Privacy
Trust Your Friends is run by Jason Schatz, in Oakland, California. This page covers the website and the iPhone app.
What we keep
Your email address, your name, and your password (stored only as a one-way hash). If you sign in with Google or Apple, we keep the account ID they give us and, for Apple, the sign-in tokens, so we can disconnect Apple when you delete your account. Apple may give us a private relay address instead of your real one.
What you add: reviews, ratings, Recommend stamps, shelves and their order, Want to watch, comments, friends, friend requests, and your settings. If you invite someone by email, we keep the address you typed. We also record when you redeem an invite.
Your feed is built from that activity, and we keep it as part of your account.
What we don't do
No ads, no analytics, no tracking across other apps or sites, and we never sell or rent your information. The only cookies keep you signed in and protect forms. The app collects nothing from your phone beyond what you type into it.
Who sees it
Your friends see your reviews, shelves and comments; nobody else does. Your name can show to people you send a friend request or invite to, and on your invite link. A private comment is seen only by you and the person whose movie or shelf it's on.
Services we use
These handle data only to run the site:
- Render hosts the site and its database, in the United States.
- Cloudflare carries traffic to the site.
- Resend sends account and invite email.
- Sentry receives error reports. We strip passwords, tokens and request bodies, and don't attach who you are.
- Google and Apple, only if you sign in with them.
- TMDB supplies movie and TV data. Posters load from TMDB's servers, so TMDB sees your IP address, not your account. We don't send TMDB anything about you.
These services may keep their own logs, including IP addresses, for a limited time.
Deleting your account
Delete account, on the Account page or in the app, removes your account at once and for good: your reviews, ratings, shelves, comments (on anyone's review), friendships, requests, invites and feed activity. If you used Sign in with Apple, we also revoke our access with Apple. There is no undo.
Database backups are kept for 7 days, so a deleted account is gone from them within 7 days. We don't restore deleted accounts.
Your choices
You can change your name and password on the Account page, and remove anything you've added at any time.
Children
Trust Your Friends is not for anyone under 13, and we don't knowingly keep their information. If you think a child has an account, write to us and we'll delete it.
Changes
If this policy changes, the date above changes. If a change is significant, we'll tell you on the site or by email.