This Privacy Policy explains how NebRatings (“NebRatings,” “we,” “us,” or “our”) collects, uses, discloses, and protects your information when you use the NebRatings mobile application (the “App”) and the website at nebratings.com (together, the “Service”).
NebRatings is a movie and TV rating app that lets you rate titles, write reviews, build lists, discover what to watch, and compare tastes with friends. By creating an account or using the Service, you agree to this Privacy Policy. If you do not agree, please do not use the Service.
1. Who we are (Data Controller)
The Service is operated by the developer of NebRatings (“we”). For the purposes of the EU/UK General Data Protection Regulation (GDPR), we are the “data controller” of the personal information described in this policy.
Contact: nebratings@gmail.com
2. Information we collect
2.1 Information you provide to us
- Account information. When you create an account, we collect your email address and a password. Your password is managed by Google Firebase Authentication and is stored only in a securely hashed form that we cannot read.
- Profile information. Your username, avatar (an emoji you select), bio, favorite genres, and favorite movie or show.
- Content you create. Your ratings (“nebs”), written reviews, lists, reactions, and friend connections.
- Preferences. Settings you choose, such as your content-maturity preference (Family Friendly, General Audience, or No Restrictions) and appearance settings.
- Support communications. If you contact us, we receive your message, your email address, and any information you include.
2.2 Information collected automatically
When you use the Service, certain technical information is processed by our infrastructure providers to operate and secure the Service, including:
- Device and connection data, such as IP address, device type and model, operating-system version, and app version.
- Log and diagnostic data, such as timestamps of actions and error/crash information used to keep the App working.
- Approximate location, which may be inferred from your IP address for security and abuse prevention. We do not collect precise (GPS) location.
We do not collect your device contacts, photos, microphone, or advertising identifier (IDFA), and we do not track you across other companies’ apps or websites.
2.3 Information from third parties
Movie and TV information (titles, artwork, cast, and trailers) is supplied by The Movie Database (TMDB). This is content data about films and shows, not personal information about you.
3. How we use your information
We use the information above to:
- Create, secure, and maintain your account and sign you in across devices;
- Store and display your ratings, reviews, lists, reactions, and profile;
- Provide social features you choose to use — friends, the activity feed, taste-compatibility comparisons, “Watch Together” group recommendations, and shared lists;
- Personalize recommendations (for example, by mood, favorite genres, and your content-maturity preference);
- Filter out explicit adult content and enforce your content-maturity setting;
- Respond to your support requests;
- Detect, prevent, and address fraud, abuse, security incidents, and technical issues; and
- Comply with legal obligations and enforce our terms.
4. Legal bases for processing (EU/UK users)
If you are in the European Economic Area or the United Kingdom, we process your personal information under the following legal bases:
- Performance of a contract — to provide the Service you request.
- Consent — where you have given it (for example, optional profile details). You may withdraw consent at any time.
- Legitimate interests — to keep the Service secure, prevent abuse, and improve reliability, in a way that does not override your rights.
- Legal obligation — where we must process information to comply with applicable law.
5. How we share information
We do not sell your personal information. We share information only as follows:
- Service providers (sub-processors) who process information on our behalf under contractual protections:
- Google Firebase (Firebase Authentication and Cloud Firestore) — account authentication and cloud database/storage of your profile and content.
- Apple — app distribution and, where you enable it at the OS level, standard app diagnostics.
- The Movie Database (TMDB) — provides film and TV content. When the App loads this content, requests (including your IP address) go to TMDB and its image servers; these requests are not tied to your NebRatings account identity.
- Other users. Content you make public — reviews, ratings, usernames, avatars, and public lists — is visible to other NebRatings users. Your email address and password are never shown to other users. You control the visibility of each list (public, friends-only, or private).
- Legal and safety. We may disclose information if required by law or to protect the rights, property, or safety of NebRatings, our users, or the public.
- Business transfers. If NebRatings is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction.
We do not sell your personal information and do not “share” it for cross-context behavioral advertising, as those terms are defined under California law.
6. Third-party services
The Service relies on the third parties below, whose handling of data is governed by their own privacy policies:
- Google / Firebase: policies.google.com/privacy
- Apple: apple.com/legal/privacy
- The Movie Database (TMDB): themoviedb.org/privacy-policy
7. Data retention
We keep your personal information for as long as your account is active or as needed to provide the Service. When you delete your account, we delete or de-identify your profile, ratings, reviews, and lists from our active systems. Some information may persist for a limited period in backups or where retention is required to comply with legal obligations, resolve disputes, or enforce our agreements.
8. Data security
We use industry-standard measures to protect your information, including encryption in transit (HTTPS/TLS), hashed password storage via Firebase Authentication, and access controls on our cloud database. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to protect your information and to promptly address issues if they arise.
9. Your rights and choices
In the App, you can at any time:
- Edit or delete your reviews, ratings, and lists;
- Update or remove profile details, including your bio and favorites;
- Change your content-maturity preference;
- Sign out; and
- Delete your account (Settings → Account), which permanently removes your associated content from our active systems.
EU/UK (GDPR) rights. If you are in the EEA or UK, you have the right to access, correct, delete, restrict, or object to our processing of your personal information; the right to data portability; and the right to withdraw consent. You also have the right to lodge a complaint with your local data protection authority.
California (CCPA/CPRA) rights. If you are a California resident, you have the right to know what personal information we collect and how we use and disclose it; the right to delete it; the right to correct it; and the right not to be discriminated against for exercising your rights. We do not sell or share your personal information for cross-context behavioral advertising, so there is nothing to opt out of in that respect.
Exercising your rights. You can exercise most rights directly in the App. For any other request, email us at nebratings@gmail.com. We will verify your request using the email associated with your account and respond within the time required by applicable law.
10. International data transfers
We are based in the United States, and our service providers may process and store information in the United States and other countries. If you access the Service from outside the United States, your information may be transferred to, stored, and processed in countries whose data-protection laws may differ from those in your country. Where required, we rely on appropriate safeguards (such as the standard contractual clauses offered by our providers) for such transfers.
11. Children's privacy
The Service is not directed to children under 13 (or the minimum age required in your country, such as 16 in parts of the EEA), and we do not knowingly collect personal information from children under that age. If you believe a child has provided us personal information, please contact us at nebratings@gmail.com and we will delete it. NebRatings also filters out explicit adult content and lets you set a content-maturity level suitable for you or your family.
12. Do Not Track and Global Privacy Control
We do not track users across third-party apps or websites, and we do not serve targeted advertising, so we do not respond differently to “Do Not Track” or Global Privacy Control signals. Regardless of these signals, we do not sell or share your personal information.
13. Third-party links
The Service may contain links to third-party websites or content (for example, a trailer opened on YouTube, or a title’s streaming provider). We are not responsible for the privacy practices of those third parties, and we encourage you to review their policies.
14. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above and, where changes are material, provide notice in the App or by email. Your continued use of the Service after an update means you accept the revised policy.
15. Contact us
If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, contact us at nebratings@gmail.com.
This product uses the TMDB API but is not endorsed or certified by TMDB.