Privacy Policy

Watch Picker is run by Watch Picker LLC, a Colorado limited liability company, which is responsible for the information described here. Watch Picker stores the minimum needed to keep your lists, your friends, and your reviews working across devices, and you can delete your account at any time from your account settings.

Account. An email address and password, handled by our authentication provider, Supabase. We never see your password.

Profile. Your username, an optional avatar image, any genres you have chosen to hide, and which streaming services you have.

Activity. Titles you mark as seen, star ratings you leave, titles you mark “Not interested”, your watchlist and its order, reviews and comments you write, likes, and any content you report. While you're signed in, we also note each day you open Watch Picker (the date only, not what you looked at), so we can tell how often people come back.

Social. Friend requests and accepted friendships, which are mutual: a request has to be accepted before either person sees the other's activity. Invite links are the exception, because sharing yours is your approval. Anyone who opens your invite link and signs in can add you in one tap and you're friends right away, with no request for you to accept. Friends can see each other's seen titles and ratings, so share your link with people you'd like as friends.

Watch Parties. You can be in a Watch Party by scanning its host's QR code, or by accepting a friend's invite to theirs. Until you accept, nothing of yours goes to the party and your lists stay your own; the friend who invited you only has titles you've marked seen (which friends can already see) left off their own lists. Invites end with the party. While the party runs (at most six hours, and you can leave any time), everyone in it gets one combined list that skips what anyone in the party has seen or marked “Not interested”, and the party's For You picks use everyone's star ratings and can say who liked what. The genres anyone dislikes become the party's hidden genres: one combined list, with no names on it, that anyone in the party can see and change for the party without changing anyone's own settings. The host can see which titles you've marked seen or “Not interested”, without telling the two apart. Nobody can see which genres you like, or which hidden genres came from you. If you joined through a friend's invite, your ratings go only to people in the party who are already your friends. Nobody in a party gets anything from someone they've blocked or who has blocked them. Your watchlist and reviews are not shared. After the party ends nobody can see any of it, and the record that you were in it is deleted when the party is ended or cleared out after it expires.

Messages. Messages you send to friends, one-on-one or in a group chat: the text, any titles you attach, emoji reactions, and when each chat was last read. Only the people in a chat can read it. In a group, everyone in it sees everyone's messages and usernames, including people who aren't your friends; nothing else of yours is shown to them. On a title sent in a chat, the people in it see whether others in it have saved it to their watchlist, watched it or rated it; people who aren't your friends are counted, not named. We don't read your messages. We look at one only if someone in the chat reports it, or if the law requires it. You can delete your own messages at any time.

Feedback. Anything you send through the feedback form. We may reply to it at your account's email address.

We do not collect location data or your contacts.

If you're signed in, which streaming services you have is saved to your account, so it follows you to other devices. If you're not signed in, it lives only in this browser's local storage; clearing your browser data means re-selecting it.

Hidden genres, watchlist, seen titles and ratings are also kept in local storage so the app works before you sign in and stays responsive afterwards. Clearing your browser data clears that copy, but if you have an account, the copy on our servers is authoritative and carries over to other devices.

Streaming availability comes from the Streaming Availability API by Movie of the Night. Awards data comes from Wikidata. Watch Picker uses YouTube API Services: trailers are located using the YouTube Data API and played through YouTube's standard embedded player.

When a trailer loads, YouTube may set cookies and receive your IP address and player interactions directly, under Google's Privacy Policy. We do not send YouTube any information about who you are, and we never ask for access to your Google or YouTube account, so we don't receive any of its data. You can review and remove any app's access to your Google account at Google's security settings.

We cache a single public video ID per title so the right trailer can be embedded. That cache is refreshed on a rolling cycle, within the 30 days YouTube allows, and holds no personal data. A title's video ID is deleted when the title leaves our catalog.

