Privacy

We store what you tell us to store: your account, what you watched, what you rated, what you wrote. We do not sell it, we do not build advertising profiles from it, and you can download all of it or delete all of it whenever you want.

• Account: your email address, a password hash (never the password), your handle, display name, bio and avatar.
• Activity: check-ins, rewatches, ratings, comments, reactions, poll votes, follows, badges and streaks.
• Preferences: the genres, watch style and spoiler tolerance you set during onboarding.
• Imports: the export file you upload, stored privately so a failed import can be retried, plus the rows we parsed out of it.
• AI usage: the messages you send the concierge, and a count of how many AI actions you have used today.

Profiles, watch history, comments, ratings and badges are visible to other signed-in people — that is the point of a community tracker. Two things are never public: your email address, and your notifications.

The spoiler gate controls when other people see your comments, not whether — someone behind you on a show sees that you posted, blurred, until they catch up.

Only the services needed to run the app: Supabase (database, authentication and file storage), Anthropic (the AI features, when they are enabled — your prompt and a summary of your watch progress are sent, and are not used to train models), Stripe (payments, if you subscribe), and TMDB (show metadata lookups, which do not include anything about you). Nobody else, and never for money.

One cookie, for your login session. No advertising cookies, no third-party trackers, no consent banner to dismiss because there is nothing to consent to.

Export: Settings → “Export my data” downloads every watch event, rating and comment as a CSV, immediately. No request form, no waiting period.

Deletion: deleting your account removes your profile, history, preferences, imports and uploaded files. Comments you posted are tombstoned rather than erased so replies underneath them still read sensibly — the text and your name both go.

Every table has row-level security, so the database itself enforces who can read what rather than trusting the app to remember. Passwords are handled by Supabase Auth, not by us. Uploaded import files live in a private bucket only you and an administrator can read.

Questions about any of this go to privacy@episodeclub.com.