Privacy Policy

Who we are

QRevue LLC, an Arizona limited liability company in the United States, operates the QRevue website at qrevue.com. This Privacy Policy covers the website's accounts, discovery, collections, imports, community features, and retained records from our former waitlist. It explains what information these features use and the choices available to you. The Legal information page lists our company mailing address and contact details.

Information you provide

Account information includes your email address, authentication information, username, display name, year of birth, biography, profile image, and privacy preferences, depending on the options you use. Email/password and Google sign-in are managed through Supabase Auth. Google sign-in supplies the account information needed to authenticate you; it does not connect your other media accounts.

We store collection entries, statuses, progress, ratings, reviews, completion dates and repeat reads, watches, or listens, favorites, cover and edition preferences, lists, invitations and memberships, follows, blocks, reactions, and discovery preferences. Support requests, account-deletion requests, and content reports contain the details you submit and the team's handling of them.

When you upload a Goodreads, Letterboxd, Netflix, or Libby export, our server reads the submitted file and stores parsed records and import progress. These records can include original title names, authors, dates, ISBNs, ratings, reviews, shelves, and source activity. Matching decisions and correction history let you leave and return, review uncertain matches, and retry processing. You can delete an import and its pending drafts without deleting titles already saved in your collection. Minimal application and correction records supporting saved titles may remain to prevent duplicates and preserve the history of those changes. Confirmed TV episode checklists are stored separately from original Netflix viewing records. The import feature does not keep a separate downloadable copy of the original CSV or ZIP. Keep your own copy if you need it. We do not request your Netflix or Libby password.

If you upload a profile photo, we resize and convert it for display and discard the original image metadata during that processing. Profile-photo access follows the website's profile-access controls.

Our former waitlist is closed. We may retain email addresses, signup times, referral codes and relationships, campaign sources, optional quiz answers, and links to member accounts from earlier signups. You can request deletion through our privacy contact.

Technical information and cookies

Supabase authentication cookies maintain your sign-in session. The qrevue-appearance cookie remembers your light or dark appearance preference for up to one year. Browser session storage also remembers interface state such as selected import-inbox items. You can remove stored data or restrict cookies in your browser; doing so can sign you out or prevent features from working.

Vercel and other infrastructure providers process network and request information needed to deliver and protect the website, which can include IP addresses, request details, device or browser information, and operational logs.

QRevue records certain outbound catalog-link clicks, including the title, destination and destination URL, referring context, time, browser user-agent information, approximate country supplied by the host, and, when signed in, the associated account. This helps us understand discovery-link use and assess affiliate activity. The country value is not GPS location. These records are separate from your collection history.

Visits and product analytics

With your permission, QRevue uses PostHog, hosted in its US Cloud, to measure website visits, mobile-app screen views, feature use, and tutorial activity. This helps us understand which parts of QRevue are useful, where setup is difficult, and whether members return. The QRevue admin reports show totals and trends rather than named member activity timelines.

Analytics can include a random browser or app identifier, session identifiers, general page or screen categories, referring website hostname, device and browser categories, time, and successful feature actions. When you sign in and allow analytics, we use your QRevue account identifier to connect permitted activity across visits and devices. These identifiers are pseudonymous; aggregated reports do not mean the underlying events are anonymous. We do not send PostHog names, email addresses, raw page addresses, search text, title names, reviews, uploaded files, or session recordings. IP-based location enrichment is disabled.

Choose Allow analytics or Decline when offered, or change your choice under Settings → Privacy → Analytics. Until you allow analytics, the new tracking stays off. Your signed-in choice is saved with your account; signed-out choices are remembered on the browser or device. A local refusal is respected even if the account previously allowed analytics. Turning analytics off stops future collection and discards pending analytics; your collection, sign-in, and tutorial progress continue working. Other devices refresh the saved choice as they navigate or return to the app.

Before this consent-based release, QRevue recorded selected signed-in feature and tutorial actions using account identifiers. Older events may still appear in aggregate reports; they do not include historical page visits. Analytics records follow the configured PostHog project retention period. Withdrawing permission does not automatically erase previously collected events. Contact our privacy address to request access or deletion, including analytics records linked to your account. Temporary collection-addition delivery records are removed after delivery, withdrawal, or expiry after seven days.

How information is used

We use information to create and secure accounts, send account-confirmation and password-reset messages, maintain your collection and history, process and review imports, support search and discovery, operate shared lists and community features, respond to requests, address abuse, and improve reliability. Retained waitlist records support account reconciliation and handling privacy requests; new waitlist signups are no longer collected.