Services that run the site. Accounts and everything you save are stored with Supabase, our database and authentication provider. Poster images are served from our own copies on Cloudflare, which, like any image host, sees your IP address when a poster loads. When you sign up, sign in, reset a password or join a Watch Party as a guest, Cloudflare Turnstile checks that the request comes from a person; it may receive your IP address and browser details for that check, and shows a challenge only if it is unsure. The site itself is hosted on Vercel.

To see which pages people use, Watch Picker counts page views with Vercel Web Analytics. It doesn't use cookies and doesn't identify you: each page view records the page (without anything after a “?” or “#” in the address, and with other people's profile IDs removed), the site that linked you here, your approximate location at city level, and your device, operating system, and browser. Visits are counted with a temporary code that's discarded after 24 hours.

Page views alone can't say whether a feature is worth keeping, so Watch Picker also counts what gets used (buttons pressed, a filter changed, a watch link followed) with PostHog, a product-analytics service. It runs in “cookieless” mode: nothing is stored in cookies, local storage, or session storage on your device, and no profile is created for you, so these counts can't be tied to you or followed between visits, whether or not you're signed in. (The one exception is our own staff: a device an administrator has signed in on keeps a flag in local storage so its visits are left out of the counts.) PostHog estimates how many people visit using a code it works out on its own servers from your IP address and browser, which changes every day. Session recording and surveys are switched off. What each event records is the action and, where it matters, which service or list it happened on. It never records what you typed or the contents of your watchlist or reviews.

Account emails (confirming your address and resetting your password) are sent through Resend, an email delivery service, from hello@getwatchpicker.com. Replies to feedback you send us go the same way.

If a friend's message to you sits unread for 15 minutes, we email you once to say who it's from and how many messages are waiting, never what they say, and nothing more about that chat until you've read it. You can turn these off in your profile's Account settings.

The Friday digest is one email a week. You choose whether to get it when you sign up (the box starts ticked), and you can change that any time in your profile. When it's on, we use your email address, your services, the titles you've marked seen, the genres you hide and your watchlist to choose what goes in it, and send it through Resend. Every digest has a one-click unsubscribe link, and you can turn it off in your profile at any time. We don't sell or share your email address.

When something breaks, Watch Picker sends a report to Sentry, an error-monitoring service, so we can find and fix it. A report contains the error message and where in the code it happened, the page it happened on, and your browser and operating system. Sentry also counts sessions anonymously to measure how often pages crash.

We've turned off everything else Sentry can collect: reports don't include your account, IP-based identity, cookies, form contents, or URL query parameters. We don't use Sentry's screen recording or performance tracing.

Your username, avatar, reviews and comments are visible to anyone using Watch Picker. Your seen titles and ratings are visible only to you and your friends, including anyone who added you from your invite link. The genres you hide, the genres you like and the titles you mark “Not interested” are visible only to you. Your watchlist is visible only to you, except that the people in a chat see whether you've saved a title that was sent in it. Your messages are visible only to the people in the chat. Which streaming services you have isn't shown to anyone else, including friends. Your email address is never shown to other users.

Friends of your friends may see your username, avatar and the friends you share under “People you may know”, so they can send you a request. You can turn this off in your profile's Account settings.

Use Delete account in your account settings. This removes your login and cascades to every record tied to it: profile, watchlist, seen titles, reviews, comments, likes, friendships, reports, and your messages and reactions (a group chat stays for the others in it, without yours). It is immediate and cannot be undone.

Your star ratings are kept, but with nothing that links them to you: only the title, the number of stars and when they were given. They go on counting toward each title's member average. The same applies when an old Watch Party guest account is cleared out.

To remove a single review or comment instead, delete it from the title's page.

Watch Picker is intended for people old enough, under the laws where they live, to use an online service without a parent or guardian's consent. We don't currently have an age-verification step, and we don't knowingly collect data from children below that age.

If this policy changes materially we will update the date above. Questions, or a request about your data, can go through the feedback form if you're signed in. For questions or requests about your data, email hello@getwatchpicker.com.