Privacy

Your likes, watchlist, dislikes, skips and the taste profile built from them are written to your browser's local storage under keys beginning mmt:. This is what makes the app work without an account. Clearing your browser data removes all of it.

The phone apps keep exactly the same things under exactly the same keys, in the app's own storage rather than a browser's. Deleting the app removes all of it.

So your lists survive a cleared browser and follow you to another device, the same decisions are mirrored to a database hosted by Supabase. Each row holds the film, the verdict, how long the card was on screen before you decided, and which query surfaced it.

Alongside them is the log the taste profile is built from: one row per answer, in the order you gave them, including duels and whether you said you had seen the film. It is the same information as the decisions themselves, kept in the order they happened, because that order is what lets your profile be rebuilt on a new device rather than approximated.

Every visitor gets an anonymous account automatically — no email, no name. Row level security means an account can only ever read its own rows. If you sign in with Google, your name, email address and profile photo are attached to that existing account so it can be recognised on another device; your earlier swipes are kept.

Taken together and stripped of who gave them, these answers also tell us what people in general like, and which films most people have actually seen. That is used to give somebody arriving for the first time a better starting point than nothing at all. Only the totals are used for this; nothing that identifies you leaves your own rows.

Nothing is measured until you agree. Decline, and Google Analytics stays in its denied state, writes no cookies and sends only an anonymous, cookieless signal that a page was viewed; Microsoft Clarity is not loaded at all.

Accept, and both run normally: Analytics records which pages are visited, where visitors arrive from, roughly where in the world they are and which device they use, plus in-app actions such as swiping, searching a list or signing in. Clarity records an anonymised replay of the session and builds heat maps, so we can see where the interface confuses people. Neither is used for advertising, and your movie lists are not sent to either.

If you are signed in, Analytics is also given your account's identifier — the random id the database knows you by, never your name or your email address — so that the same person on a phone and on a laptop is counted once rather than twice. Decline, and it is not sent at all.

You can change your mind whenever you like — the choice sits under Cookies in the account menu. Or change it here.

The apps are the same product, the same account and the same rows: everything above about what is kept on your device and on our server is true of them too.

What is not true of them is the section before this one. The apps carry no analytics at all — no Google Analytics, no Clarity, no crash reporting, no advertising or attribution kit of any kind. That is why they never ask you about cookies: there is nothing to agree to. It is also why iOS never shows you the "allow this app to track you" prompt. Nothing in either app follows you into anybody else's app or website.

On iOS you can sign in with Apple as well as with Google. If you use Apple's option to hide your address, we are given the relay address and never see the real one; either way the only things attached to your account are the name, address and photo the provider hands over.

• TMDB — film data, posters and ratings.
• Supabase — the database and anonymous accounts.
• Google — sign-in if you choose to use it, and Analytics on the website only.
• Apple — Sign in with Apple, and the App Store.
• Microsoft — Clarity session replay and heat maps, on the website only.
• Hostinger — hosting, which means standard server logs.

The app deletes accounts itself, and the whole thing happens inside it. On this site, sign in and open Analytics; "Delete account" sits at the foot of that page. In the Android and iOS apps it is on the More tab, under your name. Either one removes the account and everything the server keeps under it — your lists, your swipes and your taste profile — and clears the device as well. It cannot be undone.

If you would rather keep the account and throw away what it has learned, "Start over" sits on the same Analytics page, just above it. That one erases your swipes, your duels and the event log on the server as well as on this device, and leaves you signed in with an empty profile.

Clearing your browser's data for this site, or deleting the app from your phone, removes what is held locally and signs the anonymous account out, but it leaves the rows on the server alone. If you would rather we did it for you, write to miniconstudio@gmail.com and say so — there is no form to fill in.

MyMovieTaste is not aimed at children under 13 and we do not knowingly keep data about them.