YOUR INFORMATION
Privacy Policy
Effective September 17, 2026
MovieBowls is a free, personal movie-night beta operated by Matthew Mandarano in North Carolina, United States. It is intended for US residents aged 18 or older. For privacy questions, corrections, deletion, or unwanted invitations, email m_mandarano@yahoo.com.
What we collect
When you register, we collect your email address, display name, and confirmation that you meet the beta eligibility rules and accept the terms. We record the terms version and acceptance time. Supabase processes your password and authentication information. Passwords are not stored in MovieBowls’ profile tables.
We store the bowls you create or join, membership and invitations, movie selections, watch history, shared ratings, join requests, and comments. If someone invites you before you register, we receive the name and email address they provide. Please avoid sharing sensitive personal information in bowl names, tags, or comments.
Our hosting and authentication providers process technical information such as IP addresses, request information, timestamps, and security logs. Movie poster requests go directly from your browser to TMDB’s image service, which receives the network information needed to deliver them. Movie searches and availability queries go through our server to TMDB without your account name or email.
How we use it
We use this information to authenticate accounts, operate shared bowls, deliver invitations and account emails, support users, enforce limits and eligibility, and investigate abuse. We do not sell personal information or share it for targeted advertising. This beta has no advertising or behavioral analytics integration.
Who can see your information
Your account email is not a public profile. Bowl members can see each other’s display names, roles, contributions, watch history, ratings, and bowl comments. Bowl hosts can see pending invite names and email addresses and the contact details supplied with join requests so they can manage membership.
For public bowls, the bowl name, description, tags, watch rhythm, and member count are discoverable by signed-in eligible users. Joining still requires approval. Private bowls are visible to their members. Authorized service operators can access information as needed for support, security, legal obligations, and operation. “Private” does not mean end-to-end encrypted, and we cannot prevent another member from copying information they can see.
Service providers
We use Supabase for accounts and the database, Vercel for hosting, Resend for invitation emails, and TMDB for movie data and images. Account email delivery is handled through the authentication provider’s configured mail service. These providers process information necessary to deliver their services under their own applicable terms. Data may be processed in the United States and other locations where providers operate.
Browser storage and tracking
We use browser storage to maintain your Supabase sign-in session. Clearing site storage or signing out removes the browser’s saved session. We do not use advertising cookies or cross-site behavioral tracking and do not change these practices in response to Do Not Track or Global Privacy Control signals. Third-party services receive technical information as described above; their own sites may have different practices.
Retention and deletion
Account information and contributions remain while your account and relevant bowls are active, unless you or an authorized host delete them. Pending invitations expire after 30 days and are removed by routine maintenance. Join requests older than 90 days are removed. Short-lived request-limit counters are cleared through routine maintenance; invitation-email attempt records are removed when their membership invitation is deleted.
Deleting your account removes your profile, memberships, comments, queued movies, and bowls you own, including those bowls’ shared contents. Watched-film records in bowls owned by others may remain with your account identifiers removed. Other users may retain copies of content they previously received. Backups and provider logs are not necessarily erased immediately; their retention follows the provider’s settings and applicable legal requirements. We may preserve limited records where necessary to investigate an incident or meet a legal obligation.
Your choices and requests
Use Your account to download your contributions or delete your account. You can also contact m_mandarano@yahoo.com to request access, correction, deletion, help leaving a bowl, or suppression of invitation emails. We may verify control of the affected email address before acting. Do not send your password or identity documents. We aim to respond within 30 days and will meet any shorter applicable legal deadline. If you disagree with a response, reply asking for a review.
Age and location
This beta is for US residents aged 18 or older. We do not intentionally collect information from children. If you believe a child has supplied personal information, contact us so we can investigate and remove it as appropriate. Eligibility confirmation is not an identity-verification service.
Changes
We will date policy changes and provide an in-app notice or renewed acknowledgement for material changes. We will not treat this notice as permission to introduce unrelated advertising or sell your information.