Privacy Policy

What We Collect

When you use WatchRoster, we collect information to help you build your collection and take part in the community:

• Account information: Your email address and display name when you sign up
• Your collection: The movies you add, including format, condition, and edition details
• Personal notes: Any notes you add to items in your collection
• Purchase information: Prices you record for tracking your collection's value
• Shelf posts & content: The posts, captions, comments, and likes you create on The Shelf, and the photos you upload to it
• Uploaded images: Photos of your physical media that you choose to upload

Public vs. Private Data

Some of your data is public and some is private. We think it's important you know exactly which is which.

Public — visible to other users and to anyone with a link, including people without an account:

• Your Shelf posts and the photos you upload to them
• Your captions, comments, and likes
• Your public profile — display name, username, and avatar (plus your collection, if you've chosen to make it public)

Private — kept between you and Watch Roster LLC:

• Your email address
• Your collection data and notes, when you haven't shared them publicly
• Your recorded purchase prices

Posting to The Shelf is always a choice. If you don't post, your collection stays in your private tools.

How We Use Your Data

We use your information to:

• Operate and maintain your WatchRoster account
• Display your collection and let you manage it
• Operate The Shelf — display your public posts, profile, comments, and likes, and power features like the feed, sharing, and moderation
• Personalize your experience with movie recommendations
• Track your collection's value over time
• Send important service updates (we won't spam you)

We never sell your data.Your private collection details, notes, and purchase prices stay private; the content you choose to post to The Shelf is public by design (see "Public vs. Private Data" above).

Services We Rely On

We use a small set of trusted providers to power WatchRoster:

• Supabase: Powers user authentication and our database — your account and collection data.
• Cloudflare R2: Stores the images you upload to The Shelf.
• Cloudflare CDN: Serves those images quickly and reliably, and helps protect the site.
• TMDb (The Movie Database): We fetch movie metadata, posters, and descriptions from TMDb. This is a one-way data flow — we pull movie info, but none of your personal data goes to TMDb.

Your data is encrypted in transit and at rest.

Content Scanning for Safety

To help keep WatchRoster safe, images uploaded to The Shelf are automatically scanned for known child sexual abuse material (CSAM) using Cloudflare's CSAM Scanning Tool as they're served.

This tool compares images against hash lists of known CSAM maintained by organizations such as the National Center for Missing & Exploited Children (NCMEC). If a match is found, the content is blocked and reported to NCMEC, as required by law.

Where we're legally required to do so, we may preserve the relevant material and associated records for law-enforcement purposes — including after you delete the content or your account. This is the one exception to the deletion practices described below.

Image Metadata & Location

Before a photo ever leaves your device, your browser compresses and re-encodes it. That process strips out embedded metadata — including EXIF data and any GPS/location coordinates baked into the original file.

In plain terms: we don't want your home's location riding along with a photo of your shelf, so this cleanup happens automatically, on your device, before the upload.

Cookies & Analytics

We use essential cookies to keep you logged in and remember your preferences. These are necessary for the site to work properly.

We may use basic analytics to understand how people use WatchRoster so we can improve the experience. This data is aggregated and doesn't personally identify you.

We don't use tracking cookies from advertisers or sell data to third parties.

Data Retention & Deletion

You can delete your content and your account whenever you want.

• Deleting a post: Removes it from WatchRoster, and the uploaded image is purged from our storage (Cloudflare R2).
• Deleting your account: Removes your associated data and deletes the Shelf images you uploaded.

Some information may remain in routine backups for a short period before it cycles out. Abandoned or unused uploaded images are also cleaned up over time.

One exception: where the law requires us to preserve certain material — for example, content identified as CSAM — we retain it and related records for law-enforcement purposes, separately from your normal account data (see "Content Scanning for Safety" above).

Your Rights (Including GDPR & CCPA)

You have full control over your data:

• Access: View your collection and Shelf data anytime through your account
• Update: Edit or correct your information at any time
• Export: Request a copy of your data (portability)
• Delete: Delete your posts, or request deletion of your account and associated data

If you're in the European Economic Area or the UK, you also have the right to object to or restrict certain processing of your personal data. If you're a California resident, you have the right to know what personal information we collect and to request its deletion — and, as noted above, we don't sell personal information.

We process your personal data to provide the service you've asked for, and to keep WatchRoster safe and lawful (including CSAM scanning and reporting, which we're legally required to do). To exercise any of these rights, just email us and we'll help.

Contact Us

Have questions about your privacy or this policy? We're happy to help.

Email us at: [email protected]

We may update this policy from time to time. When we do, we'll update the "Last updated" date at the top of this page.