Privacy Policy

Last updated 31 July 2026.

Slate is a personal television calendar operated by Stillridge Labs. This policy describes what the service stores about you, why it stores it, and how to have it removed. It describes what the software actually does; it is not a template.

What is collected

Slate stores only what it needs to work:

Your email address, which identifies your account and is the only way to sign in.
A hash of your password, using argon2id. The password itself is never stored and cannot be recovered from the hash.
Your display name and preferences - timezone, time format, and display options - if you set them.
Which shows you follow, and which episodes you have marked as watched. This is viewing history. It is the most revealing thing here, and it is treated as personal information even though it never leaves the server except to you.
Session records, so that signing in on one device does not sign you out on another, and so sessions can be revoked.
A two-factor secret and recovery code hashes, if you turn on two-step verification.

What is not collected

No analytics, no tracking pixels, no advertising identifiers, and no third-party scripts beyond the bot check described below.
No payment information. Slate does not charge for anything. If you choose to donate, the payment is handled entirely by Stripe on their own pages - no card details are ever sent to or stored by this service, and a donation is not linked to your account.
No browsing history outside Slate, no contacts, no location, and no device fingerprinting.

Cookies

Slate sets one cookie: a session identifier, marked HttpOnly, which keeps you signed in. It is strictly necessary for the service to function and is not used for tracking or advertising, which is why you are not asked to consent to it. Your light or dark theme preference is stored in your browser’s local storage on your device and is never sent to the server.

Third parties

Cloudflareprovides the tunnel and access control that put Slate on the internet, so requests to the site pass through Cloudflare’s network. Their handling of that traffic is governed by their own privacy policy.
Cloudflare Turnstile may be used on the signup form to distinguish people from bots. It is enabled only when configured; when it is not, no third-party script is loaded at all.
Stripeprocesses donations, if you make one. That happens on Stripe’s own pages under their privacy policy; Slate receives no card details and does not record who has donated. If you never donate, Stripe is never involved.
TVmaze supplies the television listings. Slate reads from TVmaze; it never sends them anything about you. Your follows, watched history, and account are not shared with TVmaze or anyone else.

Your personal information is not sold, rented, or disclosed to anyone for any purpose. There is no advertising business here to support.

The calendar feed

If you enable the iCal feed, Slate issues a URL containing a random token. That URL is a credential. Anyone who has it can read your upcoming episodes without signing in, which is what makes the feed work in calendar apps that cannot log in. Treat it like a password, and rotate or disable it in Settings if it is ever exposed.

How long it is kept

Account data is kept until you delete your account. Sessions expire after thirty days, or sooner if you sign out or change your password. Deleting your account removes your email, password hash, preferences, follows, watched history, sessions, and two-factor data immediately and permanently. There is no backup from which your account is restored afterwards, and there is no grace period - deletion is immediate and cannot be undone.

The television catalogue itself - shows and episodes - is data from TVmaze held in common by the service and is not tied to you. It remains after your account is deleted, because it was never yours.

Your choices

You can see and change everything Slate holds about you from Settings: your display name, preferences, password, two-step verification, and calendar feed. Closing your account from that page deletes your data as described above.

If you would like a copy of your data in a portable form, or have a question this policy does not answer, write to [email protected].

Security

Passwords are hashed with argon2id. Sessions are random 32-byte tokens held in HttpOnly cookies, with no signed token to forge. Two-step verification is available and recommended. Traffic to the site is encrypted in transit.

No service can promise perfect security, and this one is run by a small operator rather than a company with a security team. If you find a problem, please report it to [email protected]. Reports are welcome and will not be met with legal threats.

Children

Slate is not directed at children under 13 and no account should be created for one.

Changes

If this policy changes in a way that affects what is collected or who it is shared with, the date at the top will change and the change will be described here.