Draft. This is a working document, not executed legal advice. It must be reviewed against the applicable data-protection regime before launch, and updated whenever a new processor is added.

Privacy policy

Last updated: draft

What we collect

· Account data: email address, display name, username, avatar.
· Activity data: verdicts, watch statuses, diary entries, reviews, lists and discussion posts you create.
· Technical data: IP address and coarse request metadata, retained briefly for abuse prevention and rate limiting.

What we do not collect

We do not collect payment card details, we do not sell personal data, and we do not read or scan your streaming accounts. Rocktale has no access to any provider account you may hold.

Why we hold it

· To operate your account and show your activity to people you follow.
· To compute aggregate verdict statistics shown on title pages.
· To detect spam, abuse and scraping.

Processors

Rocktale relies on third-party infrastructure for hosting, database, authentication and email delivery. Each processor receives only the data needed to perform its function. The current list of processors is maintained alongside this policy and will be published before launch.

Your choices

You can make lists private or unlisted, delete reviews you have written, and request deletion of your account and its associated content. Aggregate numbers already computed from your verdict may remain in anonymised form.

Data retention

Account data is retained while the account exists. Moderation records and audit logs may be retained longer where needed to keep the platform safe.

Contact

A dedicated privacy contact address must be added before launch, along with the responsible operator entity and its registered address.