Privacy Policy

• Email address— used to sign you in and send transactional email (invites, account deletion confirmation). When you sign in with Apple or Google, your email comes from that provider. If you use Apple's “Hide My Email” option, we receive a private-relay address (e.g. @privaterelay.appleid.com) instead of your real one — that's fine; mail still reaches you.
• Display name (optional) — shown to people you share a list with.
• Activity — the swipes, ratings, watchlist saves, and watched marks you make. Used to tune your recommendations.
• Lists you create— the titles you add and the people you invite. Shared list members can see each other's activity within that list.

No advertising trackers, no third-party session replay, no fingerprinting. We don't sell your data.

tvery is intended for users 16 and older. We don't knowingly collect data from anyone younger; if we learn that we have, we delete the account and its data.

When a tvery user invites you to a shared list, your email address is stored against a pending invitation. Until you accept, we keep only your email and the invitation record; we don't use it for anything else, and we periodically purge unaccepted invitations. If you accept and create a tvery account, the invitation gets attached to your new profile.

Application data is stored in Supabase (Postgres) hosted in the US. The site itself runs on Vercel. Movie and TV metadata comes from The Movie Database (TMDB) — nothing about your activity is sent to TMDB. Transactional email goes through Resend.

If you sign in with Apple or Google, the provider handles the auth handshake and shares your verified email (and name, if available) with us. The provider gets the timestamp of your sign-in attempt and passes us a verified token containing your email. Apple and Google do not receive any of your tvery activity (swipes, lists, etc.).

We compute embeddings (vector representations) of the catalog and of the titles you've liked / disliked / skipped. Your "taste vector" lives only in our database, tied to your account, and is used only to rank candidates for your feed. It's not shared with other users or third parties.

You can delete your account at any time from your profile page. You'll receive a confirmation email; clicking the link permanently removes your profile, swipes, ratings, watchlists, shared-list memberships, and login. This cannot be undone.

Titles other people added to your shared lists are removed too, since the lists themselves are deleted. If a co-member kept a mirror of one of your shared lists in their own watchlist, the mirror persists with the curator's name (you) replaced by "deleted user" — only the relationship is broken; the data remains theirs.

We set the cookies that Supabase needs to keep you signed in. That's it.

We may update this policy. Material changes will be reflected in the "Last updated" date above and, when significant, announced via email.

Keymash LLC · Questions or data requests: contact@keymash.com.