Privacy Policy

What we collect

Your account: the email you sign up with, your handle, display name, and avatar if you add one. If you choose to add your phone number so friends can find you, only a SHA-256 hash of it is stored; the raw number stays on your device.

Your activity: the films you log, your Scare Score rankings, the films you mark as loved, your watchlist and lists, likes, comments, who you follow, and who or what you stalk (people and studios you track).

Contacts, only if you allow it: to find friends, Gasper reads your address book on your device and sends only SHA-256 hashes of emails and phone numbers. The raw contacts never leave your phone, and you can decline or revoke access at any time in iOS Settings.

Device: a push notification token if you enable notifications, basic diagnostics Apple provides with crash reports, and a small set of product analytics events (like app opens and completed rankings) tied to your account.

How we use it

To run Gasper: keep your rankings in sync across devices, power your feed and profile, match you with friends you choose to find, and send the notifications you turn on (your daily film pick and new-film alerts from who you stalk; follows, likes, and comments arrive in your in-app inbox).

Community scores shown on film pages are aggregates. Your individual rankings feed them only in anonymous, combined form.

Analytics tell us which features get used so we can improve Gasper. The event set is deliberately small, and we never record what you type.

Who we share it with

Supabase hosts our authentication, database, and storage. Your account and activity live there.

TMDb (The Movie Database) provides film metadata. Your search queries and the titles you look up are sent to TMDb to fetch that data.

YouTube plays trailers inside the app. Loading a trailer is subject to YouTube's own terms and privacy policy.

Apple delivers push notifications.

PostHog processes our product analytics events.

We do not sell your data, and there are no ad networks in Gasper.

Your controls

Per-post visibility: every ranking, want-to-watch, or list you share is either Public (on the feed, eligible for Trending) or Unlisted (kept off other people's feeds, still visible on your profile).

Private account: flip it on in Settings and new followers must be approved before they see your rankings.

Contacts: access is optional and revocable in iOS Settings at any time. Adding your own number is optional too. We only ever hold hashes.

Notifications: toggle them off in Settings or in iOS Settings.

Deletion

Delete your account from Settings at any time. This permanently erases your account, rankings, follows, stalks, comments, and likes from our servers. It cannot be undone.

Data cached on your device is wiped as part of the same flow.

Questions

Write to support@gasperapp.com.