Sledi is a TV and movie tracking app. This policy explains what data Sledi collects, why, and what you can do about it. It is written to be readable — if anything is unclear, ask.
1. Who is responsible for your data
Sledi is an independent project operated by Nejc Podlogar, based in Slovenia, European Union. For the purposes of the EU General Data Protection Regulation (GDPR), Nejc Podlogar is the data controller.
Contact: npprivacy@duck.com
2. The short version
- Sledi collects your email address and the shows and movies you track.
- Sledi does not show ads, does not sell your data, and does not share it with advertisers or data brokers.
- Sledi has no social features — your watch history, ratings, reactions, and notes are private to you.
- You can export everything you’ve tracked at any time, and delete your account and all its data permanently, from inside the app.
3. What Sledi collects
Information you provide:
- Email address — required to create an account and sign in. Sledi uses one-time codes sent by email; there are no passwords.
- Profile image — optional, if you choose to set one.
- Your library and watch history — the shows and movies you add, which episodes you mark as watched, and when.
- Ratings, reactions, and notes — optional. Star ratings, reactions, and any private notes you write about an episode or film.
- Imported history — if you import a TV Time data export, Sledi reads the files needed to reconstruct your library and watch history. The uploaded export file is processed and not retained afterwards.
Information collected automatically:
- Crash and error reports — if the app crashes or hits an error, a diagnostic report is sent to Sentry (see §5) so it can be fixed. These reports are scrubbed of personal information: they do not include your email, your watch history, or your notes.
What Sledi does not collect:
- No advertising identifiers, no ad tracking, no behavioural profiling.
- No location data.
- No contacts, photos (beyond a profile image you deliberately choose), or other device content.
4. Why Sledi processes it, and the legal basis
| What | Why | Legal basis (GDPR Art. 6) |
|---|---|---|
| Email address | To create your account, sign you in, and send one-time login codes | Performance of a contract (Art. 6(1)(b)) |
| Library, watch history, ratings, reactions, notes | To provide the core service — this is the app | Performance of a contract (Art. 6(1)(b)) |
| Imported TV Time data | To carry your history over, at your request | Performance of a contract (Art. 6(1)(b)) |
| Crash and error reports | To find and fix defects and keep the app usable | Legitimate interests (Art. 6(1)(f)) |
Sledi does not process your data for marketing, profiling, or automated decision-making.
5. Who else is involved (processors)
Sledi is built on a small number of third-party services. They process data on Sledi’s behalf, under contract, and only for the purposes below.
- Supabase — hosting, database, and authentication. Stores your account and everything you track. Data is stored in the EU region.
- Resend — sends the one-time login codes to your email address. Receives only your email address and the code.
- Sentry — crash and error reporting. Receives technical diagnostics with personal information scrubbed out.
- TMDB (The Movie Database) — provides show and movie metadata (titles, posters, air dates). Sledi requests information about shows from TMDB. Your personal data is not sent to TMDB.
Sledi does not share your personal data with anyone else, does not sell it, and does not disclose it for anyone’s marketing purposes.
Sledi may disclose data if legally required to do so — for example, in response to a valid legal order — but will not volunteer it.
6. International transfers
Data is stored in the EU. Some processors above may process limited data outside the EU/EEA; where they do, they rely on the European Commission’s Standard Contractual Clauses or an equivalent safeguard.
7. How long it’s kept
Your data is kept for as long as your account exists. If you delete your account, it is deleted permanently and immediately (see §9) — there is no archived copy and no anonymised retention of your watch history.
Crash reports are retained by Sentry on a rolling basis (typically up to 90 days) and are not linked to your identity.
8. Your rights
Under GDPR you have the right to:
- Access your data — see §9, Export.
- Portability — receive your data in a machine-readable format (§9).
- Erasure — delete your account and data (§9).
- Rectification — correct anything inaccurate; most of it is editable in the app, and anything else can be corrected on request.
- Restriction and objection — ask Sledi to stop or limit processing based on legitimate interests (i.e. crash reporting).
- Withdraw consent where processing relies on consent.
To exercise any right not covered by the in-app tools, email npprivacy@duck.com. Sledi will respond within 30 days.
If you believe your data has been mishandled, you can lodge a complaint with the Slovenian Information Commissioner (Informacijski pooblaščenec, ip-rs.si) or your local supervisory authority.
9. Exporting and deleting your data
Export. In the app: Profile → Privacy & Data → Export my data. You get a JSON file containing your library, your full watch history with dates, and your ratings, reactions, and notes. No request, no waiting, no email exchange.
Deletion. In the app: Profile → Privacy & Data → Delete account. This permanently deletes your account and everything associated with it — watch history, library, ratings, reactions, notes, and profile image. It is immediate and cannot be undone.
If you no longer have the app installed, you can request deletion at getsledi.com/delete or by emailing npprivacy@duck.com from your account’s email address.
Sledi was built because another service shut down and took people’s viewing history with it. Getting your data out is a feature, not a favour.
10. Security
Your data is protected by row-level security: the database enforces that only your account can read or write your rows. Connections are encrypted in transit. Sledi uses one-time email codes rather than passwords, so there is no password to leak.
No system is perfectly secure. If a breach affecting your personal data occurs, you will be notified as required by law.
11. Children
Sledi is not intended for children under 16, and Sledi does not knowingly collect personal data from them. If you believe a child has created an account, contact npprivacy@duck.com and it will be removed.
12. Changes
If this policy changes materially, notice will be given in the app or by email before the change takes effect. The effective date at the top always reflects the current version.
13. Attribution
Show and movie data provided by TMDB. This product uses the TMDB API but is not endorsed or certified by TMDB.