Skip to content
tvtrove

Privacy policy

Last updated: 6 September 2026

tvtrove.com (“the site”) is a personal, non-commercial website of movie and TV reviews. It has no user accounts, no comment forms and no newsletter. This page explains the small amount of data that is processed when you visit, and your rights under the EU General Data Protection Regulation (GDPR) and equivalent laws.

Who is responsible

The data controller is the site’s author, Luis Fominaya. For anything related to this policy, write to hello@tvtrove.com.

What happens when you visit

Hosting

The site is a set of static files delivered by Amazon Web Services (Amazon CloudFront and Amazon S3). To deliver a page, AWS necessarily processes your IP address and the request details for the duration of the request. The site does not enable access logging, and no server-side record of your visit is kept by me. AWS’s own processing is covered by its privacy notice.

Legal basis: legitimate interest (Art. 6(1)(f) GDPR) in serving the site you asked for.

Posters, metadata and streaming availability

Poster images and provider logos are loaded directly from The Movie Database (TMDB) image servers, and streaming availability is fetched from the TMDB API when you open a review. Your browser therefore sends your IP address to TMDB, a US-based service, with each of those requests. TMDB’s handling of that data is described in its privacy policy. No identifier of yours is attached to the request beyond what any HTTP request carries.

Legal basis: legitimate interest (Art. 6(1)(f) GDPR) in showing the reviewed title and where it can be watched.

Country detection {#country}

Streaming availability differs by country, so on your first visit the site asks a small geolocation service, country.is, which country your IP address belongs to. The service receives your IP address and returns a two-letter country code; it sets no cookies. The result is stored only in your browser (localStorage) so the lookup runs once. You can change the country at any time with the picker in the header, and clearing your browser storage resets it.

Legal basis: legitimate interest (Art. 6(1)(f) GDPR) in showing availability for the country you are most likely in. If you would rather the lookup never runs, pick a country in the header before opening any review; the lookup is skipped once a choice is stored.

Preferences stored in your browser

Three settings are kept in your browser’s localStorage and never leave it: your colour theme, your chosen country, and your analytics consent choice. These are not personal data and are not cookies; they are not transmitted to me or anyone else.

If Google Analytics is enabled on the site, you will see a consent banner on your first visit. Analytics loads only after you choose “Allow analytics”. Until then, no analytics script runs and no analytics cookie is set.

If you consent, Google Analytics 4 sets cookies (_ga, _ga_*) that assign your browser a random identifier, and sends Google information about the pages you view, how you got here, your approximate location derived from your IP address, and your device and browser type. Google is a US company; the transfer relies on the EU-US Data Privacy Framework and Google’s standard contractual clauses. The data is used solely to see which pages are read and roughly how many people visit. It is retained by Google for 2 months (the shortest setting) and is not used for advertising; ad personalisation signals are permanently disabled.

You can withdraw consent at any time via Cookie settings in the footer. Withdrawing deletes the analytics cookies for this site and stops further collection. You can also opt out of Google Analytics everywhere with Google’s browser add-on.

Legal basis: consent (Art. 6(1)(a) GDPR and the ePrivacy rules on cookies).

If the site is published without an analytics identifier, none of the above applies and no banner is shown.

What the site does not do

Reviews link to IMDb, TMDB and JustWatch. Those sites have their own privacy policies, and this policy stops applying the moment you leave.

Your rights

Under the GDPR you can ask to access, correct, delete or restrict the processing of personal data about you, object to processing based on legitimate interest, request a portable copy, and withdraw consent without affecting earlier processing. Because the site keeps no records about individual visitors, in practice the data I could act on is the analytics data held by Google, and I will help with any request about it. You also have the right to lodge a complaint with your local supervisory authority; in Spain that is the Agencia Española de Protección de Datos (AEPD).

Children

The site is not directed at children under 16 and knowingly collects no data from them.

Changes

If the site starts processing data in a new way, this page changes first and the date at the top is updated.