Privacy Policy
Effective: April 11, 2026
DreadWatch ("we," "us") is a horror movie discovery platform. This policy explains what data we collect, why, and how we protect it.
What we collect
When you sign in with Google
We receive your name, email address, and profile photo from Google. We use these to create your account and display your avatar. We do not receive or store your Google password.
When you use the site
- Watchlist and service preferences — titles you save and streaming services you select are stored to personalize your experience.
- Affiliate click data — when you click a "Watch on" link, we record the provider and title to measure which services are most useful. This data is not tied to your identity unless you are signed in. Affiliate click data is retained for 12 months, after which it is aggregated and anonymized.
- Analytics — we use Google Analytics to understand aggregate traffic patterns (page views, device types). This uses cookies subject to Google's privacy policy.
What we do NOT collect
- Payment information — we do not sell anything directly
- Browsing history outside DreadWatch
- Data from your Google account beyond name, email, and photo
How we use your data
- Authenticate your account and maintain your session
- Save your watchlist and service preferences across devices
- Improve the site based on aggregate usage patterns
We do not sell your personal data. We do not share it with third parties except as described below.
Where your data is stored
Your data is stored on servers in the United States. If you are an EU or UK resident, your data is transferred to the US. We rely on legitimate interest as our lawful basis for processing account data and consent for analytics cookies.
Third-party services
- Google OAuth — for sign-in. Subject to Google's Privacy Policy.
- TMDB — film data and images are provided by The Movie Database. No user data is shared with TMDB.
- Affiliate partners — when you click an affiliate link (e.g., Amazon), you are redirected to that partner's site, which is subject to their own privacy policy. We earn a commission on qualifying purchases.
- Google Analytics — aggregate traffic analytics. Subject to Google's Privacy Policy.
Cookies & local storage
Cookies
- dw_session — an httpOnly session cookie to keep you signed in (30-day expiry, rolling)
- dw_cookie_consent — localStorage used to remember your analytics cookie preference
- Google Analytics cookies — for aggregate traffic measurement (loaded only with your consent)
Local storage
- dw_services — remembers your streaming service preferences if you are not signed in
When you first visit DreadWatch, we ask for your consent before loading analytics cookies. You can change your preference at any time by clicking the cookie settings link in the site footer.
Data retention
Account data is retained as long as your account exists. Sessions expire after 30 days of inactivity. You can delete your account by contacting us at the email below — we will remove all associated data. If you request account deletion, we will process it within 30 days.
Your rights
You have the right to access, correct, delete, and port your personal data at any time by contacting us.
If you are an EU or UK resident, you also have the right to lodge a complaint with your local supervisory authority.
If you are a California resident, you have the right to know what personal information we collect and the right to request its deletion under the CCPA. DreadWatch does not sell personal information as defined by the CCPA.
Children's privacy
DreadWatch is not intended for children under 13. We do not knowingly collect data from children under 13.
Changes
We may update this policy. Material changes will be noted on this page with a revised effective date.
Contact
Questions about this policy: