Privacy Policy

When you create an account and use r8r, we collect:

• Account information: your username, optional profile bio and avatar, and the sign-in methods connected to your account (Apple, Google or Discord). From each sign-in provider we keep only the account id it gives us, so we can recognise you next time. We do not store your email address.
• Ratings and reviews: the scores, category weightings, and written reviews you submit, along with your watch log, lists, watchlist, comments and likes.
• Social data: who you follow, who follows you, and anyone you have blocked.
• Profile photos: if you upload a photo as your avatar, we re-encode it and remove its metadata (including any location data embedded by your camera) before storing it.
• Push notification tokens: if you allow notifications, the token Apple or Google issues for your device, used only to deliver them.
• Imports: if you import your history from Letterboxd, the file you upload is used to create your ratings.
• Usage data: basic server logs including IP address and request timestamps, used solely for debugging and security.

We do not collect precise location, advertising identifiers, contacts, or any payment information.

Your data is used to:

• Provide and improve the r8r service.
• Display your ratings, profile, and activity to other users in accordance with the app's social features.
• Send push notifications you have allowed, such as new followers, likes and comments.
• Post your published ratings to a Discord webhook, only if you set one up yourself.
• Respond to support requests.

We do not use your data for advertising and we do not sell it to third parties.

We do not sell or rent your personal data. We may share data with:

• Infrastructure providers: our hosting and database providers process data on our behalf under appropriate agreements. Uploaded profile photos are stored and served by Cloudflare.
• Sign-in providers: when you sign in with Apple, Google or Discord, that provider confirms your identity to us. If you delete your account, we also ask Apple to revoke r8r's access to your Apple ID.
• Push notification services: notifications are delivered through Apple Push Notification service (iOS) and Firebase Cloud Messaging (Android), which receive your device token and the text of the notification.
• External APIs: media metadata (titles, posters, release dates) is fetched from OMDb, TVmaze, Google Books, and IGDB. Your personal data is not sent to these services.
• Error monitoring: when the app or our servers hit an error, a diagnostic report is sent to Sentry so we can fix it. A report includes your account id and username, the device and OS version, and the recent actions that led to the error. It does not include your email address, your ratings or reviews, or anything you typed.

Ratings, reviews, and your username are public by default and visible to other r8r users. You can make your account private, so only people you approve as followers see your ratings. Your watchlist starts private, and each list has its own visibility setting.

Your data is retained for as long as your account is active. You may delete your account and associated data at any time from the app's Settings, or by contacting us. Deletion is permanent. You can also download a copy of everything your account holds from Settings before you go.

We use industry-standard measures to protect your data, including encrypted connections (HTTPS). You sign in with Apple, Google or Discord, so r8r never receives or stores a password for your account. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

r8r is not directed at children under 13. We do not knowingly collect data from anyone under 13. If you believe we have done so, please contact us and we will delete it promptly.

We may update this policy from time to time. Material changes will be communicated in-app. Continued use of r8r after changes constitutes acceptance.

Questions or requests? Email us at simon@himon.dev.