Privacy policy
Effective November 8, 2026
This policy explains how Everwish ("we", "us", "our") handles information when you use Streaming Passport, the website at streamingpassport.com (the "site"): what information is involved, why, who else receives it, how long it's kept, and the choices you have.
Questions? Email perkinsdeuce@gmail.com.
Summary
- You can use the site without an account. We never ask for your name, email address or location.
- We don't set our own cookies and don't build profiles about you.
- Companies that help run the site, such as our hosting provider, receive technical information like your IP address, as with any website.
- Our advertising partner, Google, uses cookies to show and measure ads, and to personalize them where you allow it. You can turn off personalized ads at any time.
- We don't sell personal information for money.
Who is responsible
Everwish operates the site and is responsible for personal information processed through it, except where a company named below handles information for its own purposes under its own privacy policy, as Google does for advertising.
Information we process and why
Title searches
As you type in the search box, your browser sends what you've typed directly to Wikidata, a free database run by the Wikimedia Foundation, to suggest matching titles. We don't receive, see or store these searches. The Wikimedia Foundation handles them under its privacy policy.
Availability lookups
When you choose a title on the homepage, your browser asks our lookup service where it's streaming. The service runs on Cloudflare. Each request includes the title's IMDb identifier and, like any web request, your IP address and browser details such as browser type and language. We use these only to answer the request, keep the service secure and prevent abuse.
We store availability results by title for about a day, so we don't have to fetch the same title again for the next visitor. These stored results describe the title only, never who asked for it. Our lookup service gets the data from the Streaming Availability API by Movie of the Night; your IP address and browser details aren't passed on to it.
Hosting and security
The site's pages are hosted by GitHub Pages, and our lookup service runs on Cloudflare. Like all hosting providers, they receive your IP address and request details when you visit, and may keep short-term logs to deliver pages, protect against attacks and fix problems. See the GitHub privacy statement and the Cloudflare privacy policy.
The site's fonts are stored on our own hosting, so your browser doesn't contact Google Fonts or other font services when you visit.
Advertising
We show ads served by Google AdSense. Third-party vendors, including Google, use cookies to serve ads based on your previous visits to this site and other websites. Google's use of advertising cookies enables it and its partners to serve ads to you based on your visits to this site and/or other sites on the internet. Google and its partners also use cookies to limit how often you see the same ad, measure how ads perform and prevent fraud.
Some ads on the site may be served by other ad companies that Google works with. A list of these companies, with links to their websites, is available in Google's ad technology providers list.
You can opt out of personalized advertising from Google in Google's Ads Settings, and from other participating ad companies at aboutads.info/choices or, in Europe, youronlinechoices.eu. You'll still see ads, but they won't be based on your browsing.
To learn more, see How Google uses information from sites or apps that use its services.
Links to streaming services and VPN providers
Pages on the site link to streaming services and VPN providers. When you follow a link, you leave our site, and the other company's privacy policy applies.
When you email us
If you email us, we receive your email address and whatever you include in your message. We use it only to reply, handle your request and, for privacy requests, keep a record that we did.
Cookies
We don't set any cookies of our own, and the site doesn't use your browser's storage to track you. Cookies you may encounter on or after visiting the site:
| Set by | Purpose | Your choices |
|---|---|---|
| Google and its advertising partners | Showing ads, limiting repeats, measuring performance, preventing fraud and, where you allow it, personalizing ads | Privacy settings link at the bottom of every page; Google's Ads Settings; your browser settings |
The site's search and lookups work without cookies, so blocking them won't stop you from using it.
Legal bases (Europe, the UK and Switzerland)
If you're in the European Economic Area, the United Kingdom or Switzerland, we rely on:
- Legitimate interests for answering lookups, hosting, security. Our interest is running a reliable, secure site, and we've kept this processing to the minimum needed.
- Consent for advertising cookies and personalized ads. Before these are used, a consent message from a Google-certified consent platform asks for your choice. You can change it at any time with the privacy settings link at the bottom of every page.
- Legitimate interests for replying to your emails, and legal obligation for keeping records of privacy requests.
Who receives information
We don't sell personal information for money. Information is shared only with:
- Service providers that run the site for us: GitHub (hosting) and Cloudflare (lookup service and security).
