Harry Potter TV Show

Privacy Policy

How harrypottertvshow.com handles your data

This privacy policy explains what information we collect when you visit harrypottertvshow.com, how we use it, and the choices you have. We're an unofficial fan site covering the Harry Potter franchise — not affiliated with Warner Bros., HBO, or J.K. Rowling. This page is plain English where possible.

Information we collect

When you browse the site, we automatically receive standard web request data: your IP address, browser, device type, the page you requested, the page that referred you (if any), and the date/time of the request. This is logged by our hosting provider and used for security, debugging, and analytics.

We do not require you to create an account, and we do not knowingly collect names, addresses, phone numbers, or other personal identifiers unless you voluntarily submit them (for example, via the takedown request form or by emailing us).

Cookies and similar technologies

We use a small number of cookies:

  • Country preference (hp_country): remembers your selection in the “Where to Watch” country switcher so the right streaming options show up by default. Set only when you actively change the country. Lasts 1 year.

  • Analytics (Google Analytics 4): Google sets _ga and related cookies to help us understand how readers find and use the site. See Google’s privacy policy for details. You can opt out via the Google Analytics opt-out browser add-on or through your browser settings.

  • Advertising: if you see ads on the site, Google or its partners may set cookies for personalization and measurement. You can manage personalized ads at adssettings.google.com.

Most browsers let you block or delete cookies in their settings. Blocking cookies may break some features (the country switcher, in particular).

Analytics

We use two analytics systems in parallel:

  • First-party page-view tracking: each page load sends a small request to our servers recording the page, referrer, country (from your IP via Cloudflare’s standard GeoIP header), browser, operating system, and device class. We use a daily-rotating anonymous hash to count unique visitors without storing your IP address or any persistent identifier. The data is used in our editorial dashboard only and is never sold or shared.

  • Google Analytics 4: industry-standard analytics. See Google’s policy linked above.

Images and third-party content

Many images on the site are licensed via the TMDB API or sourced from studio promotional materials and used editorially under fair-use principles. We display attribution where applicable. If you are a rights holder and want content removed, please use our takedown form — we review every submission and respond promptly.

The site embeds content from third parties (YouTube, X / Twitter, Instagram, TikTok, Facebook, Threads). Those services have their own privacy policies and may set their own cookies when their embeds load.

Advertising

We participate in the Google AdSense program. Google and its third-party vendors use cookies to serve ads based on your prior visits to this site and other sites. Personalized advertising can be disabled at adssettings.google.com. For more on how Google uses information from sites that use its services, see this page.

How we use the information

We use the data described above to:

  • Serve and improve the site (performance, debugging, security).

  • Understand which articles and topics readers engage with so we can plan editorial coverage.

  • Respect your country preference for streaming availability.

  • Display relevant advertising.

We do not sell your personal information.

Children’s privacy

The site is general-audience and not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

Your rights

Depending on where you live (EEA, UK, California, etc.), you may have rights including the right to access, correct, delete, or restrict processing of your personal data, and the right to object to direct marketing. Because we do not maintain user accounts and most of the data we hold is anonymous request logs, fulfilling these rights is generally straightforward. To exercise any right, contact us with the relevant details and we will respond within 30 days.

Data retention

Server access logs are retained for up to 90 days. Aggregated, anonymized analytics data is retained indefinitely. Form submissions (takedown requests, etc.) are retained as long as needed to address the request and meet any legal requirements.

Security

The site is served over HTTPS with HSTS enabled. We use industry-standard practices to protect data in transit and at rest, but no method of internet transmission or storage is 100% secure.

Changes to this policy

We may update this policy from time to time. The current version is always available at this URL; material changes will be reflected here with an updated date.

Contact

For privacy questions or to exercise any of the rights described above, please use our takedown / contact form. We’ll respond as soon as we can.