The short version: Viewlane uses account and viewing data to provide the app. It does not sell personal information, display advertising, or use the public website for analytics or tracking.
1. Scope
This policy applies to the Viewlane iPhone and Android applications, the private pilot service, and this website. Viewlane is currently limited to invited pilot users and is not open for public registration.
2. Information Viewlane processes
- Account information: a Viewlane account identifier; the Apple or Google account identifier used to sign in; and an email address or display name when the sign-in provider supplies it.
- Viewing information: titles added to the library, viewing status, watch and rewatch dates, episode and movie progress, ratings, favourites, notes, and related preferences.
- App settings: preferences such as rating style, optional movie minute tracking, developer controls, icon selection, and display choices.
- Metadata activity: searches, title identifiers, and metadata requests needed to return television and movie information from TMDB.
- Security and operational information: session records, authentication events, timestamps, and limited request information that hosting providers may process to operate and protect the service, such as an IP address or user-agent.
The Viewlane website does not use advertising cookies, behavioural analytics, account forms, or third-party tracking pixels.
3. How the information is used
- Provide and synchronize the user's library, progress, history, ratings, schedules, and statistics.
- Authenticate invited users and prevent access to another user's data.
- Retrieve and cache television and movie metadata.
- Maintain private backups, diagnose service failures, prevent abuse, and recover from data loss.
- Respond to support, privacy, recovery, and deletion requests.
4. Service providers
Viewlane relies on a limited group of service providers to operate:
- Supabase provides authentication, database storage, and server functions.
- Cloudflare provides private backup storage and hosts this static website.
- Apple and Google provide optional account authentication.
- The Movie Database (TMDB) provides television, movie, cast, crew, artwork, release, and rating metadata.
These providers process information only as needed to provide their services and under their own applicable terms and privacy commitments. Viewlane does not sell personal information or share it with data brokers or advertisers.
5. Storage, retention, and backups
Active account data is retained while the account remains active. Private disaster-recovery backups are created daily and retained for no more than 30 days.
When deletion is requested, account data becomes inaccessible immediately and a 30-day recovery window begins. At the end of that window, the live account and its personal data are permanently purged. A backup created before permanent deletion may retain an inaccessible copy until that backup reaches its own expiry date. As a result, the maximum practical period from the initial deletion request to expiry from every routine backup is approximately 60 days.
Backups are used only for disaster recovery. A restored backup must not reactivate or return data belonging to an account whose deletion deadline has passed.
6. Account deletion and recovery
Users can request deletion in Viewlane under Library → Settings → Delete Viewlane Account. Viewlane requires fresh verification through every linked Apple or Google identity, revokes those provider authorizations, signs out every Viewlane session, and immediately suspends personal data.
During the displayed 30-day recovery window, signing in to the same account and selecting Restore Account cancels deletion. After the deadline, recovery is not available. Full instructions and the inaccessible-device fallback are available on the account-deletion page.
7. Security
Viewlane uses encrypted network connections, provider-based authentication, account-level database access controls, protected server secrets, rate limits for sensitive operations, and private backups. No system can guarantee absolute security, but access is deliberately limited to what the private pilot requires.
8. International processing
Viewlane is operated from Canada. Service providers may process information in Canada, the United States, or other locations where they operate, subject to their contractual and legal safeguards.
9. Children
Viewlane is not directed to children under 13 and does not knowingly invite children to participate in the private pilot.
10. Changes to this policy
This policy will be updated when Viewlane's data practices materially change. The effective date above will be revised, and pilot users will be informed when a change meaningfully affects their choices.
11. Contact
For privacy questions or requests, email [email protected]. Do not send passwords, authorization codes, private keys, or other sign-in secrets.