Privacy Policy
Scroll Movies is an iPhone app and a website (scrollmovies.app) operated by Eli Riedel, based in the United States (full address under "Contact" below) ("we", "us"). We are the "controller" (the business responsible) for the personal data described here. This policy explains what we collect, why, who we share it with, how long we keep it, and the choices and rights you have. It is written to be read; if anything is unclear, email hello@scrollmovies.app.
The short version. We collect what we need to run your account, your membership, your feed and the social features, plus usage analytics you can turn off. Trailers play in YouTube's player, so Google receives data about the videos you watch, under its own privacy policy. We advertise Scroll Movies on Facebook, Instagram and Reddit. To measure those ads, the app shares some activity with Meta and Reddit only if you allow tracking, Meta is told when a trial starts or a membership is paid for, and the website shares visits with Meta and Reddit only if you accept the cookie banner. We only use your device's advertising identifier if you allow it, and you can switch the rest off in the app. If your account is in the US and you don't have a membership, we may send you up to three getting-started emails, each with a one-tap unsubscribe. Your messages are private between you and the people you write to, but they are stored on our servers and can be reviewed if reported. We don't sell your data and we don't show ads in Scroll Movies. Payment card details go to Apple or Stripe, never to us. You can delete your account in the app at any time.
Contents
- What we collect
- How we use it, and our legal bases
- Who we share it with
- Trailers and YouTube
- International transfers
- How long we keep it
- Your choices
- Your rights
- Do Not Sell or Share
- Children
- This website and cookies
- Contact
What we collect
Things you give us
- Account details: email address, username, display name, an optional bio and an optional profile photo. If you sign up with email, you choose a password (stored only as a secure hash by our database provider) and we email you a 6-digit code to confirm the address or reset the password. If you sign in with Apple or Google, we receive your email address (or Apple's private relay address) and, if you share it, your name.
- Movie personality quiz: the films and series you pick in each of the twelve rounds and the personality you are given. We use them to start your feed on titles you're likely to enjoy and to show your result.
- How you heard about Scroll Movies: if you answer this optional question (for example "Instagram" or "a friend"), we keep your answer with your account to learn which of our ads and channels work. It isn't shared with advertising partners.
- Language and country you choose when you set up the app, used for the app's language and for where-to-watch information.
- Content you create: comments and replies, ratings and reviews (and whether they contain spoilers), messages, titles you send to other members and the notes with them, lists and their names, the titles you add to lists, and invitations to shared lists.
- Messages you send to other members are visible to the people in that conversation. They are not end-to-end encrypted: they are stored on our servers so they can be delivered and synced, and if a message is reported we can review it to enforce the community rules.
- Reports you file about comments, reviews, messages, lists or members, and the people you block.
- Emails you send us.
- Payment details are collected by Apple (App Store purchases) or by Stripe (our US web checkout, including Apple Pay there). We never see or store your full card number.
Things we record as you use Scroll Movies
- Activity: likes, saves to your watchlist, titles you mark as seen, episodes you mark as watched, people you follow (members, and actors, directors and other film people), and how you interact with the feed (which titles you view, watch or skip, and roughly for how long). This drives your feed ranking, your Friends feed, episode tracking and the counts on your profile.
- Notifications: the Activity notifications we create for you (new followers, replies, likes, messages, sent titles and list invitations).
- Product analytics: app opens and sessions, screens and tabs you open, titles you open, quiz progress, membership-screen views and purchase steps, and similar events, stored in our own database and sent to PostHog. Before you sign in these are tied to a random install ID created by the app; after you sign in, to your account ID. The text of your searches, messages, comments and reviews is never included. You can turn this off (see "Your choices").
- Crash, error and performance reports through Sentry: what went wrong and the technical steps leading up to it, the app version, iOS version, device model, a sample of performance timings, and your account ID if you are signed in. No screenshots and nothing you've posted.
- Membership status through RevenueCat: which plan you have, whether you are in a trial, renewal and expiry dates, the store you bought from, and basic device and app information RevenueCat's software collects to do this.
- Advertising measurement (Meta): only if you tap "Allow" in the iOS tracking prompt (and haven't turned off "Share usage data"), the Meta software in the app records when you install and open the app, create an account, finish the quiz, start a checkout, or open a title from a shared link, with your device's advertising identifier (IDFA), Meta's anonymous app ID for your install, device and app information, and your IP address. If you don't allow tracking, the app sends nothing to Meta. Separately, RevenueCat tells Meta when a trial starts and when a membership is paid for or renews, with the identifiers above and, for purchases on our web checkout, your email address and account ID in hashed (scrambled) form. See "Who we share it with" and "Your choices".
- Device tokens for push notifications, if you allow them.
- Sign in with Apple token: if you sign in with Apple, we may keep a token Apple issues to Scroll Movies, used only to revoke Scroll Movies' access to your Apple Account when you delete your account.
- Searches and where-to-watch lookups: when you search for a title that isn't in our catalog yet, the app sends your search text to TMDB, and when you open where to watch, it asks Movie of the Night which services carry that title in your country. Both receive your IP address with the request. If you open a search result, our server adds that title to the catalog.
- Technical data: your IP address and basic request information reach our providers whenever the app or website loads data or images. We tell our analytics provider not to look up your location from it; our crash-reporting provider may still record an approximate country. We don't collect precise location, and we don't use your location for anything.
What we do not collect
Your precise location, contacts, health data, browsing history, microphone or camera. We only see the one photo you choose for your profile, not the rest of your photo library. We only read your device's advertising identifier (IDFA) if you allow tracking when iOS asks. We don't show ads in Scroll Movies, and we do not sell personal data for money.
How we use it, and our legal bases
Where the EU or UK GDPR applies, we rely on the following legal bases.
| Purpose | Legal basis |
|---|---|
| Creating and running your account, the feed, watchlist, ratings, reviews, episode tracking, comments, follows, messages, shared lists, Activity, and your movie personality | Performance of our contract with you (the Terms) |
| Showing where to watch in your country, and the app in your language | Contract |
| Selling and managing your membership and free trial, handling refunds | Contract; legal obligations (tax and accounting records) |
| Emails you need: codes to confirm your email address or reset your password; purchase confirmations and renewal information for web memberships | Contract; legal obligations (automatic-renewal laws) |
| Push notifications (replies, likes, new followers, messages, sent titles, list invitations) | Your consent, given in iOS; withdraw it any time in Settings |
| Keeping the community safe: the word filter, reviewing reports (including reported messages), removing content, suspending accounts | Legitimate interests (a safe service) and contract |
| Product analytics | Legitimate interests (understanding and improving Scroll Movies); you can object with the "Share usage data" switch |
| Crash and error reports | Legitimate interests (keeping the app working) |
| Measuring and improving our ads with Meta and Reddit: the app events listed above, your advertising identifier and hashed email (app), or their pixels (website) | Your consent: "Allow" in the iOS tracking prompt, or "Accept" on the website banner. Withdraw it any time (see "Your choices") |
| Telling Meta when a trial starts or a membership is paid for or renews (sent by RevenueCat and our server), without your advertising identifier if you haven't allowed tracking | Legitimate interests (knowing which of our ads work, so we can keep Scroll Movies affordable); you can object with the "Share usage data" switch or by emailing us |
| Getting-started emails: up to three emails (1, 3 and 6 days after you sign up) to accounts in the US without a membership | Legitimate interests (helping people who signed up get started); unsubscribe any time with the one-tap link in each email |
| Responding to legal requests and protecting rights and safety | Legal obligations; legitimate interests |
We don't make decisions about you that have legal or similarly significant effects based solely on automated processing. The feed ranking and movie personality are automated personalization of which trailers you see, nothing more. The automated word filter can stop a comment, review, message or name from being posted; you can rephrase it, or email us if you think it was a mistake.
Who we share it with
We use these service providers ("processors") to run Scroll Movies. Each receives only what it needs for its job, under a contract that limits its use of the data to providing its service to us, except where we say a company acts under its own terms.
