Skip to main content
← Back to StreamVault

Privacy Policy

Last updated: April 15, 2026

Your privacy is important to us. This Privacy Policy explains how StreamVault ("we," "us," or "our") collects, uses, discloses, and protects your personal information when you use our website and services (collectively, the "Service"). By using the Service, you consent to the practices described in this policy.

1. Information We Collect

We collect the following types of information:

a) Information You Provide

  • Account information via Google Sign-In (name, email address, profile photo)
  • User-generated content (movie/TV show ratings, reviews, watchlists, collections, and lists)
  • Social interactions (club memberships, watch party participation, comments, and posts)
  • Preferences and settings you configure within the Service

b) Information Collected Automatically

  • Usage data (pages visited, features used, time spent on the Service)
  • Device information (browser type, operating system, screen resolution)
  • IP address and approximate geographic location
  • Error and performance data (crash reports, load times)

2. How We Use Your Information

  • To provide, maintain, and improve the Service
  • To personalize your experience and content recommendations
  • To enable social features (clubs, watch parties, user profiles)
  • To communicate with you about service updates and changes
  • To monitor usage patterns and prevent abuse or misuse
  • To diagnose technical issues and improve performance
  • To comply with legal obligations

3. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), we process your personal data based on the following legal grounds:

  • Consent: You have given consent for processing (e.g., accepting cookies, signing in).
  • Contract: Processing is necessary to provide the Service you requested.
  • Legitimate Interest: Processing is necessary for our legitimate interests (e.g., improving the Service, preventing abuse), provided those interests are not overridden by your rights.

4. Third-Party Services

We use the following third-party services that may collect and process your data:

We do not sell your personal information to any third party.

5. Cookies & Local Storage

We use cookies and browser local storage for the following purposes:

  • Essential: Authentication state, session management, cookie consent preference
  • Functional: User preferences, theme settings, UI state
  • Analytics: Google Analytics cookies to understand usage patterns

You can manage or delete cookies through your browser settings. Disabling essential cookies may prevent the Service from functioning properly.

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required to retain it for legal or regulatory purposes. Anonymized or aggregated data that can no longer identify you may be retained indefinitely for analytics purposes.

7. International Data Transfers

Your data may be processed and stored on servers located outside your country of residence, including in the United States, through our use of Google Firebase and other third-party services. These providers maintain appropriate safeguards (such as Standard Contractual Clauses) to protect your data in accordance with applicable laws.

8. Data Security

We implement reasonable technical and organizational measures to protect your personal data, including encryption in transit (HTTPS), secure authentication via Google OAuth, and access controls on our database. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

9. Children's Privacy

The Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected data from a child under 13, we will take steps to delete that information promptly. If you believe a child under 13 has provided us with personal data, please contact us at support@streamvault.app.

10. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

  • Access: Request a copy of the personal data we hold about you.
  • Correction: Request correction of inaccurate or incomplete data.
  • Deletion: Request deletion of your account and associated data.
  • Portability: Request a machine-readable copy of your data.
  • Opt-out: Opt out of analytics tracking via your browser settings or by using browser extensions.
  • Withdraw Consent: Withdraw consent for data processing at any time (this will not affect the lawfulness of processing before withdrawal).

You can exercise your Access, Portability, and Deletion rights directly from your Settings page under "Your Data". For other requests, contact us at support@streamvault.app. We will respond to your request within 30 days.

11. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

  • Right to Know: You can request information about what personal information we collect, use, disclose, and sell.
  • Right to Delete: You can request deletion of your personal information, subject to certain exceptions.
  • Right to Opt-Out of Sale: We do not sell your personal information. If this changes, we will provide a "Do Not Sell My Personal Information" link.
  • Right to Non-Discrimination: We will not discriminate against you for exercising any of these rights.
  • Right to Correct: You can request correction of inaccurate personal information.
  • Right to Limit Use of Sensitive Personal Information: We do not collect sensitive personal information as defined under CPRA.

To exercise these rights, visit your Settings page or contact us at support@streamvault.app. We will verify your identity before processing your request and respond within 45 days.

12. Do Not Track Signals

Some browsers have a "Do Not Track" (DNT) feature that sends a signal to websites you visit indicating you do not wish to be tracked. We respect DNT signals and will not load analytics cookies (Google Analytics, Microsoft Clarity) if your browser has DNT enabled. You can also manage your tracking preferences through our cookie consent banner.

13. International Privacy Rights

If you are located outside the US, you may have additional rights under local privacy laws:

UK GDPR (United Kingdom)

UK residents have the same rights as those under GDPR (Section 3), including access, rectification, erasure, and portability. You may lodge complaints with the UK Information Commissioner's Office (ICO).

LGPD (Brazil)

Brazilian residents have rights under the Lei Geral de Proteção de Dados including: access to your data, correction of incomplete/inaccurate data, anonymization or deletion of unnecessary data, data portability, information about third parties with whom data is shared, and the ability to revoke consent.

POPIA (South Africa)

South African residents have rights under the Protection of Personal Information Act, including the right to access, correct, and delete personal information.

PIPEDA (Canada)

Canadian residents have rights under the Personal Information Protection and Electronic Documents Act, including access to personal information and the ability to challenge accuracy.

14. Links to Third-Party Sites

The Service may contain links to external websites (e.g., TMDB, streaming platforms). We are not responsible for the privacy practices or content of those sites. We encourage you to review the privacy policies of any third-party sites you visit.

15. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by updating the "Last updated" date at the top of this page. Your continued use of the Service after any changes constitutes acceptance of the updated policy.

16. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:

support@streamvault.app