Privacy Policy
Effective: October 7, 2026
Private test. gremblin is being tested with a small group of invited people. It is operated by Jon Smith as an individual; this policy will be updated before gremblin opens to the public, and you will be told when that happens.
This policy explains what personal data Jon Smith ("gremblin", "we", "us") collects when you use gremblin, why, where it goes, and what you can do about it. It is written to be read. If anything is unclear, ask: jon@foxbotinc.com.
The short version: we collect what the Service needs to work and nothing for advertising. There are no ad trackers, no cross-site tracking, no data brokers, and no selling of your data. Your private notes stay private. You can export or erase everything yourself.
1. What we collect
Account. Your email address and a username. If you sign in with Google or Apple, the identifier and email that provider shares with us. Your password, if you set one, is handled by our authentication provider (Supabase) in hashed form; we never see it.
What you record. The titles you track and their state (Playlist, In Progress, Completed, Shelved), your sessions and log entries, ratings, likes, reviews, private notes, progress markers, and per-show preferences. This is the product; it exists because you created it.
Social. Who you follow and who follows you, follow requests, likes on reviews, invite links you create, and the in-app notifications these generate.
Settings. Your privacy mode (public or private account), theme preference, and the time zone your browser reports, which we use to work out which calendar day a log entry belongs to.
Feedback. When you send feedback from inside the app we store what you wrote, which kind of feedback it is, the page you were on, the app version, and your browser's user-agent string, so we can reproduce what you saw.
Technical. Our hosting provider (Vercel) keeps standard server logs, including IP addresses, for a limited period for security and debugging. Our authentication provider keeps sign-in records for the same reason.
Analytics, anonymous only. We use Plausible, a cookieless analytics service, to count visits, see which pages people arrive on, and measure how many visitors start and finish signing up. It uses no cookies and no persistent identifier, and we cannot tell who an individual visitor is.
We do not collect your date of birth, your location beyond the time zone above, your contacts, or anything from other apps.
2. Why we use it
- To provide the Service: your journal is stored so that you can see it, and shown to others only as your privacy setting allows.
- To sign you in, keep you signed in, and let you reset your password.
- To send you the emails the Service needs: sign-in confirmations, password resets, and, if you ask for them later, notifications. We do not send marketing email.
- To fix bugs and improve the Service, using feedback you send and anonymous usage counts.
- To keep the Service safe: to find abuse, enforce the Terms of Service, and protect other users.
- To meet legal obligations.
Where the law requires a legal basis, we rely on performance of our contract with you (providing the Service), our legitimate interests in keeping it secure, working and improving, and your consent where we ask for it.
3. Who can see what
On a public account, your profile, your activity (what you watched, played, read, and rated), and your reviews are visible to anyone, including people who are not signed in and search engines. On a private account, they are visible only to followers you have approved. You can switch between the two in Settings at any time.
Private notes are never visible to anyone but you, on either kind of account. Feedback you send is visible only to us.
4. Who we share it with
We share personal data only with the service providers that run gremblin, and only to the extent they need it to do their job:
| Provider | What they do | Where | |---|---|---| | Supabase | Database and authentication | Canada (Montréal region) | | Vercel | Hosting and server logs | United States and global edge locations | | Resend | Sends transactional email on our behalf | United States | | Plausible | Cookieless analytics | European Union | | Google, Apple | Sign-in, if you choose it | Per their own policies |
Title information (names, artwork, release dates) comes from TMDB, IGDB and Open Library. We fetch it from our own servers; your identity is not sent to them. When you search, the words you type are sent to those sources so they can answer, without anything that identifies you.
We do not sell personal data. We will disclose it if the law requires us to, or to protect the rights and safety of users or the public.
5. International transfers
Your data is stored in Canada. Some providers above process it in the United States or elsewhere. Where the law requires safeguards for such transfers, we rely on the providers' standard contractual protections.
6. How long we keep it
- Your account and journal: for as long as your account exists.
- After you delete your account: everything is hidden immediately. If you sign in again within 30 days, it is restored in full. At day 30, every personal record is permanently erased: account, journal, reviews, notes, follows, notifications and feedback. Copies in routine backups expire shortly after.
- Server logs: for a limited period set by the provider, then discarded.
- Cached title information is not personal data and is kept as needed.
7. Your rights
Wherever you live, you can do the following from Settings without asking us:
- Access and portability: export everything you have recorded as JSON, and your activity and library as CSV.
- Rectification: edit or delete any log entry, rating, review or note; change your username and email.
- Erasure: delete your account, with the 30-day window above.
- Restrict visibility: switch to a private account.
If you have a right under the law where you live that you cannot exercise from Settings (for example to object to a particular use, or to complain to a supervisory authority), contact us at jon@foxbotinc.com and we will help. You may also complain to your local data-protection authority.
8. Security
Access to data is enforced in the database itself: every table is locked by default and a row is readable only by its owner or, for public content, by the rule that makes it public. Passwords are hashed by our authentication provider and never stored by us. All traffic is encrypted in transit. No system is perfectly secure; if we learn of a breach affecting your data, we will tell you.
9. Children
gremblin is not for anyone under 13, or under the age where you live at which consent to data processing can be given. We do not knowingly collect data from children. If you believe a child has an account, tell us and we will remove it.
10. Changes
We will update this policy when the Service changes in a way that affects your data, and we will tell you in the Service or by email if a change is significant. The current version is always at /privacy, with the effective date at the top.
11. Contact
Jon Smith · Brooklyn, New York, USA · jon@foxbotinc.com