StaseraSign in

Privacy Policy

Last updated 20 July 2026

This policy explains what personal data Stasera collects, why, and the rights you have over it. Stasera is a free, personal project and takes a data-minimal approach: it collects only what is needed to run the service.

Data controller

The data controller responsible for your personal data is Augum Holding AS (organisation number 918 952 128), a company registered in Norway. For any privacy request, email hi@stasera.app.

What data we process

  • Account credentials — your email address and a hash of your password (never the password itself), managed by Convex Auth.
  • Sign-in identifiers — if you sign in with Google, the OAuth subject identifier and email returned by Google.
  • Watch history — the shows and films you follow and the episodes you mark as watched.
  • Imported data — if you choose to import from TV Time, the viewing history contained in the file you upload.
  • Usage analytics— anonymous, aggregated product usage and anonymous session replays measured in a cookieless way (see “Product analytics and session replay” below).
  • Diagnostic logs — to keep the service working we log the metadata lookups it makes on your behalf, including the endpoint, the search text you typed, and whether the call succeeded. These logs are used for troubleshooting only and are deleted automatically after 30 days.

Why we process it and our legal basis

  • To provide the service — creating your account, authenticating you, and storing your watch history. Legal basis: performance of a contract with you.
  • To improve the product — understanding aggregate usage patterns and diagnosing problems. Legal basis: legitimate interest in maintaining and improving the service, balanced against your privacy.

Processors and third parties

  • Convex — database and backend hosting (United States, under EU Standard Contractual Clauses).
  • Vercel — application hosting and content delivery.
  • TMDB — show and film metadata. Lookups happen server-side; your personal data is never shared with TMDB.
  • PostHog (EU) — cookieless usage analytics and session replay, hosted in the European Union.

We do not sell your personal data.

Product analytics and session replay

Stasera uses PostHog (EU Cloud, hosted in the European Union) to understand how the service is used — which features people use and where they run into problems — including anonymous replays of how the interface is operated.

  • Analytics is fully anonymous: usage data and replays are never linked to your account, email, or watch history, and no identified analytics profiles are created.
  • PostHog sets no cookies; identifiers live only in your browser’s memory and are discarded when you close the page.
  • Session replays mask all visible text and all form inputs, so usernames, watchlists, and other personal details are not readable in recordings.
  • Legal basis: our legitimate interest in understanding and improving the service.

Cookies and local storage

Stasera uses only what is necessary to work. Authentication tokens keep you signed in, and your theme preference is stored in your browser’s local storage. Analytics are cookieless: PostHog EU runs in memory-only mode and sets no tracking cookies, and Vercel Analytics and Speed Insights are cookieless by design. Because no tracking cookies are set, there is no consent banner.

Retention and deletion

Your data is kept for as long as your account exists. Diagnostic logs are deleted automatically after 30 days. You can delete your account at any time from the app’s settings; doing so permanently removes all of your data, including your authentication record and your entire watch history.

Your rights

Under the GDPR you have the right to access, correct, and delete your personal data, to object to or restrict processing, and to data portability. You can download a copy of your data at any time from Settings → Export my data, which produces a machine-readable export of your watch history. You also have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet). To exercise any of these rights, email hi@stasera.app.

Changes to this policy

This policy may be updated from time to time. Any changes will be posted on this page with an updated date above.