Privacy Policy

PictureBox (“we”, “our”, “us”) is committed to protecting your privacy. This policy explains what information we collect, how we use it, and your rights over it.

What We Collect

When you use PictureBox, we collect the following:

• Email address and username (required to create an account)
• Watch history — films and TV shows you log, including status and dates
• Ratings and written reviews you submit
• Streaming service preferences you set in your profile
• IP address, used solely for rate limiting and abuse prevention

What We Don't Collect

We do not collect payment information (we have no paid tier), precise geolocation data, device contacts or address books, or any biometric data. We do not sell your data to third parties.

How We Use Your Information

Your data is used to provide and improve the PictureBox service — powering your diary, watchlist, and stats. We send transactional emails only (account confirmation, password reset). We will never send marketing emails without your explicit consent.

Third-Party Services

We rely on the following sub-processors, each bound by their own privacy policies:

• Supabase — database and authentication (data stored in the EU by default)
• TMDB (The Movie Database) — film and TV metadata; your searches may be proxied through their API
• Vercel — hosting and edge network
• Resend — transactional email delivery

Data Retention

We retain your data for as long as your account is active. If you request account deletion, your personal data is purged within 30 days. Aggregated, anonymised statistics may be retained indefinitely.

Your Rights

You can export your watch history and reviews at any time from your account settings. You may also request full account deletion, which permanently removes your profile, logs, and reviews from our systems.

Children (COPPA)

PictureBox is not directed at children under the age of 13. We do not knowingly collect personal information from anyone under 13. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

GDPR (EU Users)

If you are located in the European Economic Area, you have the right to access, rectify, or erase your personal data, restrict or object to its processing, and data portability. To exercise these rights, contact us at privacy@picturebox.app.

Contact

Questions about this policy? Email us at privacy@picturebox.app.