Privacy Policy
Last updated: September 12, 2026
This policy explains how Guillaume Paul Raoul Bourlart, sole proprietor (EI), trading as Mobiverse Games (the "Data Controller") collects and processes your personal data in connection with the TV Mark mobile application and its related services, in accordance with Regulation (EU) 2016/679 (the "GDPR") and the French Data Protection Act (loi « Informatique et Libertés »).
1. Data we collect
Guest mode: if you use the App without creating an account, your data (library, watched episodes, lists, settings) is stored locally on your device only and is not transmitted to any server. The paragraphs below about accounts and cloud-hosted data apply only to signed-in users. Section 8 (advertising) applies to the free version, including in guest mode.
1.1 Account data
- technical identifier (UID), email address, display name and profile picture provided by your sign-in provider (Google or Apple), or the email address you enter when creating an email/password account. Password authentication is handled by Firebase Auth;
- public username (@username), bio and avatar that you choose;
- app settings (language, theme, notification preferences, privacy settings).
1.2 Service usage data
- your library: tracked shows and movies, statuses, ratings (0.5 to 5), favorites, episodes marked as watched (with timestamps), lists;
- viewing statistics computed from your activity (total watch time, genres, regularity);
- published content: comments (associated with your username), replies, reactions ("likes"), reports, and the list of users you block;
- files you voluntarily import (for example a TV Time export), deleted after processing;
- push notification tokens (FCM) associated with your devices.
1.3 Subscription data
- subscription status, product identifier, store used and subscription events provided by RevenueCat and the app stores (App Store, Google Play);
- we never collect your payment card details: payment is processed exclusively by Apple or Google.
1.4 Technical data
- technical logs and diagnostic data (crash reports via Crashlytics) required for security and proper operation of the service (via Google Firebase);
- analytics data (Firebase Analytics), disabled by default and collected only if you enable the option in the settings;
- advertising identifiers, only with your consent (see Section 8).
2. Purposes and legal bases
- Providing the service (account, library, calendar, community, import/export) — performance of the contract (Art. 6(1)(b) GDPR);
- Managing the premium subscription — performance of the contract and legal obligations (accounting);
- Push notifications (new episodes, replies, etc.) — performance of the contract; can be disabled at any time in the settings;
- Moderation and security (abuse detection, handling of reports, logging of moderation actions) — legitimate interest and legal obligations;
- Personalized advertising and analytics (AdMob, analytics) — consent (Art. 6(1)(a) GDPR), withdrawable at any time in the settings;
- Handling rights-holder requests — legal obligation and legitimate interest.
3. Recipients and processors
Your data is processed by our technical service providers, acting on our instructions:
- Google Firebase (Google Ireland Ltd / Google LLC): authentication, database, file storage, notifications, server functions, analytics (opt-in) and crash reporting — main hosting in Europe (europe-west region), file storage in the United States (us-east1 region);
- RevenueCat, Inc.: technical management of subscriptions (pseudonymous user identifier = Firebase UID);
- Google AdMob: ad serving in the free version (see Section 8);
- TheTVDB: our servers query this service to retrieve metadata about shows and movies; none of your personal data is sent to it.
Some providers are located in the United States. Transfers are covered by appropriate safeguards (the EU–US adequacy decision for entities certified under the Data Privacy Framework and/or the European Commission's Standard Contractual Clauses). No data is ever sold to third parties.
4. Retention periods
- account data and library: for the lifetime of the account, then deleted;
- import files: deleted automatically after processing;
- generated exports: download links valid for 7 days, files purged afterwards;
- in-app notifications: purged after 90 days;
- subscription events: kept for 12 months for traceability, then pseudonymized (accounting obligations); pseudonymized as soon as the account is deleted;
- moderation logs and rights-holder requests: for as long as necessary to handle disputes, in accordance with statutory limitation periods.
