, we will give advance notice, explain what changed in plain language, and update the version history. Where the law gives you a right to reject a change, you may stop using the service and request account deletion without penalty.

Questions about this policy or your data? Reach us at support@willsee.app.