The list
| Source | What it holds | Where and how long |
|---|---|---|
| Our visit counter | Page path, how long the tab stayed open, scroll depth, screen size class, referrer category, clicks inside the site and a country code. | Kept as daily sums per page and country. No IP address, cookie or ID. |
| Google Analytics 4 | Page views, referrer, rough country, device class and navigation between pages. | Google's servers, with first-party cookies. Opt-in or opt-out by region, below. |
| Your browser | Light or dark theme and your answer to the cookie notice. | localStorage on your device. We never receive it. |
| Server logs | IP address, user agent and requested URL, as on any web server. | Our server and Cloudflare. |
| Mail you send us | Sender address, display name and message text. | The inbox we read. |
Who is responsible
Where to Watch Dramas is owned and run by an individual publisher based in Vietnam, who decides what data the site handles and why. That person is the data controller and is reachable at contact@wheretowatchdramas.com.
Our own counter
As you leave a page, your browser posts one small record to our server. It carries the path (nothing after a ? or #), the seconds the tab was visible, up to 30 minutes, and the deepest scroll point rounded down to one of six levels: 0, 25, 50, 75, 90 or 100 percent. It also says whether the viewport is phone width, which category of referrer brought you (search engine, social site, AI assistant, another page here, none or other, with the referrer's address dropped) and how many links that stay on this site you clicked.
A drama page adds the Watch on buttons you pressed and which of its blocks you scrolled to. Cloudflare tells our server a two-letter country code for the connection; the IP address itself is never read or stored. If the tab comes back and you leave a second time, the record is replaced, not duplicated.
Records are folded into daily sums by page and country, and the sums are all we keep. Nothing is written on your device, so no cookie or ID can tie a sum to you or to a later visit. The user agent is checked once to drop crawlers, then forgotten. As the counter stores nothing, it also runs for visitors who decline cookies. Our basis for it is a legitimate interest in knowing which pages are used.
Google Analytics
Google Analytics 4 (property G-VPRR2M03C0) measures page views, referrers, rough location, device class and navigation between pages, with Google Consent Mode v2. What it does depends on your region, which Google's tag infers from your connection; this site does not.
- EU, the wider European Economic Area, the UK and Switzerland
- Opt-in, and the legal basis is your consent. All four consent types (analytics storage, advertising storage, ad user data, ad personalisation) start at “denied” and the tag holds back every hit: nothing reaches Google Analytics and no analytics cookie is set until you press Accept on the cookie notice. Decline, or ignoring the notice, means nothing is sent.
- Everywhere else, the US included
- Opt-out. Analytics storage starts as granted, so statistics run from the moment the page loads and its first-party cookies are set. Press Decline on the notice and it stops at once, the cookies are removed and the choice is stored in your browser.
- Browsers that send Global Privacy Control
- Read as Decline in every country: the tag does not load and the notice stays hidden.
Advertising storage, ad user data and ad personalisation are denied in every region, ads data redaction is enabled and Google signals are disabled. Analytics feeds no advertising, and we neither sell nor share the data for that purpose. Google processes what Analytics receives under the Google Privacy Policy.
In your browser
Two things sit in your browser's localStorage: the light or dark choice and, where the cookie notice appears, your answer to it. They stay on your device and our server never reads them. Clearing site data erases them.
Affiliate buttons
A button labelled as an affiliate link (RS Boost and DramaCPS) goes through the program's link service before the app opens. RS Boost links run through reelslink.com and then AppsFlyer's onelink.me. DramaCPS links run through r.reelsgo.tv and then the app's own tracking link. The program, the app and its attribution partner may record the tap, and any install or purchase after it, using cookies or device identifiers of their own, under their own policies.
Our pages embed nothing from these networks, no script and no pixel, so none of them learns anything about you here before you tap, and a link you don't tap does nothing. What reaches us is totals of clicks and commissions, with no name attached.
Videos and outside links
A drama page may carry an official trailer or clip from an app's YouTube or TikTok channel. Nothing from either service loads until you press play; after that the player runs under that service's own policy (for YouTube, the privacy-enhanced youtube-nocookie.com player). Links to apps, stores and other sites lead to places with their own privacy policies.
Who processes the data
| Company | Role | Sees |
|---|---|---|
| Cloudflare | DNS, proxy and cache in front of the site | IP address, request headers, the country code it passes on |
| OVHcloud | Rents the virtual server the site runs on | Server logs and the daily count totals |
| Google (Analytics 4) | Visit statistics, only where the rules above allow | What the GA4 section lists |
These companies run servers around the world and the owner lives in Vietnam, so data can cross borders. The site sells nothing, so no payment details are held, and reader data is neither sold nor passed on for advertising.
A message to contact@wheretowatchdramas.com arrives with the sender's address, the display name from the mail app and the text. It is read only to handle that message, and it goes to no one else. If a question is answered on a drama page, it is reworded; your name and address are not published.
Your rights
In the EU, the EEA, the UK and Switzerland you can ask for access to your data, correction, erasure, restriction or a copy, and you can object to a use or withdraw consent at any time; you may also complain to your local data protection authority. In California you can ask what is collected and have it deleted or corrected. The site does not sell or share personal data for advertising and does not treat anyone differently for asking.
Write to the address above with the subject “Privacy”. We hold little that identifies a person (a message you sent, and at most a Google Analytics identifier that only Google can look up), so many requests end with “nothing held”. When data handling changes, for instance through a new tool, this page and its date change before the change goes live.