5. Your rights (GDPR)
You have the following rights over your data:
- Access and portability: the "Export my data" feature in the App generates a complete export (JSON or CSV) of your profile, library, watched episodes, lists, statistics and comments, free of charge (download link valid for 7 days);
- Rectification: your profile information and settings can be edited directly in the App;
- Erasure: the "Delete my account" feature erases all of your data (library, episodes, lists, statistics, settings, files); comments that have replies are anonymized ("Deleted user"); your RevenueCat account is deleted as well;
- Withdrawal of consent: personalized advertising and analytics can be turned off in the App's privacy settings;
- Objection and restriction: for processing based on legitimate interest;
- Post-mortem directives: you may send us instructions regarding the fate of your data.
To exercise a right that is not covered by the App's built-in features, write to contact@mobiversegames.com. We reply within one month. You also have the right to lodge a complaint with the French supervisory authority, the CNIL (www.cnil.fr), or with your local supervisory authority.
6. Security
Your data is protected by appropriate technical and organizational measures: encryption in transit (TLS), strict per-user access rules (Firestore security rules), app attestation (App Check), segregation of administrative privileges, logging of sensitive actions and rate limiting. In the event of a data breach likely to result in a high risk to your rights, you will be notified in accordance with Article 34 of the GDPR.
7. Minors
TV Mark is intended for adults aged 18 and over. An eligibility declaration is requested before application services are started. Only the acceptance is stored locally; no date of birth or identity document is requested. This declaration is not an identity verification. We do not provide a parental-consent access route. If you believe a child is using the service, contact contact@mobiversegames.com so we can investigate and take appropriate action.
8. Advertising
8.1 Ad serving (Google AdMob)
The free version of the App displays ads (interstitials) served by Google AdMob (Google Ireland Ltd / Google LLC). The Premium subscription removes all advertising. In order to serve ads, AdMob may process advertising identifiers and technical device data, depending on the consent choices described below.
8.2 Consent (GDPR / DMA — Google UMP form)
On first launch, a certified consent management platform (the Google "User Messaging Platform" form) is shown to you in accordance with the GDPR, the ePrivacy Directive and the Digital Markets Act (DMA). It lets you accept or decline personalized advertising, and you can change your choice at any time from the App's privacy settings.
8.3 iOS App Tracking Transparency (ATT)
On iOS, the system App Tracking Transparency (ATT) prompt asks for your permission before any access to the device's advertising identifier (IDFA) for tracking purposes. If you decline, no cross-app ad tracking takes place and the IDFA is not accessible.
8.4 Non-personalized ads
Declining consent (UMP) or tracking (ATT) does not prevent you from using the App: non-personalized (contextual) ads may still be shown. They rely on limited data (serving context, aggregated technical data) used for frequency capping, fraud prevention and the proper functioning of ad delivery.
8.5 Advertising identifiers and SKAdNetwork
Advertising identifiers (IDFA on iOS, the Android Advertising ID) are processed only with your consent and, on iOS, only with your ATT permission. You can reset or disable them in your device settings. On iOS, ad campaign measurement may use SKAdNetwork, Apple's privacy-preserving attribution framework, which provides aggregated data and does not identify you individually.
9. US State Privacy Rights
If you are a resident of California (CCPA/CPRA) or of another US state with a comprehensive privacy law, you have, among others, the rights to access, delete and correct your personal information, and to opt out of the "sharing" of personal information for cross-context behavioral (targeted) advertising. TV Mark does not "sell" personal information within the meaning of these laws. Serving personalized ads may qualify as "sharing" under the CPRA: you can opt out by declining ad consent in the App's settings (and, on iOS, through the ATT prompt). These rights can be exercised through the built-in features (data export, account deletion, settings) or by writing to contact@mobiversegames.com. You will not be discriminated against for exercising your rights.
10. Contact
Questions about personal data: contact@mobiversegames.com.
Full identity of the data controller: see the
Credits & legal notices page.
11. Changes to this policy
This policy may be updated to reflect changes in the service or in the law. In the event of a substantial change, you will be informed in the App before the new version takes effect.