We may also use information to comply with applicable legal obligations, resolve disputes, and protect the rights and safety of users and the service.

What other people can see

Your profile, collection activity, reviews, and lists may be visible to others depending on their individual visibility and sharing settings. Profile settings include public, followers-only, and private options; individual collection entries and lists have their own controls. Public material can be viewed and copied by people outside QRevue. Some account identifiers, such as a username, may be discoverable so that members can find or invite each other.

Shared-list owners and collaborators can see the list and membership information necessary for collaboration. List permissions and public-profile settings are separate controls. Check both before sharing sensitive information.

Changing visibility limits future access through QRevue but cannot remove copies another person has already made. Saved import records and inbox decisions are private to the importing account, subject to authorized service administration. If an import creates collection entries or reviews, those resulting entries follow your collection and profile visibility settings. Adding a title to a shared list does not give collaborators access to your private collection.

Service providers and external sites

Vercel hosts the website. Supabase provides account authentication, the database, and storage used for profile photos and other service records. Authentication messages use the email-delivery service configured for Supabase Auth. Infrastructure providers process information for their role in delivering the service.

Search and import matching send relevant lookup information, such as a title, author, search phrase, or ISBN, to catalog providers. These include Open Library for books, TMDB for movies and TV, Podcast Index and Apple directories for podcasts, and Apple iTunes for music. Book-cover lookup can also send an ISBN to Google Books. Podcast details may be retrieved from publishers' public RSS feeds. These catalog lookups do not send your account ID, ratings, reviews, or reading dates as matching inputs.

Streaming Availability by Movie of the Night supplies where-to-watch results using title identifiers and a country setting. Musicfetch resolves music-service links using a catalog URL and country setting. The current website requests US results. When your browser loads externally hosted artwork, the image host receives the network request; loading a cover can therefore disclose your IP address and browser request information to that host.

Opening an external library, retailer, publisher, or streaming link takes you to a service governed by its own privacy policy. Affiliate links may carry referral identifiers. We may disclose information when required by law or reasonably necessary to address abuse, protect safety, or defend legal rights.

Where information is processed

QRevue's hosted Supabase project is configured in the United States. Website hosting, email delivery, catalog lookups, and other provider operations may process information in other locations. If you use QRevue from outside the United States, your information may be processed outside your country. This policy does not promise that every copy, log, or provider request stays in one country.

Retention and security

Account and collection information is kept to provide the service while your account is active. Saved import records, matching decisions, and correction history remain available for review and retries. Closing an import page or deleting a collection entry does not by itself remove those saved import records.

Account deletion is a request reviewed by the QRevue team, not an immediate action when you submit the form. When the team deletes the account, its account-owned collection and history records are removed. Separate waitlist records, support requests, moderation reports, administrative records, and outbound-link records can require additional review and cleanup. Some records may need to be retained for security, unresolved support matters, legal obligations, or disputes. Ask the team if your request also concerns a waitlist signup or information in a support message.

Deletion from active systems and expiration from backups or service-provider logs can follow different timelines. We do not promise that submitting a deletion request instantly removes every copy. We use account access controls, database permissions, and restricted administrative access, but no system can guarantee absolute security. Do not include sensitive information in public reviews or lists.

Your choices and requests

You can update your profile, adjust available privacy and sharing controls, and edit or remove collection entries. Settings offers a JSON or CSV download of your collection and related records, including history, reviews, lists, favorites, and supported import activity. This download is not a copy of every operational or support record held by the service.

Use Help & support in Settings to request account deletion. Your account stays active until the team handles that request. You can also contact privacy@qrevue.com about access, corrections, deletion, waitlist information, or information not included in the standard export. Do not send passwords with a request.

Depending on where you live, you may have additional rights to access, correct, delete, restrict, or object to certain processing of personal information. Contact privacy@qrevue.com to make a request. We may need to verify your identity before acting on a request to protect your information.

Children

QRevue accounts are for people aged 13 and over. We ask for a year of birth during signup or profile setup. If you believe a child below the permitted age has provided personal information, contact us so that we can investigate and take appropriate action. Additional requirements may apply under local law.

Updates and contact

We may update this policy to reflect changes to the service or applicable requirements. The published policy identifies its effective date. We will communicate material changes through the service or another appropriate channel.

Contact QRevue LLC at privacy@qrevue.com with privacy questions or requests. For login problems, import issues, or general help, contact support@qrevue.com.

Privacy requests

Personal information, access requests, and account deletion.