Privacy Policy for 31 Halloween Flicks

31 Halloween Flicks (“the app,” “we,” “us”) is a Halloween movie lineup app that lets you build a 31-night October watchlist. This policy explains what data the app handles, why, and the choices you have.

We do not sell your personal information. We do not use advertising, analytics, or tracking software of any kind.

The short version

• You can use the entire app without creating an account. In that mode, your lineup stays on your device and is never sent to our servers.
• If you create an account, we store your email address, a username, and your movie lineups so they can sync across your devices.
• We ask for no device permissions — no location, camera, photos, contacts, microphone, or push notifications.
• There is no advertising identifier collected, no ad tracking, and no analytics.
• You can permanently delete your account and all associated data from inside the app at any time.

Using the app without an account (Guest mode)

You can browse movies, build your 31-night lineup, and mark films watched without registering. In guest mode, your lineup, season history, and app preferences are stored only in local storage on your device. We cannot see this data, and it is not transmitted to us.

If you later create an account, the app offers to upload your existing guest lineup so you do not lose it. Deleting the app removes locally stored data.

Information we collect

1. Account information (only if you create an account)

Your email address is held by our authentication provider and is deliberately not stored in the app’s profile records.

2. Your movie lineup data (only if you create an account)

When signed in, the app backs up and syncs the following so you can restore it on another device or after reinstalling:

• The October year a lineup belongs to
• Each of the 31 slots: the movie’s TMDB identifier, title, release year, and poster reference
• Whether a slot is marked watched, and the time it was marked
• Your in-app stats and achievement progress

This is stored per account and protected by row-level security rules so that only your account can read or write your own lineups.

3. A device identifier for sync

To work out which device most recently changed a lineup (so the newer version wins and edits are not lost), the app creates a random identifier the first time it runs and stores it on your device.

This is a randomly generated value. It is not your device’s advertising identifier, serial number, or any hardware ID, it cannot identify you personally, and it is not used for advertising, tracking, or profiling. It is sent alongside your lineup backups only when you are signed in.

4. Approximate region (country only)

To show accurate streaming and rental availability, the app reads your country code from your device’s language and region settings (for example, US or GB) and includes it in movie lookups.

This is a two-letter country code derived locally on your device. The app does not request or access GPS, precise location, or any location permission.

5. Support messages you choose to send

If you use the in-app form to report an issue, we receive the message you wrote, plus:

• The email address you optionally provide, if you want a reply
• Your username, or an indication that you are a guest
• The app version, and your platform and operating system version (to help reproduce bugs)

Providing a reply email is optional. Without it we can read your report but cannot respond.

Information we do not collect

To be explicit, 31 Halloween Flicks does not collect, request, or contain code to access:

• Advertising identifiers (IDFA / AAID), and it does not ask to track you across apps or websites
• Analytics, usage telemetry, behavioral profiling, or crash-reporting services
• Precise or background location
• Contacts, calendar, photo library, camera, or microphone
• Push notification tokens
• Health, financial, biometric, or payment data
• Third-party social or single sign-on account data — sign-in is by email and password only

The app contains no advertising SDKs and no third-party trackers.

Third parties that process data for us

We keep this list short on purpose.

Supabase hosts our authentication system and database. Your email address, hashed password, username, and lineup backups are stored on Supabase infrastructure. Supabase acts as our data processor. See supabase.com/privacy.

The Movie Database (TMDB) supplies all movie information — titles, posters, synopses, ratings, trailers, and streaming availability. When you search for or view a movie, your search text, the movie identifier, and your country code are sent to TMDB. As with any internet request, TMDB receives your device’s IP address. We do not send TMDB your name, email, username, or account identifier. Streaming availability shown in the app is supplied to TMDB by JustWatch. See themoviedb.org/privacy-policy.

This product uses the TMDB API but is not endorsed or certified by TMDB.

FormSubmit relays in-app support messages to our email inbox. It only processes messages you actively choose to send. See formsubmit.co.

Apple App Store and Google Play distribute the app and may independently collect download and crash information under their own policies. We do not control that collection, and we do not receive personally identifying information from it.

Our servers are located in the United States. If you use the app from elsewhere, your account data is transferred to and stored in the United States.

How we use your information

We use the data described above only to:

• Create and secure your account, and let you sign in
• Verify your email address and let you reset your password
• Ensure usernames are unique and free of prohibited terms
• Save, sync, and restore your movie lineups across your devices
• Show correct streaming availability for your country
• Respond to support requests and fix bugs you report

We do not use your information for advertising, marketing, profiling, automated decision-making, or training machine learning models. We do not send promotional email — account email is limited to verification and password resets.

How long we keep it

• Account data and lineup backups: kept while your account is active, and deleted when you delete your account.
• Locally stored data: stays on your device until you delete your account data or uninstall the app.
• Support messages: retained in our email inbox only as long as needed to resolve your issue.

Your choices and rights

Use the app anonymously. Creating an account is entirely optional.

Delete your account and data. The app includes a delete option in your profile settings. Confirming it permanently removes your account, your username, and every lineup backup associated with it. This is immediate and cannot be undone.

Change your information. You can update your username, correct your email address before it is verified, and reset your password from within the app.

Access or export your data. Email us using the address below and we will provide a copy of the account data we hold.

Depending on where you live, you may have additional rights under laws such as the GDPR or the CCPA/CPRA — including the rights to access, correct, delete, or port your data, and to object to processing. We honor these requests regardless of your location. We have never sold or shared personal information for cross-context behavioral advertising, so there is nothing to opt out of.

To exercise any of these rights, contact us below. We will respond within 30 days.

Children’s privacy

31 Halloween Flicks is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us and we will delete it.

Please note that movie information comes from TMDB and may describe horror films with content unsuitable for children. Parents should use device-level parental controls and App Store age ratings when deciding whether the app is appropriate.

Security

Connections to our servers and to TMDB use encrypted HTTPS. Passwords are stored only as salted hashes. Database access is restricted by row-level security policies so that one account cannot read another account’s data, and administrative tables are not readable by the app at all.

No system is perfectly secure, so we cannot guarantee absolute security, but we limit risk by collecting as little data as possible in the first place.

Changes to this policy

If we change this policy we will update the “Last updated” date above. Material changes that affect how we handle your data will be announced in the app. Because this policy is hosted online rather than built into the app, the version on this page is always the current one.

Contact us

Questions about this policy or your data:

Email: 31halloweenflicks@gmail.com

You can also reach us through the in-app issue reporting form.