- Google and its advertising partners, for advertising, as described above.
- The Wikimedia Foundation, which receives title searches directly from your browser.
- Authorities or others, when required by law or to protect our rights, our visitors or the public.
- A buyer or successor, if the site is sold or transferred, under the terms of this policy.
US state privacy rights
California and a growing number of other US states give their residents specific privacy rights. Many of these laws only apply to businesses above a certain size, but we offer the same rights to every visitor, wherever they live.
Information we collect or allow others to collect
In the past 12 months, the site has collected, or allowed the partners named in this policy to collect, the categories below. We don't collect sensitive personal information.
| Category | Examples | Why | Shared with |
|---|---|---|---|
| Identifiers | IP address, cookie and advertising IDs, and your email address if you write to us | Running and securing the site, advertising, replying to you | Service providers; Google |
| Internet activity | Pages viewed, titles looked up, links clicked, browser type | Running the site, advertising | Service providers; Google |
| Approximate location | Country or region worked out from your IP address | Security, choosing which ads to show | Service providers; Google |
| Inferences | Ad interests Google infers from your browsing | Personalized ads |
"Selling", "sharing" and targeted advertising
Letting Google use cookies for personalized ads may count as "selling" or "sharing" personal information, or as "targeted advertising", under some state laws, even though nobody pays us for the information itself. You can opt out with the privacy settings link at the bottom of every page. If your browser sends a Global Privacy Control signal, we treat it as an opt-out for that browser and ask Google to show only non-personalized ads. We don't knowingly sell or share the personal information of anyone under 16.
Your rights
You can ask us to:
- tell you what personal information we have about you and how it's used and shared,
- give you a copy of it,
- correct it if it's wrong,
- delete it, and
- stop selling or sharing it, or using it for targeted advertising.
We won't treat you differently for using any of these rights.
How to make a request
Email perkinsdeuce@gmail.com with "Privacy request" in the subject line and tell us what you'd like us to do. Because the site has no accounts and doesn't link information to names, we may ask for details that help us find information related to you, such as roughly when you visited. We'll reply within 45 days. If we need longer, we'll tell you why, and take no more than another 45 days.
Someone else, such as an authorized agent, can make a request for you. We may ask them for proof of your permission and ask you to confirm your identity.
Appeals
If we turn down your request, you can appeal by replying to our decision with "Appeal" in the subject line. We'll answer within 60 days. If you're unhappy with the result, you can contact your state attorney general.
Rights in Europe, the UK and Switzerland
You have the right to access, correct or delete personal information about you, to restrict or object to how it's used (including uses based on legitimate interests), to receive a portable copy, and to withdraw consent at any time without affecting earlier processing. Email perkinsdeuce@gmail.com to use these rights. We'll respond within one month, or within three months for complex requests, telling you if we need the extra time. You can also complain to your local data protection authority.
How long information is kept
- Stored availability results: about one day. They contain no personal information.
- Hosting and security logs: kept by GitHub and Cloudflare for the short periods set out in their policies.
- Emails: as long as needed to deal with your message. Records of privacy requests are kept for 24 months.
- Advertising cookies: according to Google's and its partners' policies.
International transfers
We're based in the United States, and our service providers may handle information in the United States and other countries whose data protection laws differ from yours. Where required, transfers are protected by safeguards such as the European Commission's standard contractual clauses or the EU–US Data Privacy Framework.
Children
The site is for a general audience and isn't directed at children under 13. We don't knowingly collect personal information from children under 13, or use the information of children under 16 in Europe and the UK for personalized ads. If you believe a child has given us personal information, email us and we'll delete it.
Security
The site only uses encrypted HTTPS connections, our lookup service keeps its access keys private, and we collect as little information as we can. No system is perfectly secure, but we take reasonable steps to protect the information involved in running the site.
Do Not Track
There's no agreed standard for how websites should respond to browsers' "Do Not Track" setting, so the site doesn't respond to it. We do honor Global Privacy Control signals, as described above.
Changes to this policy
We'll update this policy when the site or the law changes, and change the effective date at the top. For significant changes, we'll post a notice on the site before they take effect.
Contact
Everwish
Email: perkinsdeuce@gmail.com