| Provider | What for | What they receive | Where |
|---|---|---|---|
| Supabase | Database, sign-in, file storage (profile photos), sending push notifications | Account, activity, content including messages, quiz result, analytics events, device tokens, Sign in with Apple token, profile photo | United States (Ohio, us-east-2) |
| Cloudflare | Hosting this website, DNS, and routing email sent to scrollmovies.app | IP address, requested pages; emails you send us | Global network |
| Apple | App Store purchases, push notifications (APNs), Sign in with Apple | Purchase and trial status, device token; your Apple account data stays with Apple | United States / global |
| Sign in with Google (if you choose it) | Your Google account email and name | United States / global | |
| YouTube (Google) | Playing trailers in YouTube's embedded player (see "Trailers and YouTube") | The videos you play, your IP address, device and browser information, and cookies or identifiers YouTube's player uses | United States / global |
| TMDB (The Movie Database) | Film and series information and images; searching for titles not yet in our catalog | Your IP address when the app loads posters and images; your search text for those searches. No account information | United States / global |
| Movie of the Night | Streaming availability (where to watch) | The title and country you look up, and your IP address. No account information | United States |
| RevenueCat | Membership and trial management for both App Store and web purchases; runs our web checkout page; tells Meta about trials and paid memberships for ad measurement | Account ID, purchase history, device and app information, device identifiers (the IDFA only if you allow tracking) and Meta's anonymous app ID, email (web purchases) | United States |
| Stripe | Card and Apple Pay payments in our US web checkout | Email, payment details, billing country and postal code (held by Stripe, not us) | United States |
| Resend | Sending our emails: codes to confirm your email address or reset your password, purchase and renewal notices for web memberships, and getting-started emails | Email address and the message | United States |
| PostHog | Product analytics | Install or account ID, in-app events, app version, device type, IP address (as part of the connection) | United States |
| Sentry | Crash, error and performance reporting | Account ID, error details, device model, OS and app version, IP address | United States |
| Anthropic | Our servers use Anthropic's Claude model to look at frames of trailers and find where each trailer's content starts, so the feed can skip studio logos | Trailer frames and title information only. No personal data | United States |
| Meta Platforms (Facebook, Instagram) | Measuring and improving our ads on Facebook and Instagram (advertising measurement partner) | App, only if you allow tracking: install and app opens, account created, quiz completed, checkout started, title opened from a shared link. Trial started and membership paid or renewed (sent by RevenueCat, with price); Meta's anonymous app ID, the IDFA if you allow tracking, device and app information, IP address; for web purchases, hashed email and hashed account ID. Website, only if you accept: pages viewed, App Store button clicks, Meta cookies, IP address and browser information | United States / global |
| Reddit, Inc. | Measuring and improving our ads on Reddit (advertising measurement partner) | App, only if you allow tracking: trial started, trial still active after an hour, membership paid or renewed (with price), hashed email, hashed advertising identifier, IP address, sent by our server. Website, only if you accept: pages viewed, App Store button clicks, Reddit cookies, IP address and browser information | United States |
About Meta and Reddit. Meta receives this under its Business Tools Terms and handles it under its own privacy policy; Reddit under its advertising terms and its own privacy policy. They may match it with what they know from their own services to tell us, in aggregate, which ads led to installs and memberships, and to show our ads to people likely to enjoy Scroll Movies. We never give them your name, the titles you watch or rate, your reviews, comments or messages, or your quiz answers, and we don't use advanced matching.
Other members see what you share publicly in Scroll Movies: your username, display name, bio, profile photo, follower, following and watched counts, your comments and reviews, ratings and likes shown on your profile, and who you follow. Your public profile can also be opened on the web at scrollmovies.app/u/your-username, and your likes, ratings and reviews can appear in the Friends feed of people who follow you. Messages and titles you send are seen only by the people in that conversation, and shared lists only by their members.
We may also disclose information if the law requires it, or to protect the rights, property, and safety of Scroll Movies, its members, or others. If Scroll Movies is ever sold or transferred, your data would move with it, still protected by this policy, and we would tell you first.
Trailers and YouTube
Scroll Movies uses YouTube API Services. Trailers and other videos play in YouTube's embedded player, loaded from YouTube's servers, so Google receives information about the videos you play, your IP address and device information, and may set or read cookies or similar identifiers in the player. Google handles this under the Google Privacy Policy, and by watching videos in Scroll Movies you agree to the YouTube Terms of Service. We don't receive your YouTube or Google account data. You can review and revoke third-party access to your Google data at the Google security settings page, although Scroll Movies never asks for access to your Google account for videos. Separately from YouTube, the app records which trailers you watch as part of your feed activity (above).
