Privacy

Your watchlist, the films you have marked as seen and any star ratings you gave them, which films you have already swiped, and the name you type when you start or join a movie night. On the web these live in your browser's local storage; in the app they live in its private storage on the phone.

The app also generates a random identifier the first time you open it, so that the other person in a movie night can be told apart from you. It is a random value we make up — not your device's serial number, not an advertising identifier, and not anything that can be traced back to you or matched with another app.

None of this is sent anywhere unless you start or join a movie night. Deleting the app, or clearing your browser's data for this site, deletes all of it.

Starting or joining a night creates a shared session on our server. It holds the four-letter code, the filters chosen for the deck, the list of films in that deck, the random identifier and display name of each of the two participants, and each swipe — which film, whether it was a yes or a no, and when. The swipes are what let the app tell you the two of you matched.

Everything under a code is deleted automatically 24 hours after the night is created. We keep no copy of it afterwards. If a film ends up on your watchlist, that copy is on your device, not ours.

There are no accounts, so there is no email address or password. We do not ask for or receive your location, contacts, photos, calendar, or any advertising identifier. There is no analytics or crash-reporting service in the app, and no advertising or tracking code of any kind. Nothing is sold, and nothing is shared for advertising.

Our hosting provider records ordinary web-server logs for the requests the app makes, which include the IP address the request came from. One endpoint — the list of countries used by the filters — is rate limited by counting recent requests against the caller's IP address; that counter is discarded within a minute.

Film information, posters and artwork come from TMDB. Posters are loaded directly from TMDB's image servers as you swipe, so TMDB sees the IP address of your device in the same way any website you visit would. This product uses the TMDB API but is not endorsed or certified by TMDB.

The site and its API run on Vercel, and movie-night sessions are stored in a Redis database hosted by Upstash. Both act as our infrastructure providers and process this data on our behalf. The iOS app is distributed through Apple, which reports its own download and crash statistics to us in aggregate; those come from Apple, not from anything in the app.

This is an app about horror films and is not intended for children. We do not knowingly collect anything from a child under 13 — and, having no accounts, we have no way to know a user's age.

You can remove films from your watchlist or unmark them as seen inside the app, and deleting the app removes everything it has stored. Movie-night data expires on its own within 24 hours; if you want it gone sooner, write to us with the code and we will delete it.

If what the app collects changes, this page changes with it and the date above moves. There is no mailing list to notify, so the date is the honest signal — worth a glance if it matters to you.

Questions, or a deletion request: privacy@brash.dev