Privacy policy

Last updated 2026-10-21

A Reel Pickle (reelpickle.com) is a private beta movie picker for households, operated by an individual in Canada. Questions about this policy or your data: contact@reelpickle.com.

Google user data

You sign in with Google. With your consent, Google gives the app your Google account’s email address, name and profile picture URL (the openid, email and profile scopes). Supabase Auth receives this and stores it in your account record.

  • Use. The app uses your email address to sign you in, to match invitations sent to that email, and to check that a new account has been approved. It does not use your name or profile picture. It requests no other Google data and no access to Gmail, Drive, contacts or any other Google service.
  • Visibility. Other adults in your household can see your email address on the household screen.
  • Sharing. Google user data is not sold, not used for advertising, and not shared with anyone except the service providers listed below, which run the app.
  • Storage. It is kept in the Supabase Auth database for as long as your account exists.

Household data

The app stores what households enter:

  • The household name, and each account’s membership and role.
  • Viewer nicknames and optional age bands. Viewers can be children; they have no accounts, and an adult enters them.
  • Collections and the films in them, identified by film ID.
  • Viewing history: the film, the date and who watched.
  • Invitation records: the invited email address, a hash of the invitation token and its expiry. The token itself is shown once to the person who creates the invitation and is not stored.
  • Signup approvals entered by the operator: the approved email address and its expiry.

When a household follows another household’s collection, it sees only that collection’s name and films, not the other household’s viewers, history or other collections.

Film data

Film information and posters come from TMDB. The app’s servers send TMDB search text and film IDs, never your account or household data. Posters load from TMDB’s image server directly in your browser, so TMDB receives your IP address and browser details as with any image request.

Service providers

  • Supabase: database and authentication.
  • Vercel: hosting.
  • Google: sign-in.
  • TMDB: film data.

Data is stored with Supabase and Vercel, which may process it outside Canada.

Cookies and browser storage

  • An HttpOnly session cookie from Supabase keeps you signed in.
  • A ten-minute HttpOnly cookie holds a one-time code and the page to return to while you sign in with Google. It is cleared when sign-in finishes.
  • Browser sessionStorage holds a recovery token for an interrupted save and a pending invitation token. These clear when the tab closes.
  • The demo stores fictional data only, in your browser’s localStorage. It never leaves your device.

The app has no analytics and no advertising, and does not sell or share data for marketing.

Retention and deletion

Data is kept while your account or household exists. To delete your account or your household’s data, email contact@reelpickle.com. Deletion is done by hand during the beta, and you get a reply once it’s done.

Your rights

Under Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) you can ask to access or correct the personal information held about you. Email contact@reelpickle.com.

Changes

Changes to this policy are posted here with a new date at the top.