Your data, your control.

TL;DR: We store what you ask us to store (account, watchlist, diary). We do not sell your data. We do not run third-party ad trackers. You can export or delete everything at any time.

1. Who we are

MoodPlayr ("we", "us", "the service") is operated by Gunjan Jaswal. Contact: hello@gunjanjaswal.me. Data controller under GDPR.

2. What we collect

When you browse without an account

Preference cookies — to remember your country, theme (light/dark), Solo/Couple mode, bedtime, and Spoiler-Shield level. Functional, set by us, no cross-site tracking.
Google Analytics 4 (only if you accept the cookie banner) — anonymized usage stats (pages viewed, rough country from a truncated IP) so we can see what people find useful. IP anonymization is on; we do not enable Google Ads/advertising features. Decline and GA stays off. See Cookies.

When you create an account

Email address — for login, occasional service emails, and (if you set them) reminder emails on the day a title lands.
Hashed password — stored only as a secure one-way hash by our authentication provider. We never see the plaintext.
Display name, handle, bio, and profile picture — public if your profile is public. Profile pictures are held with our file-storage provider.
Country preference — to filter streaming availability.

What you save to your account

Watchlist, watched list, and waiting list (TMDB IDs, dates added).
Diary entries (dates, optional ratings, optional one-line reviews).
Reminders you set (a title + a date).
Watch party memberships and the moods you shared in them.
History you import (e.g. a TV Time or Letterboxd export) — we process the uploaded file to rebuild your lists, matched to TMDB, and don't keep the raw file after processing.

3. What we do NOT collect

❌ We do not sell data to any third party.
❌ We do not run advertising trackers — no Facebook Pixel, no ad networks, no behavioral ad profiling. (We do use privacy-tuned Google Analytics 4 for aggregate usage stats — disclosed above and in Cookies.)
❌ We do not fingerprint your device.
❌ We do not share your email with marketers.
❌ We do not read your clipboard, location, camera, or microphone. The app actively blocks these via Permissions-Policy headers.

4. Third-party services (categories of recipients)

These are the only categories of service that ever process any of your data. Each is a reputable provider under a data-processing agreement:

Cloud hosting & CDN — serves the site and receives your IP at request time for routing. No content sold or shared onward.
Managed database & authentication — securely stores your account and the content you save.
File storage — holds profile pictures you upload.
Email delivery — sends account and reminder emails only.
Bot protection — a challenge on signup to keep spam accounts out. Does not set tracking cookies.
Rate limiting — anti-abuse counters keyed by a hashed IP.
TMDB — the source of all movie & TV data. Outbound only: we fetch from TMDB, and it receives no user-identifying information from us.
Google Analytics 4 (Google LLC) — aggregate usage measurement with IP anonymization; advertising features off; loads only after you accept the cookie banner. privacy.
YouTube (Google LLC) — movie and TV trailers are embedded in privacy-enhanced mode and only load when you press play on a trailer. privacy.

5. Cookies

Session cookies: secure login tokens that keep you signed in. HTTP-only, SameSite=Lax, secure.
Preference cookies: country, theme (light/dark), Solo/Couple mode, bedtime, Spoiler-Shield level. Functional, no cross-site tracking.
Analytics cookies (Google Analytics 4): _ga and _ga_*, used to count visits and pages in aggregate, with IP anonymization on and advertising features off. These are only set after you accept the cookie banner — decline and none are set (Google Consent Mode keeps GA cookieless).
Trailer cookies (YouTube): only if you press play on an embedded trailer, and minimised because we use YouTube’s youtube-nocookie.com mode. No trailer, no cookie.

When you first visit, a small banner asks whether to allow analytics; your choice is remembered in a functionalmp-consent cookie. You can change your mind by clearing site data (the banner returns), and nothing on the site breaks either way. Session and preference cookies are strictly necessary or functional and stay on.

6. How long we keep data

Account data: until you delete your account.
Diary / watchlist: until you delete each entry, or the account.
Authentication logs: 90 days rolling.
Rate-limit counters: 1 hour max.
Request logs: 30 days.

7. Your rights (GDPR, CCPA, and similar)

Access & portability — download everything tied to your account as a JSON file from Settings → Your data (or email us).
Rectification — edit your profile any time from Settings.
Erasure — delete your account from Settings → Delete account. It and everything tied to it are removed immediately; backups purge within 90 days.
Opt out of analytics — decline the cookie banner, or use the Manage cookies link in the footer.
Opt out of sale — not applicable. We do not sell data.
Complain — your local data protection authority. In the EU, that's your national DPA.

8. Children

MoodPlayr is not directed at children under 13. If we learn that we have collected data from a child under 13 without verifiable parental consent, we will delete it.

9. Security

TLS 1.3 everywhere; HSTS with preload.
Row-level access controls on every table, so one account can never read another’s data.
Content Security Policy locks out injected scripts.
Passwords are stored only as secure one-way hashes.
Rate limits + bot challenges on signup + signin.

10. Changes

If we change this policy in a way that affects your rights, we will email registered users at least 14 days before the change takes effect, and update the date at the top of this page.

11. Contact

Questions, deletion requests, or data exports: hello@gunjanjaswal.me. We reply within 7 days.