Privacy policy

Without an account, everything DoVibeCheck knows lives only in your browser's extension storage (and, on the website, your browser's local storage):

• your ratings (stars and the tags you pick), and the taste leanings you set;
• basic information about the titles you've viewed or rated (title, year, genres, the site's critic and audience scores, directors and cast), used to compute scores;
• your settings.

Removing the extension deletes this data.

The extension runs only on these sites:

• Rotten Tomatoes (rottentomatoes.com): movie and TV pages, the home page and browse pages;
• IMDb (imdb.com): title pages, the home page, and list-style pages such as charts, lists, search, watchlists and calendars;
• Letterboxd (letterboxd.com): film pages and pages that list films.

It reads the public information on those pages (title, genres, synopsis, scores, cast and crew). On list pages it may load the page of each title shown, from your browser, to score it. On pages such as your IMDb watchlist it reads only the titles shown, to score them. It does not read your ratings, reviews or account details on these sites, or your browsing history, and it does not run on or read any other website except our own, dovibecheck.com, where it passes your ratings between the extension and the website in your browser so your taste profile shows up there.

To show crowd tags and tag counts, the extension sends the site's ID of the title you're viewing (for example "arrival_2016" on Rotten Tomatoes or "tt2543164" on IMDb) to our server. We use it only to return that title's tags and don't keep a record of the titles you look at (our hosting provider's standard request logs are kept briefly for security and troubleshooting). Titles you rate are stored with your ratings, as described below.

To know which features people use, which supported sites (Rotten Tomatoes, IMDb, Letterboxd) they use them on, and what our AI features cost to run, the extension and website keep simple daily counters, for example "3 titles scored on IMDb today" or "1 visit to the profile page". They are sent to our database (Supabase) at most twice a day with a random ID for your browser, your extension version, and your account ID if you're signed in. They never include page addresses, titles, ratings, review text or anything about other websites you visit.

When you post a review or custom tag, we also record that an AI call was made for your account (time, duration and size, not the text), to track costs.

You can turn the counters off in the extension's popup ("Usage stats"). The website skips them when your browser sends Global Privacy Control or Do Not Track. We use them only in aggregate and don't share them.

An account is optional. It backs up your ratings and unlocks reviews and Pro. We store:

• Your email address and password (the password is hashed by our authentication provider; we never see it);
• Your ratings, tags, and leanings, plus the title information above, so your scores work on any device;
• Reviews you write, and how many you've posted this month (for the free AI allowance), see below;
• Optional preferences you set, such as which streaming services you have and whether you want email alerts.

This data is private to your account: database rules only let you read or change your own rows.

When you post a review, its text is stored privately with your account. To turn it into short tags (for example "the ending recontextualises everything"), the text is processed by our AI provider (see below). The tags it produces are shown to other users anonymously, as counts: how many people said something, never who. The same goes for the tags you pick when rating: other users see only how many people picked each tag for a title. Your review text itself is never shown to anyone else.

"Watch on" links. The card may show buttons such as "Rent on Prime Video". Some are affiliate links, marked as such: if you click one and buy or rent something, the store may pay us a small fee, at no cost to you. The link carries only our partner ID and the title; we send the store nothing about you. Once you're on the store's site, its own privacy policy and cookies apply. We never change the links on Rotten Tomatoes, IMDb, Letterboxd or anyone else's site.

DoVibeCheck Pro. An optional paid plan with extra features (for example group scores, "tonight's picks", alerts and unlimited review tagging). Payments are handled by Stripe: your card details go to Stripe, never to us. We keep your plan, its status and renewal date, and Stripe's customer reference, so we know which features to unlock.

Sponsored picks. We may occasionally show one clearly labelled sponsored title on our website or in the extension's popup. It's chosen by the page you're on, not by who you are: it is not based on your ratings, reviews or any other personal data, and it uses no third-party ad code or tracking. Sponsored picks never appear inside Rotten Tomatoes, IMDb or Letterboxd pages.

Tips. If you choose to support DoVibeCheck with a tip (we use Buy Me a Coffee), the tip is handled entirely on their site under their own privacy policy; the extension and website only link there and send them nothing about you. The website's "Buy Me a Coffee" button image loads from their servers, which, like any image host, see your IP address and browser; the extension's button is built in and contacts no one until you click it.

We never sell or rent your data, share it with data brokers or ad networks, or use it to target ads, and paying for Pro doesn't change that.

With Pro you can create a group (for example with a partner) to see how likely you all are to enjoy a title. Only people you invite can join, and anyone can leave at any time. Members see the group score and its reasons, never each other's individual ratings, tags or reviews.

We email you to confirm your account and reset your password. If you turn on alerts (for example when a title you're likely to love arrives on your services), we send those too; you can turn them off any time. We don't send marketing emails unless you opt in, and every email has an unsubscribe link.

• Supabase: account sign-in, database, and the server functions that sync ratings and process reviews.
• Typesafe (AI model): receives the text of reviews you post, only to extract tags, not to train models on your behalf.
• Stripe: processes Pro payments.
• Buy Me a Coffee: processes tips, if you choose to leave one (we link to it and show its button image on our website).
• Our email delivery provider: sends account emails and any alerts you've turned on.

Each acts on our behalf only to run these features. Affiliate stores (such as Amazon or Apple) receive nothing from us; they only see your visit if you click through. We don't share your data with anyone else, except where required by law, or with a successor if DoVibeCheck is ever acquired (under this same policy).

Signing out leaves your ratings on your device and stops syncing. To delete your account and everything stored with it, email hesynth@gmail.com from your account's address; we'll delete it within 30 days. We keep payment records (not card details) only as long as tax and accounting law requires. Anonymous tag counts you contributed to may remain, since they can't be linked back to you.

You can also ask us for a copy of your data, or to correct it, at the same address.

DoVibeCheck's use of your data complies with the Chrome Web Store User Data Policy, including its Limited Use requirements. Your data is used only to provide and improve DoVibeCheck's features: it is not sold, not used for advertising (including personalized or interest-based ads), not used to determine creditworthiness or for lending, and not transferred to anyone except the providers above, to run those features.

DoVibeCheck isn't directed at children under 13, and we don't knowingly collect their data.

If this policy changes in a way that affects how your data is used, we'll tell you in the extension or by email before it takes effect, and update the date above. Questions: hesynth@gmail.com.