International transfers
We are based in the United States and our providers store data mainly in the United States. If you use Scroll Movies from the EU, the UK, or elsewhere, your data is transferred to the United States. Where the GDPR or UK GDPR applies, we rely on the European Commission's Standard Contractual Clauses (and the UK Addendum), or on the EU-US Data Privacy Framework and UK Extension where the provider is certified, as offered in each provider's data processing terms.
How long we keep it
| Data | How long |
|---|---|
| Account, profile and photo, quiz result, likes, watchlist, ratings and reviews, episode progress, lists you own, follows, comments, messages and sent titles | Until you delete them or your account. Account deletion removes them from our live database immediately, including the conversations you're part of; backup copies are overwritten within 30 days. A deleted comment's text is removed; other people's replies to it may remain under a "[deleted]" marker. Titles you added to someone else's shared list stay on that list, without your name. |
| Feed interactions used to rank your feed | 12 months, then deleted automatically |
| Activity notifications | 6 months, then deleted automatically |
| Sign in with Apple token | Deleted with your account, after we ask Apple to revoke it |
| Product analytics events | 12 months, then deleted automatically. When you delete your account, events in our own database are unlinked from it. |
| Crash and error reports | Up to 90 days |
| Data shared with Meta and Reddit for ad measurement | Kept by them under their own terms and privacy policies; we can't delete it for you, but you can ask them through their privacy settings and tools |
| Reports and moderation records | As long as needed to enforce the Terms and keep the community safe |
| Purchase and billing records | Kept by Apple, Stripe, RevenueCat and us for as long as tax and accounting law requires (usually up to 7 years) |
| Emails you send us | Up to 3 years after the conversation ends |
Your choices
- Delete your account at any time in the app: Settings › Delete account (at the bottom). You can also email us from your account email and we'll delete it for you. This does not cancel an App Store membership; cancel it in your Apple Account's Subscriptions settings. A renewing web membership is cancelled as part of deletion, or the app asks you to cancel it under Settings › Membership first.
- Turn off analytics in Settings › Privacy › Share usage data. This also stops everything the app sends to Meta and the device identifiers we give RevenueCat. Crash reports stay on, because they keep the app working.
- Tracking (advertising identifier). iOS asks once, after the movie personality quiz. You can change your answer any time in iOS Settings › Privacy & Security › Tracking (or Settings › Scroll Movies › Allow Tracking). "Ask App Not to Track" means we never read your advertising identifier.
- Messages: choose who can message you and send you titles (everyone, people you follow, or no one) in the app's settings. Blocking someone stops them messaging you either way.
- On our website, the Meta and Reddit pixels only load if you tap Accept on the banner. Change your choice with "Cookie settings" at the bottom of any page, or opt out below. We treat a Global Privacy Control signal from your browser as an opt-out.
- Ads you see on Facebook and Instagram can be managed in Meta's Ad Preferences, and ads on Reddit in your Reddit account's privacy settings. Meta and Reddit may show you our ads again if you interacted with one of them; that's based on what you did on their apps, not on data from us.
- Notifications can be turned off in the app's Settings or in iOS Settings.
- Getting-started emails: if your account is in the US and you don't have a membership, we may send you up to three emails from hello@scrollmovies.app (1, 3 and 6 days after you sign up), through Resend, with titles to try and how to start your membership. Each email has a one-tap unsubscribe link, and they stop for good once you unsubscribe or become a member. You can also email us to stop them.
- Block or report anyone from their comment, review, message or profile.
- Edit your username, display name, bio and photo in your profile, and delete your comments, reviews and ratings at any time.
Your rights
Depending on where you live, you may have the right to: access your data and get a copy in a portable format; correct it; delete it; restrict or object to how we use it (including analytics based on legitimate interests); withdraw consent you've given; and not be treated differently for using these rights.
- EU, EEA and UK: you have all the rights above under the GDPR and UK GDPR, and you can complain to your local data protection authority (in the UK, the ICO). We'd appreciate the chance to help first.
- California and other US states with privacy laws (such as Colorado, Connecticut, Virginia, Texas, and Oregon): you can ask what personal information we collect, use and disclose, and ask us to delete or correct it. We do not sell personal information for money. We do "share" some of it with Meta and, with your consent, Reddit for cross-context behavioral advertising (measuring and improving our ads, as described above), which some state laws also treat as "targeted advertising", and you have the right to opt out of that: see Do Not Sell or Share My Personal Information. We don't use sensitive information (such as your account login or the content of your messages) for anything other than providing the service and keeping it safe. If we deny a request, you can appeal by replying to our answer; we'll respond within the time the law requires.
