Visible security measures

• User-level authentication and data isolation.
• CSRF protection and server validation for sensitive actions.
• Revocable sessions and security log.
• API keys kept exclusively on the backend.
• Validated and bounded import files, with no unsafe extraction and no retention after processing.
• Transactions and rollback on import errors.
• Private, normalised media served through temporary URLs.
• Rate limiting, production checks, tests and migration verification.
• Administration removed from the public surface unless explicitly enabled for maintenance.

No system provides absolute security. These controls reduce the attack surface and support detection and revocation.

Personal data

TV Chaud may store account identity and preferences, library and progress, lists and reviews you choose to create, import results and snapshots, notifications and necessary security events.

Users can export data and delete their account. Public sharing remains opt-in. Requests to catalogue providers concern content titles and identifiers, not user identity.

Metadata sources

Depending on the content and availability, sources may include TMDB, AniList, TVmaze, Wikidata and Jikan/MyAnimeList. Attribution, quota, caching and compliance rules apply. Commercial use may require additional licensing review.