MoodBinge ("we", "us", or "our") operates the website at moodbinge.com. This Privacy Policy explains what information we collect, how we use it, and your rights. By using MoodBinge, you agree to the practices described here.

1. Information We Collect

Information you provide

Google sign-in: If you choose to sign in, we receive your name, email address, and a URL linking to your profile picture hosted on Google's servers. Sign-in is optional — MoodBinge works without an account.
Contact messages: If you contact us via the contact form, we store your name, email, and message for up to 12 months.

Information collected automatically

Usage analytics: We use PostHog to collect anonymous usage data such as pages visited, features used, and search queries. This helps us improve the product. PostHog may set cookies for this purpose.
Device information: Standard browser/device information may be collected as part of analytics (browser type, OS, screen size).
IP address: Used for rate limiting and fraud prevention; not stored long-term.

Data stored on your device

Your watchlist, seen items, and preferences are stored in your browser's localStorage and never leave your device unless you are signed in.
If signed in, your watchlist and ratings are synced to our secure Supabase database so you can access them across devices.

2. How We Use Your Information

To provide and improve the MoodBinge service
To sync your watchlist and ratings across devices (signed-in users only)
To respond to support requests
To understand how the product is used and improve it
To prevent abuse and enforce rate limits

We do not sell your personal data to any third party. We do not share your data for cross-context behavioural advertising.

3. Lawful Basis for Processing (GDPR)

If you are located in the European Economic Area, we rely on the following lawful bases:

Contract: Processing your account data (name, email) is necessary to provide the MoodBinge service when you sign in.
Consent: Analytics tracking via PostHog is only performed with your explicit consent via the cookie banner. You can withdraw consent at any time.
Legitimate interest: Storing contact messages to respond to support requests; server-side rate limiting using IP addresses (not stored long-term).

4. Third-Party Services

MoodBinge uses third-party services to provide content data, authentication, analytics, and hosting. These services may process limited user data as necessary to operate the platform and are governed by their own privacy policies. We use Google OAuth (optional sign-in) and analytics tools (with your consent) that may set cookies. Movie and TV show data is sourced from publicly available databases and is not linked to your personal identity.

5. Cookies

We use cookies and similar technologies for:

Authentication: Session cookies to keep you signed in (only if you sign in)
Analytics: Cookies to understand product usage (only with your consent)

You can manage cookies through your browser settings or via the cookie consent banner on your first visit.

6. Data Retention

Watchlist and ratings: retained until you delete your account or request deletion
Contact messages: retained for up to 12 months
Analytics data: subject to PostHog's retention policy

7. Your Rights

Depending on your location, you have the following rights:

Access: Request a copy of the personal data we hold about you.
Portability (GDPR Art. 20): Download your watchlist and ratings as a JSON file from your Profile page at any time.
Correction: Request correction of inaccurate data.
Deletion: Delete your account and all associated data immediately from the Profile page (Danger Zone tab). Your watchlist, ratings, and account are permanently removed from our servers. You can also email us if you cannot access the app.
Withdraw consent: Opt out of analytics at any time via the cookie consent banner or browser settings.
CCPA (California residents): You have the right to know what personal information we collect, to delete it, and to opt out of its sale. We do not sell personal information.

To exercise any of these rights, contact us at support@moodbinge.com. We will respond within 30 days.

8. Children's Privacy

MoodBinge is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us data, please contact us and we will delete it.

9. Security

We use industry-standard measures to protect your data, including HTTPS, Supabase's Row Level Security (RLS), and secure OAuth flows. No transmission over the Internet is 100% secure — we cannot guarantee absolute security.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top will reflect any changes. Continued use of MoodBinge after changes constitutes acceptance of the updated policy.

11. Contact Us

For privacy-related questions or data deletion requests, contact us at support@moodbinge.com.