Privacy

Operational notice - legal review pending. This page describes the site's current technical behavior. It remains excluded from search until the operator, contact route, applicable rights, retention periods, and service-provider terms receive final approval. It is an operational inventory, not legal advice or a finalized privacy notice.

What works without optional tracking

Core pages, channel selection, local ZIP validation, browser-local city/state resolution, official lineup-check links, and policy content work without analytics, replay, advertising, or marketing consent. Optional categories start denied, and their vendor code is not loaded before the applicable choice is granted.

Optional services

• Google Analytics 4 measures consented page views and aggregate acquisition signals. Google advertising storage, signals, and personalization stay denied.
• PostHog measures a small, allowlisted set of consented page, tuner, and provider-link events. Autocapture, profiles, feature flags, performance capture, exception capture, heatmaps, and PostHog session replay are disabled.
• Microsoft Clarity provides separately consented visual diagnostics with strict masking. It is never activated by analytics consent alone.

No advertising or marketing measurement vendor is active. Affiliate links may generate a commission, but that does not authorize ad personalization or cross-site tracking.

Data boundaries

• A raw ZIP stays in the tuner and never enters a request URL, analytics event, local storage, or session storage.
• Shared matcher links contain only the selected interests, stable channel identifiers, budget bracket, and feature toggles. They never include a ZIP, free-form search, recommended provider, or tracking parameter.
• The same versioned postal-area file is requested for every visitor; the request contains no ZIP-derived value.
• Free-form channel searches, email addresses, names, and secrets are excluded from analytics events.
• Browser events use bounded content identifiers and aggregate counts only after analytics consent.
• Analytics does not call identify, alias, or create a person profile. The vendors may still use pseudonymous device or session identifiers needed to operate their services.
• Like other web services, Google Analytics and Clarity receive a connection IP and may derive coarse location or device information. The site does not add a raw IP to event payloads, and PostHog is configured to discard client IP data.
• Clarity receives no replay traffic before replay consent, and explicit masking covers search, ZIP, comparison, and email-input regions.

Storage and retention

First-party functional storage preserves the versioned privacy decision, a one-time session handoffs for channel IDs or matcher preferences you explicitly send to the matcher, guide favorites you explicitly save, and an hourly TVMaze schedule cache. Favorites contain only TVMaze program identifiers and remain until you remove them or clear site storage. Shared matcher preferences are deleted as soon as the matcher reads them. Schedule snapshots expire after one hour and are removed on the next guide visit.

After consent, Google Analytics may use first-party analytics cookies, PostHog uses project-scoped local storage for anonymous device and session state, and Clarity may use first-party diagnostic cookies or storage. Their exact retention is controlled in the corresponding vendor project. Those periods and the operator's deletion process require final governance review before this draft is promoted to the public legal notice.

Your privacy choices

You may allow, decline, or withdraw analytics, replay, advertising, and marketing independently. Withdrawing an active analytics or replay category first sends a denial/reset command and then reloads the page so its vendor code is no longer active. The necessary privacy-choice record remains so the site can honor your selection on the next visit.

Review or withdraw optional consent

Vendor information

Additional details are available in theGoogle Privacy Policy,PostHog Privacy Notice, andMicrosoft Privacy Statement.

Governance review

Final publication still requires confirmation of operator identity and contact details, jurisdiction-specific rights and appeals, children's-data posture, service-provider agreements, international transfers, and exact production retention periods.