Privacy Policy

Watch Picker stores the minimum needed to keep your lists, your friends, and your reviews working across devices, and you can delete all of it at any time from your account settings.

Account. An email address and password, handled by our authentication provider. We never see your password.

Profile. Your username, an optional avatar image, any genres you have chosen to hide, and which streaming services you have.

Activity. Titles you mark as seen, star ratings you leave, your watchlist and its order, reviews and comments you write, likes, and any content you report.

Social. Friend requests and accepted friendships, which are mutual: a request has to be accepted before either person sees the other's activity.

Watch Parties. You can be in a Watch Party by scanning its host's QR code, or because a friend added you to theirs. While the party runs (at most six hours, and you can leave any time), its host can see which titles you've marked seen and which genres you hide, everyone in it gets one combined list of what anyone in the party has seen and dislikes, and the party's For You picks use everyone's star ratings and liked genres, and can say who liked what. If a friend added you, your ratings go only to people in the party who are already your friends; everyone else gets just your liked genres. Nobody in a party gets anything from someone they've blocked or who has blocked them. Your watchlist and reviews are not shared. After the party ends nobody can see any of it, and the record that you were in it is deleted when the party is ended or cleared out after it expires.

Feedback. Anything you send through the feedback form.

We do not collect location data or your contacts.

If you're signed in, which streaming services you have is saved to your account, so it follows you to other devices. If you're not signed in, it lives only in this browser's local storage; clearing your browser data means re-selecting it.

Hidden genres, watchlist, seen titles and ratings are also kept in local storage so the app works before you sign in and stays responsive afterwards. Clearing your browser data clears that copy, but if you have an account, the copy on our servers is authoritative and carries over to other devices.

Streaming availability comes from the Streaming Availability API by Movie of the Night. Awards data comes from Wikidata. Trailers are located using the YouTube Data API and played through YouTube's standard embedded player.

When a trailer loads, YouTube may set cookies and receive your IP address and player interactions directly, under Google's Privacy Policy. We do not send YouTube any information about who you are, and we do not receive your YouTube account data.

We cache a single public video ID per title so the right trailer can be embedded. That cache is refreshed on a rolling cycle and holds no personal data.

To see which pages people use, Watch Picker counts page views with Vercel Web Analytics. It doesn't use cookies and doesn't identify you: each page view records the page (without anything after a “?” or “#” in the address, and with other people's profile IDs removed), the site that linked you here, your approximate location at city level, and your device, operating system, and browser. Visits are counted with a temporary code that's discarded after 24 hours.

Page views alone can't say whether a feature is worth keeping, so Watch Picker also counts what gets used — buttons pressed, a filter changed, a watch link followed — with PostHog, a product-analytics service. It runs in “cookieless” mode: nothing is stored in cookies, local storage, or session storage on your device, and no profile is created for you, so these counts can't be tied to you or followed between visits, whether or not you're signed in. PostHog estimates how many people visit using a code it works out on its own servers from your IP address and browser, which changes every day. Session recording and surveys are switched off. What each event records is the action and, where it matters, which service or list it happened on — never what you typed, and never the contents of your watchlist or reviews.

When something breaks, Watch Picker sends a report to Sentry, an error-monitoring service, so we can find and fix it. A report contains the error message and where in the code it happened, the page it happened on, and your browser and operating system. Sentry also counts sessions anonymously to measure how often pages crash.

We've turned off everything else Sentry can collect: reports don't include your account, IP-based identity, cookies, form contents, or URL query parameters. We don't use Sentry's screen recording or performance tracing.

Your username, avatar, reviews and comments are visible to anyone using Watch Picker. Your seen titles and ratings are visible only to you and to friends whose requests you have accepted, and so are the genres you hide, so a friend can add you to a Watch Party. Your watchlist is visible only to you. Which streaming services you have isn't shown to anyone else, including friends. Your email address is never shown to other users.

Use Delete account in your account settings. This removes your login and cascades to every record tied to it: profile, watchlist, seen titles, ratings, reviews, comments, likes, friendships and reports. It is immediate and cannot be undone.

To remove a single review or comment instead, delete it from the title's page.

Watch Picker is intended for people old enough, under the laws where they live, to use an online service without a parent or guardian's consent. We don't currently have an age-verification step, and we don't knowingly collect data from children below that age.

If this policy changes materially we will update the date above. Questions, or a request about your data, can go through the feedback form if you're signed in. For questions or requests about your data, email kdk210@gmail.com.