• Create and operate your account and sign you in.
• Provide the core features: logging watched movies, ratings, watchlists, and partner suggestions.
• Enable partner pairing and sync shared library information between paired users.
• Keep the Service secure and prevent abuse.
• Respond to you when you contact us.
• Comply with legal obligations.

Moviemash lets you pair with one other person. Pairing is mutual and is designed for sharing: once you pair, you and your partner can each see the other's full library — every movie logged as watched, star ratings and written reactions, the watchlist and interest levels, and the associated dates.

There are currently no per-item privacy controls, so pairing shares your library as a whole rather than selected parts; to stop sharing, you can unpair at any time in Settings. (We may add finer-grained sharing controls in the future; if we do, we will update this policy.) It's worth keeping this in mind when you decide what to log.

We use only strictly necessary cookies and on-device storage:

• A session cookie (via Supabase) that keeps you signed in.
• Local browser storage for your preferences, such as your theme and layout choices. These stay on your device and are not sent to us.

We do not use advertising or third-party analytics cookies. Because we use only essential and preference storage, no cookie-consent banner is required. You can clear these at any time through your browser settings, though you will then need to sign in again.

We share information only with the providers needed to run the Service, and only as needed:

• Supabase — authentication and database hosting.
• Vercel — application hosting.
• Resend — email delivery, including your one-time sign-in codes and partner-invite notifications. Your email address and login codes pass through Resend in order to reach you.
• The Movie Database (TMDB) — movie information. We send limited technical requests to TMDB to retrieve movie details and images. Moviemash uses the TMDB API but is not endorsed or certified by TMDB.

We do not sell your personal information, and we do not share it for advertising.

Our providers process and store data in the United States. If you use Moviemash from outside the US, your information will be transferred to and processed in the US, where privacy laws may differ from those in your country. By using the Service, you consent to this transfer.

We keep your information for as long as your account is active. If you ask us to delete your account (see Section 8), we delete or anonymize your personal information within 30 days, except where we must retain something to comply with the law or resolve a dispute. Residual copies may persist in encrypted backups for a short period before being overwritten.

You can ask us to:

• Access the personal information we hold about you,
• Correct inaccurate information,
• Delete your account and personal information,
• Export a copy of your data,
• Object to or restrict certain processing, or withdraw consent where applicable.

During the beta, account deletion and data requests are handled by email — contact support@moviemash.app and we will action your request within 30 days. (Self-serve account deletion and data export are planned.) You can also change your display name and remove individual watched or watchlist entries yourself at any time, and you can unpair from a partner in Settings.

We use reasonable technical and organizational measures to protect your information, including encrypted connections (HTTPS) and the access controls provided by our hosting platforms. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a data breach affects your personal information, we will notify you and any required authorities without undue delay, as required by law.

Moviemash is not directed to children under 13, and we do not knowingly collect personal information from them. If we learn that we have, we will delete it. If you believe a child has provided us information, contact support@moviemash.app.

We do not sell or share your personal information. If you are a California resident, you may request to know, delete, or correct the personal information we hold about you by emailing support@moviemash.app. We will not discriminate against you for exercising these rights.

We may update this policy as Moviemash evolves. We will post the updated version here with a new effective date, and for material changes we will provide notice through the Service or by email. Continued use after an update means you accept the revised policy.

Questions or privacy requests: support@moviemash.app.