Last updated: 2 August 2026
The short version: your ratings and what you write about films are yours. You can download all of it or delete all of it yourself, from Settings, without asking anyone. We don't sell anything, we don't run ads, and there are no tracking cookies.
Rewatch Club is a fan-built film-tracking app, run by an individual in California. There is no company behind it — it is not incorporated, and it has no employees. It is an unofficial companion to a podcast about films and is not affiliated with, endorsed by, or sponsored by that podcast, its hosts, or its publishers.
Questions about this policy or your data: hello.rewatchclub@gmail.com. There is also a feedback box in Settings that goes to the same person.
We do not collect your address, phone number, date of birth, government ID, or payment card details.
We do not sell personal information. We do not use what you write for advertising. We do not send marketing email.
| Who | What they get | Why |
|---|---|---|
| Supabase (US) | Everything above — it is the database and the sign-in system | Hosting the account, data and server functions |
| Google (Gemini / Vertex AI) | Your ratings and the text you write, per request | Producing your taste profile and recommendations |
| PostHog (US) | Pseudonymous events such as "rated a film". Never the text you write, never message contents | Product analytics |
| Stripe | Your email and payment status, only if you choose to send a one-time gift | Processing that payment. We never see or store your card |
| TMDB | No personal data — film and cast lookups only | Film details, posters, cast |
| Serper (Google Images) | No personal data — an actor's name and a film title | Finding stills of an actor in a film |
| GitHub Pages | Standard web-server information such as your IP address, as any website receives | Serving the page itself |
Google's handling of data sent to its AI models is governed by Google's own terms. If AI processing of what you write concerns you, the honest answer is to not use the AI features — everything else in the app works without them.
Analytics are configured about as conservatively as the tool allows, and these are verifiable facts about the app rather than promises:
There is currently no separate opt-out switch inside Settings. Enabling Do Not Track in your browser is the way to opt out, and it works.
If you are in California, the EU or the UK you have additional rights under CCPA/CPRA, the GDPR or the UK GDPR — including access, correction, deletion and portability. The export and delete controls above are built to satisfy those directly and without a waiting period. Write to us for anything they don't cover.
Until you delete it. There is no automatic expiry. If you delete your account the data is gone at once. Records of payments may persist in Stripe's systems where law requires them to be retained.
Every table holding your data uses row-level security, so one account cannot read another's. Sensitive server operations run only with server-side credentials that are never exposed to the browser. We never receive card details. No password exists to be stolen, because sign-in is by emailed link or Google.
No system is perfectly secure, and this one is maintained by one person. Please don't store anything in a film note that you would be harmed by losing or exposing.
Rewatch Club is not intended for children under 13, and we don't knowingly collect their information. If you believe a child has created an account, email us and we'll delete it.
If this policy changes materially, the date at the top changes and a notice appears in the app. Continuing to use it after that means you accept the new version.