Privacy, in plain sight.

Daymark is operated by Colin Morris in the United Kingdom. For UK data-protection purposes, Colin Morris is the controller responsible for deciding how personal information is used when you create or use a Daymark account.

For privacy questions or requests, email support@daymarktv.app.

Depending on how you use Daymark, we handle:

• Account information: your email address, password hash when you use password sign-in, email-verification state, account role, timezone and account dates.
• Google sign-in information: Google’s stable account identifier, your verified email address and, when available, your profile-picture URL.
• Your Daymark activity: followed shows, episodes you mark as watched, the time those choices were recorded and catalogue requests you support or submit.
• Security and service information: active sessions, recent successful sign-ins and sign-outs, account-verification, credential, session and timezone changes, request identifiers and limited technical logs used to secure and diagnose the service. The account history shown in Daymark does not contain IP addresses or browser details. Passwords, session cookies and authentication tokens are redacted from application logs.
• Communications: messages you send to support and transactional-email delivery information.

We use account and activity information to provide the service you ask for: creating and securing your account, placing releases in your timezone, remembering followed shows and watched episodes, processing catalogue requests and sending essential account emails. This is necessary to provide Daymark under our Terms.

We use limited technical, security and audit information for our legitimate interests in preventing abuse, protecting accounts, diagnosing faults and maintaining a reliable service. We may also use or retain information where necessary to meet a legal obligation or establish, exercise or defend legal claims.

You can see your recent account history on the Account page. Administrators can see the same limited history in the protected user register when supporting or securing an account. It does not include episode-level viewing history.

Daymark does not use account information for advertising, sell it, or send marketing email.

If you choose Sign in with Google, Google gives Daymark a signed identity credential. We verify it and retain the stable Google account identifier and verified email address needed to recognise your account. We also retain the optional profile-picture URL so you can choose between that image and the Daymark default. We do not receive your Google password or request access to Gmail, Google Calendar, Drive, contacts or other Google services. We do not retain Google access or refresh tokens.

Daymark’s sign-in and registration pages load Google Identity Services from Google. Google therefore receives the technical information normally sent when your browser requests that service and may use your existing Google browser session. If you select your Google profile image and it is available, your browser retrieves it from Google without sending the Daymark page as a referrer. Google’s own handling is described in the Google Privacy Policy.

You can remove Daymark from the connections in your Google Account. That stops the Google connection but does not by itself delete your separate Daymark account; contact us if you also want the Daymark account deleted.

Daymark sets one strictly necessary, first-party session cookie after you sign in. It contains a random identifier rather than your email address or viewing activity, and is used to keep you securely signed in.

Sessions expire after 14 days without authenticated activity and no later than 30 days after sign-in. Blocking this cookie prevents account sign-in from working.

If you choose “Allow analytics”, Daymark loads Google Analytics and it may set first-party _ga cookies for up to six months. We use aggregate reports about pages visited, journeys through the site, registration steps (email submission, password setup, and completion), approximate location, and browser or device type to improve Daymark. Registration events contain only the fixed entry point or sign-in method, not form values. Query strings are not sent, Google advertising signals and ad personalisation are disabled, and Daymark does not send your account identity or viewing history to Google Analytics.

Analytics stays off until you allow it. Your choice is remembered in local browser storage for up to six months. You can change it at any time using the Analytics settings button below; turning analytics off stops future collection and removes Daymark’s accessible Google Analytics cookies from that browser.

We use trusted service providers to operate Daymark, including:

• a hosting provider, which hosts the application, database, operational logs and support mailbox;
• a transactional email provider, which sends verification, password-reset and other essential account emails;
• Sentry, which receives minimized diagnostic details when the API or website encounters an error and stores them in its European Union region; and
• Google, when you choose Google sign-in, to verify your identity and provide an optional profile image, and when you separately allow Google Analytics, to provide aggregate usage reporting.

TVMaze supplies television catalogue information. Daymark’s server does not send your email address or Google identity to TVMaze. We may disclose information where required by law, to protect users or the service, or in connection with a legitimate reorganisation of the service. We do not sell personal information.

Account details, Google identity links, followed shows and watched state are normally kept while your account remains active. Deleting your account immediately removes these records, preferences, request support, notifications and account history from the live database and ends your sessions. Shared catalogue records and show requests remain, with your account associations removed. Essential account links expire after 24 hours for email verification and one hour for password reset; session limits are described above. Pending essential email requests are encrypted, expire after ten minutes, and are removed automatically after processing or expiry.

The account history visible to you and administrators is kept for 90 days and then deleted automatically. Separate internal records of administrator support actions may be retained for longer where reasonably needed for security, accountability or legal obligations.

Security logs, email-delivery records, support correspondence, and audit records are kept only for as long as reasonably needed for security, fault investigation, service continuity and applicable legal obligations. When an account is deleted, we delete or de-identify its personal information unless a limited record must be retained for one of those reasons. Backup copies expire under our backup retention arrangements; they are not individually rewritten on account deletion. We retain limited internal deletion records to reapply deletions before a restored backup is returned to service. Remaining administrators keep one inbox-only trace with the deleted account ID and a masked hint such as v***@e***.test, kept for 90 days and never emailed.

Error diagnostics in Sentry are available for up to 30 days. Daymark does not deliberately attach account IDs or email addresses to those events. Request bodies, cookies, headers and URL query strings are disabled, and additional filtering removes email-like values and secret-bearing fields before an event is sent.

Our providers may process information in the United Kingdom, European Economic Area and other countries. Where personal information is transferred outside the United Kingdom, we rely on legally recognised transfer mechanisms and appropriate safeguards where required. You can contact us at support@daymarktv.app if you would like more information about the safeguards that apply to your information.

Depending on the circumstances, UK data-protection law gives you rights to ask for a copy of your information, correct it, delete it, restrict or object to its use, or receive portable account information. You may also complain to the UK Information Commissioner’s Office.

You can permanently delete your account from Account → Delete account. There is no cancellation window. Account → Download your data provides a JSON copy of your account details and preferences, followed shows, watched episodes and show requests. For other personal information, help closing your account, another rights request, or disconnecting Google, email support@daymarktv.app from your account email address. We may need to verify the request before acting on it. The self-service download is not a complete subject-access response or a restorable Daymark backup.

Your right to object: Where we use your information on the basis of our legitimate interests, you have the right to object to that use. We will consider your objection in accordance with applicable data-protection law.

Daymark uses password hashing, verified Google identity tokens, server-side sessions, access controls and restricted authentication cookies to protect accounts. No online service can guarantee absolute security, so please use a unique password and contact us if something looks wrong.

We will update this notice when the service or its data practices materially change and will revise the date at the top. Questions and requests can be sent to support@daymarktv.app.