Last updated October 21, 2026
Who is responsible
Dramaddict is operated by David, who is responsible for deciding how personal data is used for this service. Privacy questions and data-rights requests can be sent to dramaddict.support@gmail.com.
What we store
- Account details such as your email, username, display name, and authentication session.
- The library, ratings, progress, diary entries, profile choices, uploaded profile images, friend connections, blocks, reports, and preferences you choose to save.
- Basic technical request data used by the hosting and authentication providers to deliver the service and prevent abuse.
Password authentication is handled by Supabase Auth. Dramaddict never stores a readable password in its own database or files.
How and why the data is used
Your data powers the features you ask for: your library and diary, profile, statistics, and friend activity. Account, library, profile, and friendship data is processed to provide that service. It is not sold and is not used for advertising.
Security logs, rate limits, reports, blocks, and moderation records are processed for the legitimate interests of protecting members, preventing abuse, and keeping the service reliable. Where the law requires consent for an optional use, that use will be presented separately and can be withdrawn.
Visibility and sharing
Profile visibility can be set to public, friends only, or private in Account settings. Separate controls cover diary entries, ratings, statistics, and whether visitors can send you a friend request from your profile. New profiles start as public until you change this. A private profile keeps those sections from visitors while retaining the username needed to identify the account, and signed-in members can still find it by username or display name in friend search. Public profile information can be viewed and shared by other people.
Services Dramaddict relies on
- Supabase provides authentication, database, and private storage, and sends account emails such as confirmations and password resets.
- Cloudflare Turnstile checks the sign-up, sign-in and password-reset forms, and account changes confirmed with your password, for automated abuse. It processes technical signals from your browser, such as your IP address, only to tell people from bots.
- TMDB provides catalogue, cast, image, and runtime information. Loading TMDB artwork causes your browser to request that image from TMDB’s image service.
- When you start an MDL import, Dramaddict sends the public MyDramaList username you entered to an independent, unofficial import service that reads public MyDramaList lists. If that service is unavailable, Dramaddict may read the public MyDramaList page directly. Neither is operated or endorsed by MyDramaList.
- The hosting provider runs the site on Cloudflare’s network, which delivers pages and may retain security logs.
These providers may process data in countries outside the European Economic Area. The operator will select provider regions and rely on the transfer safeguards described in each provider’s applicable data protection terms.
How long data is kept
Your account content is kept while the account is active. Library items, diary entries, friendships and profile images you remove are deleted when you remove them. Deleting your account removes its profile, library, diary, friendships, blocks and uploaded files straight away.
- Sign-ups that are never confirmed can be removed after one hour.
- Rate-limit records, which hold only a scrambled form of your address or account ID, are cleared within about a day.
- Error records are kept for 30 days after the last time the error happened. They hold no names, email addresses or account IDs.
- Reports and moderation records are kept for up to two years after a report is closed or a suspension ends, or longer only if they are needed for a legal claim. Reports you filed stay with the moderators without your account attached if you delete it.
- Hosting and authentication providers keep their own technical and security logs, normally for a few days, and any provider backups for up to 30 days before they are overwritten.
Security
Dramaddict uses access controls, private storage, encrypted network connections, request validation, and restricted administrative tools to protect account data. No online service can promise absolute security, so suspected account misuse should be reported promptly to dramaddict.support@gmail.com.
Your choices and rights
You can edit or remove saved titles, diary entries, profile text, images, friends, and visibility choices from the relevant pages. In Profile studio, under Account, you can change your email address, download a copy of your data as a JSON file, sign out, and permanently delete your account.
Depending on applicable law, you may ask to access, correct, export, erase, or restrict the use of your personal data, and may object to certain processing. Send requests to dramaddict.support@gmail.com; they may require reasonable identity verification. You may also complain to your local data protection authority; in Portugal this is the Comissão Nacional de Proteção de Dados.
Children
Dramaddict is not meant for children under 13, and accounts require confirming that age at sign-up. A parent or guardian who believes a child under the minimum age, or a minor without the permission their country requires, has created an account should email dramaddict.support@gmail.com; the account will be reviewed and, where appropriate, deleted.
Changes to this notice
This notice will be updated when the service, its providers, or its legal obligations materially change. The date at the top identifies the current version; significant changes will be communicated in the service where appropriate.