Privacy Policy

Last updated: July 7, 2026

Draft notice: this is a starting template reflecting Marquee's actual data practices, not reviewed legal advice. Have a lawyer review this before launch, especially for GDPR (EU users) or CCPA (California users) compliance, and fill in the bracketed placeholders below.

Marquee ("we", "us") provides a calendar app for tracking TV shows, movies, and football fixtures. This policy explains what data we collect, why, and how you can control it.

Data controller

Marquee is operated by an individual, not a registered company. The data controller under GDPR is the same person and address listed on our Impressum page — see that page for the full legal name and contact address. [Keep these two pages in sync: whenever you fill in your real name and address on the Impressum, this section should point to the same identity.]

Information we collect

Account information: your email address, and if you sign in with Google, your name and profile picture as provided by Google. Authentication is handled by Supabase; we never see or store your password (magic-link sign-in has no password at all).
Tracking data: the shows, movies, and football teams you follow, and when you added them.
Billing information: if you subscribe to Plus, payment is processed entirely by Stripe. We store your Stripe customer/subscription IDs and billing status, but never your card details.
Usage data: basic technical logs (IP address, timestamps) for security and abuse prevention.

Cookies and local storage

Marquee doesn't use advertising or tracking cookies. The web app stores your login session token in your browser's local storage (not a cookie) so you stay signed in between visits — this is strictly necessary for the app to function and isn't used for tracking or analytics.

How we use your information

To provide the core service: showing you a calendar of your tracked shows, movies, and fixtures.
To generate your personal calendar sync (.ics) feed, if you're on the Plus plan.
To process payments and manage your subscription.
To prevent abuse — for example, blocking disposable email addresses and duplicate accounts at signup.

Legal basis for processing (GDPR)

Contract performance (Art. 6(1)(b)) — your account, tracking data, and billing information, since we need these to provide the service you signed up for.
Legitimate interest (Art. 6(1)(f)) — usage/security logs and abuse-prevention checks (disposable-email blocking, duplicate-account detection), since we have a legitimate interest in keeping the service reliable and fair for everyone.
Consent (Art. 6(1)(a)) — if you sign in with Google, Google shares your name/profile picture with us based on the permission you grant during that sign-in flow.

Third parties we share data with

We use a small number of third-party services to run Marquee. We don't sell your data to anyone.

Supabase — authentication and database hosting.
Stripe — payment processing for Plus subscriptions.
The Movie Database (TMDB) and football-data.org — sources for show, movie, and fixture information. We only query these when you search or add something; we don't send them any of your personal data.
Google — if you choose to sign in with Google.

International data transfers

Your account, tracking, and billing data is stored on Supabase's EU (Ireland) region, so it stays within the EU/EEA. Some other providers we use — Stripe (payments) and Google (if you sign in with Google) — may process data on servers outside the EU/EEA, including in the United States. Where that happens, they do so under a recognized safeguard mechanism such as the EU Standard Contractual Clauses. [Confirm Stripe's and Google's current SCC/adequacy status directly with them, since these can change.]

Data retention

We keep your account data for as long as your account is active. If you downgrade from Plus to Free, your tracked shows are removed per our free-plan limits, but your account itself remains until you delete it.

Your rights (GDPR)

Marquee is operated from Germany, so the EU General Data Protection Regulation (GDPR) applies to your data regardless of where you're using Marquee from. Under GDPR, you have the right to:

Access — request a copy of the personal data we hold about you.
Rectification — ask us to correct inaccurate data (e.g. your display name).
Erasure — ask us to delete your account and associated data ("right to be forgotten").
Portability — request your data in a machine-readable format.
Object/restrict — object to or restrict certain processing of your data.
Complain — lodge a complaint with your local data protection authority, or Germany's, if you believe we've mishandled your data.

To exercise any of these rights, contact support@tvmarquee.com. If you're located in California, you have similar rights under the CCPA — the same contact applies. [Have counsel confirm this section covers every right required for the specific jurisdictions your users are in, since Marquee is offered worldwide.]

Children's privacy

Marquee is not directed at children under 13, and we don't knowingly collect data from them.

Changes to this policy

We'll update the date at the top of this page if this policy changes, and post material changes here.

Contact

Questions about this policy? Email support@tvmarquee.com.