Privacy Policy
Or TV No Spoilers
This policy explains how this application handles information and how to contact us about privacy.
Information we process
Or TV No Spoilers stores the match titles, dates, formats, desired durations, priorities, service names, availability times, notes, optional external links, viewing times, reminder choices and manually chosen watched states that you enter. It also stores your viewing window, break length, quiet and spoiler-free preferences, language and time zone. This information is saved in an application file on your iPhone and synchronized to a PostgreSQL database hosted on Railway when a connection is available. A random installation secret is stored in the iPhone Keychain; the server stores only its SHA-256 hash and creation time. There are no user accounts, email registration, sports feeds, analytics SDKs or advertising SDKs. Requests to the API and this website necessarily pass through hosting infrastructure, which may process IP addresses and request metadata. Application logs record request IDs, generic route names, methods, status codes, duration and error codes, without match content or credentials. A temporary in-memory rate limiter holds the direct network peer address and counters for up to one hour, lazily expiring them and losing them at process restart.
How we use information
Local records are used to create and adjust your personal spoiler-free viewing schedule, show matches waiting for another evening, maintain your manually marked history and schedule neutral local reminders. The server copy backs up this installation's records and preferences and returns them only to a request authorized by its installation secret. Secret hashes authorize access and revoked hashes prevent old clients from recreating deleted content. Operational request metadata is used to run, protect and troubleshoot the service. Optional practice examples remain inside the help screen and are never saved as personal records or sent to the server.
Service providers and sharing
Railway provides application hosting, database hosting and the network infrastructure that receives service and website requests. The application sends its backup data to this service and does not send it to analytics, advertising, messaging or sports data providers. Apple iOS handles local notification scheduling on the device and Keychain storage. Opening an optional external match link sends you to the selected external service, which has its own privacy practices and may show results; the app warns before opening it. The app has no outbound email or feedback delivery system. The public privacy contact is antalmatus34290@gmail.com; writing to it from your own email application is separate from app processing.
Data retention
Your local match records and preferences remain until you delete them or remove the application's local storage. The Keychain secret can persist separately from the application file and is not a recoverable account credential. Active server records remain until removed through the app. Individual match deletion removes that match from the live database on successful synchronization. Delete all my data removes live match content and settings and revokes the installation secret; the server retains its random secret hash, creation time and revocation time as a security tombstone. There is no scheduled application content export or additional application backup system. Railway's infrastructure logs, database storage and any operator or platform backups have separately controlled retention; no fixed retention duration or immediate removal from such backups is promised here. If infrastructure backup copies exist, deletion from the live database does not immediately erase those copies.
Deleting your information
Delete a match from its details to remove it locally and queue server deletion. In Settings, Delete all my data requires confirmation and, if a server credential exists, a successful online server deletion before local matches, plan, history and preferences are cleared and the credential is removed from Keychain. A failed deletion leaves the app data available and provides retry. Pending deletions synchronize when connectivity returns. There is no login or cross-device recovery: losing the installation secret means the private server copy cannot be recovered through the app. Contact antalmatus34290@gmail.com for privacy or deletion questions, but do not email your installation secret; without a safe way to identify the relevant installation, the operator may be unable to locate its records.
Permissions and your choices
The only requested system permission is local notifications. It is requested when you save a reminder, never on first launch. Reminders use neutral text without team names and are scheduled on the device for ten minutes before a viewing. You can change notification authorization in iPhone Settings and disable a reminder in the match form. Changing viewing times reschedules pending reminders. Permission withdrawal stops notification delivery but does not delete your match data. The app does not request location, contacts, microphone, camera or photo library access. Quiet mode masks titles in the app and covers the app-switcher preview; it does not change the content you deliberately entered into the private backup.
Your privacy rights
You can review and edit your match data and preferences in the app, remove individual records, or delete all your installation's data. Depending on your location, applicable law may provide access, correction, deletion, restriction, objection or other privacy rights. Send questions or requests to antalmatus34290@gmail.com. We will consider the request and applicable requirements and may need information that safely identifies the relevant data. We do not provide an account-based identity or recovery service and cannot promise to identify an installation after its secret has been lost. You may also contact the data protection authority available in your jurisdiction.
Security
Deployed client requests use HTTPS. Each installation receives a different cryptographically random secret; no shared client credential grants access to private records. The secret is kept in the device Keychain and only a hash is stored on the server. Private database operations are scoped to the authorized installation, and transactional locks prevent stale concurrent writes from recreating content after revocation. Application files use iOS data protection until first authentication. Server credentials remain in deployment configuration, not in the app. These measures reduce risk but cannot guarantee absolute security of devices, networks, hosting or backups. Keep your iPhone protected and do not share the installation secret.
Children’s privacy
This is a general-audience personal viewing planner and is not specifically directed to children. It contains no advertising or account registration. Please avoid entering sensitive personal information into match titles or notes. If you believe a child's personal information has been provided inappropriately, contact antalmatus34290@gmail.com so the circumstances and available deletion options can be considered.
Changes to this policy
This policy describes the implemented app and service as of the effective date above. If processing changes, this page will be updated with a new effective date and any additional notice required by applicable law. The current Privacy Policy is accessible from the app's Settings and from the public home page without a login or cookies.