Privacy Policy

1. Information We Collect

We collect the following information when you use Buff™:

• Email address and display name (at registration)
• Movie and TV preferences (genres, moods, streaming platforms)
• Voting data within group sessions
• A random device identifier, generated when you first visit, together with the streaming platforms and content type you choose and the titles you mark as watched, saved, skipped or not for you. This is stored whether or not you create an account.
• Usage data and browsing patterns (via analytics)

2. How We Use Your Information

We use your information to:

• Provide personalized movie and show recommendations
• Facilitate group voting sessions
• Improve our recommendation algorithms
• Analyze usage patterns to enhance the service

3. Analytics

We use Google Analytics (GA4) to understand traffic and usage patterns. GA4 collects anonymized browsing data such as page views, session duration, and general geographic information. This data helps us improve the service experience.

4. Third-Party Services

Buff integrates with the following third-party services:

• TMDB — movie and TV show data
• Google Analytics — anonymized usage analytics
• Sentry — error monitoring; may record a replay of the page when an error occurs
• Render — application hosting and infrastructure

5. Data Storage & Security

Your data is stored on secure servers hosted by Render. Passwords are hashed using bcrypt and are never stored in plain text. Database connections are encrypted via SSL in production.

6. Data Sharing

We do not sell your personal data. Anonymized, aggregated data may be used for research or to improve the service. We may share data if required by law or to protect the safety of our users.

7. Cookies, Local Storage & Device Memory

When you first visit, Buff sets a first-party cookie named buff_did containing a random identifier, and keeps a copy in your browser's local storage. It is not derived from your IP address, hardware or any other identifier, is never shared with advertisers, and is not used to track you across other websites. It lets Buff remember your platforms, content type and the titles you have reacted to so you don't have to repeat them, and lets us carry that memory into an account if you later create one.

We also use local storage for authentication tokens when you log in. Google Analytics may set its own cookies; Sentry, our error-monitoring provider, may record a replay of the page when an error occurs.

You can erase everything Buff remembers about this device at any time with Forget this device in Preferences or your Profile; this deletes the data on our servers and the identifier in your browser. Device memory that has not been used for 180 days is deleted automatically.

8. Data Retention

Account data is retained while your account is active. Deleted accounts are soft-deleted and may be permanently removed after a retention period. Session and voting data may be retained in anonymized form for service improvement. Device memory (see section 7) is deleted after 180 days without use, or immediately when you choose Forget this device.

9. Your Rights

You may request account deletion by contacting us. Upon deletion, your personal data will be removed in accordance with our retention policy.

10. Children's Privacy

Buff is not intended for users under the age of 13. We do not knowingly collect personal information from children under 13.

11. Changes to This Policy

We may update this privacy policy from time to time. We encourage you to review this page periodically for the latest information.

12. Contact

For privacy concerns, contact us at hello@moviebuff.ai.