Epilog policies

Privacy Policy

What Epilog collects, why we use it, and the controls available to you.

Last updated: September 19, 2026

Information we collect

We collect the account information you provide, including your email address, username, profile details, and connected sign-in provider. We also store the media activity you choose to create: ratings, watch history, watchlists, collections, lists, reviews, comments, likes, follows, blocks, mutes, notification state, calendar and streaming preferences, release-alert delivery records, and reports you submit.

For signed-in return-utility measurement, Epilog stores at most one account-owned fact per UTC day: the first and last of the home or calendar surfaces used, and whether personalized utility was available. This fact does not include an IP address, device or browser details, referrer, third-party identifier, or a page-by-page navigation trail, and it is included in your account export and deletion.

When you use Epilog, our service and analytics providers may process technical information such as browser and device details, pages visited, referral information, approximate location derived from an IP address, and cookies or similar identifiers. We use this information to operate, secure, diagnose, and improve the product.

We use Cloudflare Turnstile on account-creation and email sign-in forms to prevent automated abuse. Cloudflare processes the challenge and technical signals, including your IP address. Our email-abuse controls retain a keyed digest of the recipient address and recent request times for a rolling 24-hour limit, including after account deletion. These counters are normally removed within 25 hours of the last permitted request. They do not store the address itself or track browsing activity.

How we use information

  • Provide your diary, recommendations, profiles, social features, and account controls.
  • Authenticate accounts, prevent abuse, investigate reports, and enforce our guidelines.
  • Send requested sign-in and account-security messages.
  • Send optional communications only when the corresponding setting is enabled.
  • Measure reliability and product usage so we can improve Epilog.

When information is shared

Public profile fields and content you publish can be seen by other people according to the visibility controls in the product. We may share data with service providers that help us run hosting, email, authentication, storage, and analytics. We may also disclose information when required by law or when reasonably necessary to protect people, the service, or our rights. Epilog does not sell your personal information.

Your controls

Account settings let you manage optional email, release alerts, region and streaming-service preferences, blocked and muted accounts, download a portable copy of your data, or permanently delete your account. Browser controls can limit cookies and similar storage, although some sign-in and security features require them.

Deletion and retention

Self-service deletion removes your account, authored reviews and comments, diary, ratings, lists, library state, social relationships, connected identities, notifications, and sessions. Safety reports and the evidence captured with them may remain after deletion, with account references removed, so abuse investigations cannot be erased by deleting content or an account. We may retain other information when required to meet legal obligations, resolve disputes, or protect the service.

Contact

Questions or privacy requests can be sent to support@epilog.tv. Please do not include passwords or authentication codes.