To use any right, email hello@scrollmovies.app from the email on your account (or tell us your username). We may need to confirm it's you. We answer within one month (45 days for US state-law requests), and tell you if we need more time as the law allows. An authorized agent can act for you with your signed permission.
California details
In the last 12 months we collected these categories of personal information, for the purposes described above, and disclosed them only to the service providers listed above: identifiers (email, username, account and install IDs, IP address, device tokens); customer records (name, email); commercial information (membership and purchase history); internet or other electronic network activity (in-app activity, feed interactions and analytics events); audio or visual information (the profile photo you upload); approximate location that providers may derive from IP address; inferences (your movie personality and feed preferences); and sensitive personal information limited to account login credentials and the contents of messages you send to other members. We have not sold personal information. We share these categories with Meta Platforms for cross-context behavioral advertising: identifiers (advertising identifier if you allow tracking, Meta's anonymous app ID, hashed email and account ID for web purchases, IP address), commercial information (trial and membership events), and internet or other electronic network activity (with your consent, the app events listed above and website pages viewed). With your consent (the iOS tracking prompt in the app, the banner on our website), we share with Reddit, Inc. trial and membership events with hashed email, hashed advertising identifier and IP address (app), and website pages viewed and App Store button clicks with cookie identifiers and IP address (website). We don't knowingly sell or share the personal information of anyone under 16.
Do Not Sell or Share My Personal Information
You can opt out of our sharing with Meta and Reddit for advertising at any time, wherever you live:
- On this website: We also honor the Global Privacy Control (GPC) signal automatically. Your choice is stored in this browser, so repeat it on other browsers and devices.
- In the app: turn off Settings › Privacy › Share usage data, and choose "Ask App Not to Track" (or turn off Allow Tracking in iOS Settings › Privacy & Security › Tracking).
- For your account: email hello@scrollmovies.app with the subject "Do not sell or share", and we'll remove the advertising identifiers from your membership record, so Meta can no longer match your trial and membership events to you.
Children
Scroll Movies is not for children under 13, and we do not knowingly collect personal data from them. If you are under the age at which you can consent to data processing in your country, you need a parent or guardian's permission to use Scroll Movies. If you believe a child under 13 has created an account, email us and we will delete it.
This website and cookies
scrollmovies.app sets no cookies of its own and runs no analytics scripts. Its fonts and images are served from our own domain. It is hosted by Cloudflare, which processes your IP address to deliver pages and protect the site. Pages for a shared title (scrollmovies.app/t/…) load that title's poster and backdrop from TMDB's image servers, and shared profile pages may load the member's profile photo from our storage at Supabase; both receive your IP address. If the page is shown without our server's help, your browser asks our database at Supabase for the title or public profile directly.
Meta and Reddit pixels, only with your consent. When our ad pixels are switched on, a banner asks every visitor whether we may use Meta's and Reddit's pixels to measure our ads. Until you tap Accept, nothing from Meta or Reddit loads and none of their cookies are set. If you accept, the pixels load from Meta and Reddit, set their cookies (such as Meta's _fbp, up to 90 days, and Reddit's _rdt_uuid, up to 90 days), and tell them which of our pages you viewed (including a shared title or personality, but never a member's username or a list) and when you tap an App Store button. We remember your choice in your browser's local storage (key sm-consent), not in a cookie. You can change it with "Cookie settings" at the bottom of any page; a Global Privacy Control signal counts as Decline. For visitors in the EU, EEA and UK our legal basis for the pixels is your consent.
The web checkout opened from the app is run by RevenueCat and Stripe on their own domains, under their own cookie and privacy terms.
Security
Data travels over encrypted connections, access to user data in our database is restricted by row-level security (for example, only the people in a conversation can read its messages, and only a list's members can see it), and only the minimum people and systems can reach it. No system is perfectly secure, but if a breach affects your data we will tell you and the authorities as the law requires.
Changes
If we change this policy in a way that matters, we will tell you in the app or by email before it takes effect. The date at the top always shows the current version.
Contact
Eli Riedel (Scroll Movies) · hello@scrollmovies.app
216 Flint Ridge Rd, Apt 2201, San Marcos, TX 78666, United States