We collect information you provide directly, information generated through your use of MyListZone, and limited technical data needed to operate the Service securely.
This may include account details, profile information, user-created content, library activity, and device or browser metadata. The specific categories are described in the sections below.
Account and profile data
When you register, we may collect your name, email address, profile photo, display name, and account preferences. You can update most profile fields in your account settings.
We use Better Auth to manage authentication, sessions, and account security. You may sign in with Google Sign-In, Facebook Login, X (Twitter) Login, or email and password when that option is available.
Usage and library activity
We collect information about how you interact with the Service, including watchlist entries, viewing status, ratings, reviews, lists, search queries, and browsing activity within MyListZone.
This data helps us provide core features such as progress tracking, recommendations, and personal statistics.
User-generated content
We store content you create on the Service, including reviews, ratings, lists, comments (when available), notes, tags, and profile information.
Technical data
We may automatically collect IP address, browser type, device identifiers, operating system, referral URLs, and log data related to errors or performance. This information is used for security, debugging, and service reliability.
We use collected information to provide, maintain, and improve MyListZone, including operating your watchlist, lists, reviews, and discovery features.
We may use your data to personalize recommendations, display statistics, prevent abuse, respond to support requests, and communicate important service updates.
We do not sell your personal information. Any use of data for analytics or product improvement is described in this policy and, where required, subject to your consent or opt-out choices.
Content you create — including lists, reviews, ratings, comments, notes, and tags — is stored to provide the features you use. Private content is visible only to you unless you choose to make it public.
Public user content may be displayed to other users and indexed within the Service. You control visibility settings where the product supports them.
We may process user content to operate the Service, enforce our Terms, detect spam or abuse, and improve features such as search and recommendations.
If you enable a public profile, certain information such as your display name, avatar, public lists, and public reviews may be visible to other users and visitors.
You can limit what appears on your public profile through account and privacy settings. Information you mark as private will not be shown on your public profile.
Even when content is public, we apply community guidelines and may remove material that violates our policies or applicable law.
We do not sell your personal information. We may share data with service providers who assist us in operating the Service — subject to contractual safeguards where applicable.
Our infrastructure is self-managed on a VPS using Docker, Traefik, PostgreSQL, and MinIO object storage. We may also use CDN services, backup providers, and third-party APIs as needed to run the Service.
We may disclose information if required by law, to protect rights and safety, to enforce our Terms, or in connection with a merger, acquisition, or asset sale with appropriate notice where required.
Aggregated or de-identified data that cannot reasonably identify you may be used for research, analytics, or product improvement.
MyListZone integrates with third-party services to provide catalog metadata, authentication, analytics, and related functionality.
Catalog and metadata providers include TMDB (movies and TV), IGDB (games), and Open Library (books). Trailer embeds may use YouTube. Authentication may use Google OAuth, Facebook Login, and X Login. Analytics uses Google Analytics 4.
Movie, TV, game, and book metadata is sourced from these third-party providers. Trademarks, logos, cover art, posters, and other intellectual property remain the property of their respective owners.
These third parties process data according to their own privacy policies. We encourage you to review the policies of any third-party service you interact with through MyListZone.
We are not responsible for the privacy practices of third-party websites or services linked from the Service.
We retain personal information as follows:
Account data is retained while your account is active.
Deleted accounts are retained for 30 days before permanent deletion (recovery period).
Logs are retained for up to 90 days unless required longer for security or legal reasons.
Backups are retained for up to 30 days.
Anonymized or aggregated data may be retained indefinitely for analytics and product improvement.
You may delete your account from Account Settings. After you request deletion, your account enters a 30-day recovery period before permanent deletion.
Upon permanent deletion, we will remove or anonymize your personal data subject to legal retention requirements. Some information may remain in backups for up to 30 days or be retained where required by law. Public content you posted may be anonymized rather than fully deleted in certain cases.
Data export is available in-app. Additional exports are available upon request by email so you can retain a copy of your watchlist, lists, and reviews before deletion.
Depending on where you live, you may have rights regarding your personal information. Subject to applicable law, these may include the right to:
Access, correction, and deletion
Request access to the personal data we hold about you, ask us to correct inaccurate data, or request deletion of your data, subject to legal exceptions.
Export and portability
Request a copy of your data in a portable format. In-app export is available, and additional exports may be requested by email.
Restriction, objection, and consent withdrawal
Where applicable, request that we restrict or object to certain processing, or withdraw consent for optional processing such as analytics cookies. Withdrawal does not affect the lawfulness of processing before withdrawal.
Complaints
Lodge a complaint with a supervisory authority in your jurisdiction if you believe our processing violates applicable data protection law.
California residents
Where the California Consumer Privacy Act (CCPA) or similar laws apply, you may have rights to know, delete, and correct personal information, and to opt out of the sale or sharing of personal information. MyListZone does not sell personal information.
We implement technical and organizational measures designed to protect your information, including encryption in transit, access controls, and secure session management through Better Auth.
No method of transmission or storage is completely secure. While we strive to protect your data, we cannot guarantee absolute security.
If we become aware of a data breach that affects your personal information, we will notify you and relevant authorities as required by applicable law.
MyListZone is intended for users who are at least 13 years old. Users under 13 may not create an account or use the Service.
If local law requires a higher minimum age (such as 16 in certain EEA jurisdictions without parental consent), those local requirements apply.
We do not knowingly collect personal information from children under the applicable minimum age. If you believe we have collected such information, please contact us and we will take steps to delete it promptly.
User data may be processed and stored on servers located outside Bangladesh depending on hosting providers, CDN services, backup providers, or third-party APIs.
Where required by applicable law (such as GDPR), MyListZone relies on appropriate safeguards, including Standard Contractual Clauses (SCCs) or equivalent contractual protections when supported by service providers.
If you are located in the European Economic Area, United Kingdom, California, or other regions with specific privacy rights, the rights described in Your Privacy Rights may apply to you.
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last Updated" date and may provide additional notice through the Service or by email.
Your continued use of MyListZone after changes take effect constitutes acceptance of the updated policy. We encourage you to review this page periodically.
If you have questions about this Privacy Policy or wish to exercise your privacy rights, contact us:
MyListZone
Privacy: privacy@mylistzone.com
General contact: contact@mylistzone.com
Social Login Data
You may sign in using third-party identity providers, including Google, Facebook, and X (Twitter). When you use social login, we receive information from the provider as permitted by your account settings and the provider's policies.
This typically includes a unique provider identifier, name, email address, and profile image. We do not receive your social network password.
Authentication is handled through Better Auth and the applicable OAuth flows. We store only the data needed to identify your account and maintain your session.