Privacy Policy

Account Data

When you create an account, we collect the following through Supabase Authentication:

• Email address — required for sign-up and sign-in.
• Password — stored as a secure hash by Supabase. We never see or can access your plain-text password.
• User ID — an internal unique identifier used to link your account to your data.

Profile Data

Once signed up, you can optionally fill in a profile. We store the following in our database:

• Username — unique and required. Used to build your public profile URL.
• Full name — optional.
• Avatar URL — optional.
• Created at — a timestamp of when your account was created.

Watchlist Data

The core of the app. We store the following for each watchlist:

• Watchlist names and descriptions you create.
• Movie entries — including IMDb IDs, titles, poster URLs, and release years.
• Visibility setting — whether a watchlist is public or private.
• Created and updated timestamps.

Usage Data & Tracking

BingeTrack is intentionally lightweight on tracking:

• No analytics cookies.
• No third-party tracking scripts.
• No advertising or ad-related data collection.
• We use session cookies — these are Supabase authentication tokens required to keep you signed in. They are not used for tracking.

Third-Party Services

BingeTrack relies on the following third-party services to function:

• Supabase— handles authentication and hosts our Postgres database. Supabase's own privacy policy governs how they handle infrastructure data.
• OMDb API — provides movie metadata such as titles, posters, ratings, and release years. OMDb may log API requests (as any HTTP service does).
• Vercel — hosts and deploys the application. Standard server logs may be collected by Vercel.

Data Sharing

• Public watchlists — if you set a watchlist to public, it is visible to anyone with the link or your profile page.
• We do not sell your data.
• We do not share your data with advertisers or any other third parties beyond the services described above.

Your Rights

You are in control of your data. You can:

• Delete your account — this removes all of your data from our systems permanently.
• Export your data — request a copy of all data we hold about you.
• Update your profile — change your username, name, or avatar at any time from your account settings.

Children's Privacy

BingeTrack is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with data, please contact us and we will remove it.

Changes to This Policy

We may update this policy from time to time. Any changes will be reflected on this page with an updated date. We encourage you to review this page periodically.

Questions?

If you have any questions about this privacy policy or your data, open an issue on GitHub and we will get back to you.