Privacy Policy

Last updated: 9 July 2026

Who is responsible

The controller responsible for data processing on this website is:

Arved Klöhn
Onckenstraße 13
12435 Berlin, Germany
Email: contact@bingerator.com

Overview

Bingerator is a non-commercial hobby project, and we collect as little personal data as possible. We do not use tracking cookies, we do not run advertising, and we do not sell or share your data for marketing. This page explains the limited data that is processed when you visit.

Server log files

When you visit the site, our web server, hosted by Hetzner Online GmbH in Germany, may record standard access data such as your IP address, the date and time of the request, the page requested, the referring page, and your browser and operating system. This is used to operate the site securely and reliably, for example to detect and defend against attacks. The legal basis is our legitimate interest in a secure and functional website (Article 6(1)(f) GDPR). Log data is kept only as long as necessary for these purposes and is then deleted.

Analytics (Umami)

We use Umami, a privacy-friendly analytics tool that we host ourselves on our own server. Umami works without cookies and does not track you across websites. It records aggregated, anonymous usage statistics such as page views, approximate country, referrer and browser type. It does not store your full IP address and does not build a profile of you. The legal basis is our legitimate interest in understanding, in aggregate, how the site is used (Article 6(1)(f) GDPR).

Images

Poster and episode images shown on the site are served from our own server. We fetch them from The Movie Database (TMDB) once, from our server rather than from your browser, and cache them locally. Your browser therefore does not connect to TMDB, and no data about you is transmitted to TMDB when images are displayed.

User accounts and sign-in

You can use Bingerator without an account. If you choose to sign in, this happens exclusively through a third-party sign-in provider of your choice (for example Google or Discord). We do not store your email address, your name or any profile information. We store only the provider's stable technical user ID, for some providers a username that labels the connection in your account settings, and the time of your sign-in. During sign-in you are redirected to the provider, which processes your login under its own privacy policy. We never receive a password. Signing in creates a session on our server that keeps you signed in for up to 365 days; session tokens are stored only in hashed form. The legal basis is the provision of the account you request (Article 6(1)(b) GDPR). You can delete your account at any time on the account page. This permanently deletes your account, your linked sign-ins, your sessions and your ratings.

Ratings

You can rate series and episodes on a scale of 1 to 10, with or without an account. If you rate without being signed in, we create a pseudonymous account consisting only of a random internal number and store your ratings under it. A cookie keeps this pseudonymous account available in your browser, so your ratings are still there when you come back. We do not know who you are in this case, and if you clear your cookies, these ratings can no longer be linked to you. If you later sign in, ratings cast anonymously in the same browser are transferred to your account.

For each rating we store the rating value, the series or episode it refers to and the time. To protect against abuse and manipulation we also store a shortened, salted hash of your IP address; the salt changes daily, so this value cannot be linked back to your IP address after the day it was created. The legal bases are the provision of the rating feature you use (Article 6(1)(b) GDPR) and our legitimate interest in preventing abuse (Article 6(1)(f) GDPR). You can remove any rating by selecting your current rating again, and deleting your account removes all ratings stored under it.

Cookies

This website does not set any tracking or advertising cookies. We set first-party cookies only when you actively use certain features: a session cookie and small marker cookies when you sign in or rate something, so that your session and your ratings are available on later visits (stored for up to 365 days), and a short-lived technical cookie during the sign-in process itself. These cookies are strictly necessary for the features you request and are not used for tracking. If you only browse the site, no cookies are set at all.

Contact by email

If you email contact@bingerator.com, your message is delivered through an email forwarding service (ImprovMX) and stored in a mailbox hosted by Google (Gmail). We process the content of your message solely to handle your inquiry. The legal basis is our legitimate interest in responding to your request (Article 6(1)(f) GDPR). Some of these providers are based in the United States, which may involve a transfer of data there.

Third parties and international transfers

Our hosting provider, Hetzner Online GmbH, is based in Germany. Your data may reach providers outside the EU in two situations. If you write to us by email, your message passes through ImprovMX and Google, which operate in the United States. If you choose to sign in, the sign-in provider you select processes your login under its own privacy policy, and several of the available providers are based in the United States. Both rely on those providers' own safeguards. We do not otherwise share your personal data, and apart from the sign-in you initiate, the site makes no requests to third-party servers from your browser.

Your rights

Under the GDPR you have the right to access your personal data, to have it corrected or deleted, to restrict or object to its processing, and to data portability. You also have the right to lodge a complaint with a data protection supervisory authority. To exercise any of these rights, contact us at contact@bingerator.com.

Changes

We may update this policy as the site evolves. The date at the top shows when it was last changed.