Your progress is saved on this device automatically. The code below takes a copy out and puts it back. Moving a whole list onto a device that has nothing on it yet is part of the subscription.
The code holds only this franchise. The link opens the tracker with your progress already filled in, good for showing someone where you're at. The image is a picture you can keep anywhere: scan the code on it with a phone, or drag the file back in below.
Every franchise you have touched, in one code.
Scan it with another device's camera, or paste the code in below. It never leaves your browser.
This reads the progress stored inside the picture, so nothing has to be retyped. If the image has been through a messaging app it may have been re-encoded and lost that: scan the code on it instead, or copy the code printed along the bottom.
Takes either kind of code. A single franchise code replaces that franchise, on any device. An everything code merges by default, so nothing you have ticked on this device is lost. Putting a whole list onto a device that has nothing on it yet is the part an account pays for.
Read only. This never changes what you have saved, and nothing leaves your browser. The code has to be their code for this same franchise: codes do not carry a name, so one from somewhere else may not be recognised as wrong.
Your data
SagaList works without an account, and used that way it holds nothing about you at all: everything happens inside your own browser. An account is optional, adds syncing across your devices, and is the only thing that puts anything of yours on a server. Here is the whole picture of both.
Everything you tick off. Your progress is saved in your browser's own storage, on the device you're using, under a key belonging to this site. If you clear your browser's site data it is gone from that device. Export image of progress and Sync & backup let you take a copy out before that happens, and an account is what puts a whole list back onto a device that has nothing on it.
The same is true of a share link. The progress is encoded into the address itself, so it travels with the link rather than being stored on a server. Anyone you send it to can see what you've watched: that's the point of it, so only share it with people you mean to.
If you make one, we hold your email address, a scrambled version of your password that cannot be turned back into the password, and the same progress code the backup box shows you, one string of letters and numbers per franchise, saying which episodes are ticked. That is the entire list. No name, no age, no address, no phone number, and there is nowhere to enter any of them.
That data sits in a database run by Supabase, on servers in the United States. They host it and cannot use it for anything of their own. Rules on the database itself mean one account can only ever read and write its own row, and that is enforced by the database rather than by the website asking nicely.
The confirmation and password-reset emails are sent through Resend, who therefore see your email address and the contents of those messages. They are used for nothing else. The only emails SagaList sends without being asked are the ones you cause yourself: signing up, resetting a password, changing your address, or a subscription starting or ending. There is one thing you can opt into, unticked when you sign up, which is an occasional message about new franchises, new features and the odd offer. If you did not tick it you will never get one, and if you did you can stop at any time.
Syncing costs only $3 a month. Payments are handled entirely by Stripe. You type your card details on Stripe's own page, not ours. SagaList never sees, receives or stores a card number, and cannot: nothing on this site has a field to type one into.
What comes back to us is the minimum needed to know whether to switch syncing on: a customer reference, a subscription reference, whether it is active, and when the current period ends. Stripe holds the rest: your card, your billing details, your payment history, under their own terms and privacy policy, and they are the ones you would ask about it. Cancelling, changing a card and downloading receipts all happen on Stripe's pages, reached from the account panel.
Your progress and your payment are kept apart on purpose. The subscription record cannot be written by your browser at all, and the progress record holds nothing about money.
There is a page for it, reached straight from here: Delete your account. It is also inside the account panel. Deleting removes your account, your email address, and the progress stored on our side, and it is immediate rather than a request that goes into a queue. What is saved in your own browser stays on your device, because that was always yours and is not ours to take.
If you have a subscription, deleting cancels it at Stripe in the same step, so nothing further is charged. If that cancelling fails for any reason, nothing is deleted and you are told why: an account that is gone while the payments continue is the one outcome worth refusing.
Without an account: only a suggestion, and only when you send one. If you use Suggest a title, what you typed is submitted to Netlify, who host this site, and forwarded on to us. That form asks for a title and an optional note. It does not ask for your name or your email address, and there is nowhere to enter one.
If you have no account and never send a suggestion, nothing you do on this site is transmitted anywhere at all. Browsing, ticking, sorting and sharing all happen in your browser.
We do count visits, and it would be dishonest to have a privacy page that did not say so. It is done two ways. Netlify reads its own server logs, the record every web host keeps of which pages were requested, and nothing is added to this page to make that happen. Alongside it, Cloudflare Web Analytics runs a small script on each page. It reports that a page was opened, which page it was, which site you came from if you followed a link, and how long the page took to load.
Cloudflare state that it collects no personal data. It sets no cookie, it stores nothing in your browser, and it never gives you an identifier, so there is nothing that could follow you from one visit to the next or from this site to any other. It does not run at all inside the Android app.
What the two of them produce is a count: how many pages were served, which ones, roughly where in the world the requests came from, and which sites send people here. In the server logs a visitor is counted as a distinct network address per day, which is how a request gets counted once rather than five times. It is a tally of traffic, not a record of people: there is no profile, no history, and no way to look up what any one visitor did.
Two typefaces are loaded from Google Fonts, which means your browser makes a request to Google to fetch them, and Google sees that request the way any web server sees a request for a file. Nothing about your progress is included. The visit counter described above is fetched from Cloudflare in the same way. Apart from those two, the entire site is a single file served from this address.
The Join our Discord link at the foot of every page goes to Discord, which is a separate service run by a separate company. It is an ordinary link: nothing about what you've watched travels with it, and following it tells Discord only that somebody opened an invite. Anything you do once you are there is covered by Discord's own terms and privacy policy rather than this page, and the server is entirely optional.
The Support the site link at the foot of every page goes to Ko-fi, a separate service run by a separate company, where anyone who wants to can send a few dollars towards the domain and hosting. It is an ordinary link, it is entirely optional, and it unlocks nothing. It is not the sync subscription and it is not connected to it: the catalogue and the tracking are not paywalled, supporting buys no feature, and nothing about what you've watched travels with the link. If you do send something, Ko-fi and its payment processor handle the payment and see whatever you type into their form: SagaList never sees or stores a card, an address, or a name that way. That side of things is covered by Ko-fi's own terms and privacy policy rather than this page.
Deleting is the one you can do yourself, immediately, on the deletion page. For anything else, a copy of what is held, or a correction, use the form on that same page and say what you want; it reaches the same place. A contact address is also published on the Google Play listing for the app.
SagaList is published by BRIM CONSULTING LLC, in North Carolina, United States.
This page is updated before a change happens, not after, and the change will be obvious rather than quiet. If SagaList ever starts doing something with your data that this page does not describe, that is a bug in one of the two.
Without an account, nothing here holds anything about you and there is nothing to ask for. With one, it is an email address, a scrambled password and a string of ticked episodes, and you can delete the lot yourself in about ten seconds.
Your email is confirmed and your account is ready. Everything you tick is saved on this device, as it always was.
Part of the subscription.
Your SagaList account.
Nothing else happens until you follow the link. If it has not arrived in a few minutes, look in your spam folder and search for SagaList. It is sent from a no-reply address on our own domain, so there is nothing to reply to.
Both addresses get an email: the new one to confirm it, and the old one so that nobody can move your account without you knowing. Nothing changes until you follow the link.
Signing out leaves everything you have ticked on this device exactly where it is. It only stops it syncing.
This removes your account, your email address, and the progress stored on our side. It cannot be undone and we cannot get it back for you.
This stops your subscription too. It is cancelled at Stripe in the same step, so nothing more is charged. The rest of this month is not refunded and you will not be able to use it, so cancel from Manage or cancel and delete later if you would rather keep it.