Privacy policy

Last updated 2026-09-14.

Rerun is a TV series tracker for Android. This page says what it collects, what it does not, why, who else handles it, how long it is kept, and what you can do about it.

Who is responsible

Rerun is made and run by Anders Martin Linge, an individual developer in Norway. There is no company behind it. Anders Martin Linge decides how your data is used and is responsible for it, and where this policy says "we" or "us", that is who it means. For any question or request about your data, email aml.labs.support@gmail.com.

What Rerun does not collect

• No advertising identifiers. Rerun does not read your device's advertising ID, shows no ads, and contains no advertising network.
• No location. Rerun never asks for your location, and does not keep one worked out from your IP address.
• No usage analytics. Apart from the crash reporting described below, nothing records how you use Rerun, which screens you open or what you tap, and nothing follows you across other apps or websites.
• Nothing from your phone you did not hand over. No contacts, photos, camera or microphone, and no files other than the one you choose to import.
• No payments. Rerun has no paid features today and handles no payment details.
• No selling. Your data is not sold or rented to anyone, and not used to advertise to you.

What Rerun collects

• Your account. The name you choose, your email address, and your password. If you sign in with Google, Google gives us your name, email address and the address of your profile photo instead of a password.
• What you track. The shows you follow, the episodes you mark watched, your ratings, reactions and lists, and your settings.
• What you write. Comments and replies on episodes, any report you make about a comment or another user, and who you have blocked.
• Searches. The text you type into search, which our server passes on to TheTVDB to find shows.
• Imports. If you import your history, the file you upload from TV Time, Trakt or a spreadsheet.
• Notifications. If you allow notifications, a push token for your device, so we can tell you when a show you follow has a new episode.
• Crash reports. When the app crashes or hits an error, it sends a report containing the error, the app version, your device model and Android version, free memory, battery level, screen orientation, and the screens and requests just before it, reduced to their shape with every id removed. It carries one identifier: your account id if you are signed in, and otherwise a random one created for this installation of the app. Your account id is a random UUID. It says nothing about you, and only our own database can connect it to your account. A crash report never contains your name, your email address or a screenshot.
• App sessions. The crash reporter also records that the app was opened, for how long, and whether that session ended in a crash, under the same identifier. That is how a crash-free rate is counted, and it is the only information about using the app that Rerun sends anywhere.

Your IP address

Like any server, ours sees the IP address each request comes from. It is used to limit repeated attempts to sign in or to request emails, and it appears in server logs. We do not use it to work out where you are.

The same goes for Rerun's web pages, this one included. They set no cookies, run no scripts and load nothing from anywhere else, so a visit is recorded only in those server logs.

Sentry, which receives crash reports, also sees your IP address as the connection a report arrives on. We have set Sentry not to store IP addresses, and to delete the location it would otherwise work out from one, so neither is kept.

Show artwork is loaded by the app directly from TheTVDB's image servers, which see your IP address the way any website you visit does.

Why we use it

• To provide Rerun. Your account, what you track, notifications, imports and comments are the service itself. Where the law asks for a legal basis, this one is performing our agreement with you.
• To find and fix crashes. Crash reports and session counts are used for nothing else. The legal basis is our legitimate interest in an app that works.
• To keep accounts and comments safe. Limits on repeated attempts, confirming email addresses, and reports and blocks. The legal basis is our legitimate interest in preventing abuse.
• To email you about your account. Confirming your address, resetting your password, confirming a deletion or a restore, and telling you if someone tries to sign up with your address. Rerun sends no marketing email.

What other people can see

Your name and profile photo are shown next to your comments, and a comment on an episode is visible to other users who have marked that episode watched. Nothing else about you is shown to anyone: not what you watch, your ratings or your lists. What you follow and watch counts, without your name, towards which shows Rerun lists as popular.

Who else handles your data

These companies process data for us, on our instructions, and only to provide their part of the service:

• Hetzner Online runs the servers Rerun's data is stored on, in Helsinki, Finland, and holds its backups.
• Sentry (Functional Software, Inc.) receives crash reports and session counts, and stores them in its EU region, in Frankfurt, Germany.
• Resend sends the account emails listed above, so it receives your email address and those messages.
• Google delivers notifications through Firebase Cloud Messaging, so it receives your device's push token and each notification. A notification never contains an episode's title or details. If you choose to sign in with Google, Google also confirms who you are, under Google's own privacy policy.

TheTVDB supplies show information. Our server sends it the text of your searches, with nothing that identifies you. TVmaze supplies air times and receives nothing about you.

Resend and Google may process data in the United States. Where they do, the transfer is covered by their data processing terms.

How long it is kept

• Your account and everything in it until you delete the account. After you delete it you have 30 days to restore it, and then it is erased.
• Backups of the database for up to 30 days, so erased data is gone from every backup within 30 days of being erased.
• An imported file until the import finishes or fails, and then it is deleted.
• An account export you ask for, for 7 days after it is made.
• Crash reports and session counts for 30 days, after which Sentry deletes them.
• Search results for up to 24 hours, stored under the search text and not linked to you.
• Server logs in a fixed amount of space, where older lines are overwritten as new ones arrive.

How your data is protected

• Everything between the app and our server travels over HTTPS.
• Passwords are stored only as Argon2id hashes, which cannot be turned back into the password.
• On your phone, the tokens that keep you signed in are kept in Android's encrypted storage for app secrets.
• The database and the API cannot be reached from the internet directly. The only way in is through the HTTPS server in front of them.
• Links we email you to confirm an address, reset a password, or delete or restore an account work once, and expire.
• Only the developer named above has access to the servers, the database and the backups.

Your choices and rights

• Delete your account in the app under Settings, or without the app on the account deletion page. If you change your mind within 30 days, use the restore page.
• Download your data in the app, under Settings, Export everything.
• Delete parts of it without deleting your account. Comments, ratings, reactions, lists, follows and watched episodes can each be removed in the app.
• Turn off notifications in Android's settings for Rerun.

Depending on where you live, you may also have the right to a copy of your data, to have it corrected or erased, to restrict or object to how it is used, and to complain to a data protection authority. In Norway that is Datatilsynet; elsewhere in Europe it is the authority where you live. Email aml.labs.support@gmail.com and you will get an answer within one month.

Children

Rerun is not meant for children under 13, and we do not knowingly collect data from them. If you believe a child has created an account, email aml.labs.support@gmail.com and it will be deleted.

Changes

When this policy changes, the date at the top of the page changes with it. The rules for using Rerun are in the terms of service.