Privacy Policy

1. What we collect

Account data (stored on our servers)

• Email address and display name, when you sign up.
• Your password — we never see it in plain text; it's hashed and managed by our authentication provider, Supabase.
• Subscription status (whether you're on Pro) and Stripe customer/subscription IDs, used to manage billing. We do not store your card number or full payment details — Stripe handles that directly.

Data that stays on your device only

• Your watchlist, ratings, custom lists, and streaming-service preferences are stored in your browser's local storage.
• We do not transmit this data to our servers or have access to it. It stays on the device you're using and is lost if you clear your browser data or switch devices.

Tonight's Pick prompts

If you use the Tonight's Pick feature, the text you type (e.g. "something funny for date night") is sent to Anthropic's Claude API to generate recommendations. This request is not linked to your account identity by us.

2. How we use your data

• To create and secure your account, and let you sign in.
• To process and manage your Pro subscription and billing.
• To generate AI-powered recommendations when you use Tonight's Pick.
• To respond to support requests you send us.

We do not sell your personal data, and we do not use it for advertising or ad targeting.

3. Who we share data with

We use a small number of third-party services ("sub-processors") to run BingeTok. Each only receives the data it needs to do its job:

• Supabase — authentication and database hosting (account data).
• Stripe — payment processing for Pro subscriptions.
• Vercel — application hosting.
• Cloudflare — domain DNS and network routing.
• The Movie Database (TMDB) & JustWatch — movie/TV/anime metadata and streaming availability. No personal data is sent to these services; we only query public content data.
• Anthropic — powers the AI recommendations behind Tonight's Pick.

Some of these providers may process data on servers located in the United States. Where required, we rely on their standard contractual safeguards for international transfers.

4. Cookies and local storage

We use one essential cookie to keep you signed in — it's required for the app to function and isn't used for tracking or advertising. We also use your browser's local storage to save your preferences, watchlist, and ratings on-device, as described above. We do not use analytics or advertising cookies.

5. How long we keep your data

We retain your account data for as long as your account is active. If you delete your account (email support@bingetok.comto request this), we delete your account data within 30 days, except where we're required to retain billing records for legal or tax purposes.

6. Your rights

If you're in the EU/EEA or another jurisdiction with similar protections, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request deletion of your data.
• Object to or restrict certain processing.
• Request a copy of your data in a portable format.

To exercise any of these rights, email support@bingetok.com. We'll respond within 30 days.

7. Children's privacy

BingeTok is not directed at children under 16. We don't knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, contact us and we'll delete it.

8. Security

We rely on industry-standard practices from our infrastructure providers (Supabase, Stripe, Vercel) to protect your data, including encryption in transit and row-level access controls on our database. No method of transmission or storage is 100% secure, and we can't guarantee absolute security.

9. Changes to this policy

We may update this Privacy Policy from time to time. If changes are material, we'll make reasonable efforts to notify active users.

10. Contact

Questions or requests regarding your data? Email support@bingetok.com.