Legal
Privacy
Last updated 7 August 2026 · Datenschutzerklärung · Reverina (reverina.tv)
Reverina helps you understand the films and series you love, and find what to watch next. This notice explains what personal data we process, on what legal basis, and what rights you have under the GDPR (DSGVO).
1. Controller (Verantwortliche)
Joelle Jaracz
Kleinunternehmen
Sankt-Sebastianusstraße 1
52399 Merzenich
Germany
Email: hello@reverina.tv
Phone: +49 172 2827939
See also the Impressum.
2. What we process
- Account. Email, display name, password hash (if you use email sign-in), and optional profile photo. Google Sign-In may provide name, email, and avatar.
- Library signals. Watched titles, favourites, ratings, character picks — used for recommendations and Cinematic DNA.
- Journals. Notes you write about titles. Private by default; included in DNA only if you opt in.
- Cinematic DNA & AI replies. Generated readings and chat answers based on your signals (and opted-in journals). Private by default; you choose whether to publish a reading on your profile.
- Technical data. IP address (processed at the edge), approximate country, user agent, and security/rate-limit logs — to run the service, prevent abuse, and show local streaming availability.
- Transactional email. Address confirmation and password reset only. No marketing list.
3. Purposes and legal bases
- Providing the service(account, library, DNA, recommendations, membership limits) — Art. 6(1)(b) GDPR (contract / pre-contractual steps).
- Security, abuse prevention, availability— Art. 6(1)(f) GDPR (legitimate interests in a working, secure service).
- Legal obligations(e.g. tax records if you buy a membership) — Art. 6(1)(c) GDPR.
- Optional publishing of profile / DNA — based on your choice; withdrawal = make private again.
We do not sell personal data. We do not use your journals or DNA to train unrelated public models for other products.
4. Processors and recipients
We use service providers who process data on our instructions where needed to run Reverina:
- Cloudflare — hosting, CDN, D1/R2/Workers AI, security (USA / global edge; Cloudflare participates in relevant transfer mechanisms).
- Resend — transactional email delivery.
- Google — only if you choose Google Sign-In (identity data from Google).
- TMDB / JustWatch / TVmaze — film and TV metadata and availability (queries are about titles, not your private journals).
Payment providers (e.g. Stripe) process billing data if you purchase a membership.
5. International transfers
Some providers are in the United States or operate globally. Where personal data leaves the EEA/UK, we rely on an adequacy decision (including the EU–US Data Privacy Framework where applicable) and/or Standard Contractual Clauses with the provider, plus technical measures (TLS in transit).
6. Cookies and analytics
Essential cookies are used for sign-in/session. Cloudflare Web Analytics, if enabled, is designed to be privacy-preserving and does not use advertising cookies. We do not run a marketing pixel stack. If that changes, we will update this notice and obtain consent where required.
7. Retention
- Account and library data: for the life of the account, then deleted or anonymised after you request deletion (backups may lag for a limited period).
- Security and rate-limit logs: short-lived, typically days to a few weeks.
- Invoices / tax-relevant billing records: as required by German law (generally up to 10 years) when memberships are sold.
8. Your rights
Under the GDPR you may request:
- Access (Auskunft)
- Rectification
- Erasure
- Restriction of processing
- Data portability
- Objection to processing based on legitimate interests
- Withdrawal of consent where processing is consent-based
Contact hello@reverina.tv. You also have the right to lodge a complaint with a supervisory authority — for example the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (NRW), as the controller is based in Merzenich (NRW).
9. AI readings and profiling
Recommendations and Cinematic DNA are interpretive taste readings, not medical or psychological diagnoses and not solely automated decisions with legal or similarly significant effects under Art. 22 GDPR. You can avoid DNA generation, keep it private, or delete your account.
10. Children
Reverina is not directed at children under 16. If you believe a child has created an account, contact us and we will delete it.