Privacy Policy

Last updated 24 September 2026

Peliteca has no accounts. You never sign in, and we never know who you are.

Your record stays on your phone

Your viewing log, your scores, your notes, the writing you keep for each night, your shelf, the photos you take of your discs, and your statistics are stored in your phone's own storage. Nothing in the app uploads them. They leave only when you send them yourself, as a picture through the share sheet or as a backup file you save.

Two things you save are exceptions to that, and each has its own heading below: a birthday you choose to keep, and a film club ballot you choose to share. Neither takes your diary or your notes with it.

What the app asks the internet for

To show you film titles, posters, ratings and barcode results, the app asks our own server, which asks TMDB, OMDb, fanart.tv and a barcode catalog on your behalf. What travels is the thing you searched for, the film you opened, or the numbers under a barcode you scanned. Nothing goes with it that says who you are, because the app has no idea who you are. Like every request on the web, these carry your device's IP address.

Your own saved films are part of that. Drawing your shelf, your diary or your watch list means asking for each of those films' pictures by its catalogue number, and that happens while the screen is loading rather than when you tap. So the catalogue numbers of films you have saved do go out, routinely and on their own. What never goes out with them is anything you wrote or scored.

This product uses the TMDB API but is not endorsed or certified by TMDB.

Your birthday, if you keep one

One screen sends more than the things above, and you should hear it from us rather than find it out. Born this day needs a birthday. If you tap Keep as my day, the date is saved on your phone, and from then on the app sends the month, the day and the year to our server every time you open that screen, so it can ask the film catalog what premiered on your day. That happens while the screen is loading, not when you tap something. The catalog we ask sees the date too.

Your date of birth is the only unsealed thing this app sends that is about you rather than about a film. It travels on its own, with no name and no account number attached to it, because there are none to attach. If you would rather keep it to yourself, open Born this day and tap the control again, the one that reads Your day once a date is kept. That forgets the date on your phone, and the app stops sending it. You can still look up any birthday by typing it in, which sends only what you typed, only when you ask.

Artwork and trailers

Some disc faces and title lettering come from fanart.tv. Our server finds out which picture exists, and then your phone fetches that picture straight from fanart.tv's own image servers rather than through us. So fanart.tv can see your device's IP address and which piece of artwork was asked for, which tells them which film you have open, and on your shelf, which discs you own. What they do with that is covered by their privacy policy and not by ours.

Trailers play through YouTube's no-cookie player. Opening a film page that has a trailer also opens a connection to YouTube, so the trailer starts the moment you tap it, and YouTube can see which video was asked for. In the iPhone app you can also choose Open in YouTube, which plays the trailer on YouTube itself. What happens on their side is covered by Google's privacy policy.

Sharing with a film club

The live ballot is the one feature that puts something you made on a server, and only when you tap it. Before it leaves your phone, the club name and the film titles are encrypted with a key your phone makes on the spot. That key is never sent to us. It travels inside the link you paste into your chat, in the part after the # that browsers keep to themselves. Our relay holds a sealed package under a random code and cannot open it. Your friends' phones open it with the key in the link, and their votes come back sealed the same way. Voters' first names are inside the seal too.

A ballot stops opening 30 days after it is made. The sealed package is deleted when someone asks for it after that point. We do not run a scheduled job that deletes ballots nobody comes back to, so a sealed package whose link is never opened again may sit unread in our storage. It stays sealed either way, because we never had the key.

Anyone you send the link to can open that ballot, so send it the way you would send any private link. The app you send it through has its own privacy policy, and the link sits on their servers too.

Cards you share, like your favourites, your six or a birthday card, are pictures made on your phone and handed to your phone's own share sheet. Our servers never see them.

The camera

The barcode scanner uses your camera to read a disc's barcode, on your phone, live. No photo or video is recorded, stored, or sent anywhere. Photos you attach to a disc on your shelf stay in your phone's storage with the rest of your record.

Diagnostic reports

When something in the app goes wrong, it sends us the app name, the build number, the error message, the technical stack trace, and the platform. That is the whole list. It does not send anything you wrote, and there is nothing in it that says who you are. It stops after twenty reports in one session.

Keeping the doors from being kicked in

To stop the sharing relay and the birthday lookup being used as a firehose, our server counts recent requests against the address they came from. Those counters hold no content of any kind.

Backups are yours

Settings offers a one-tap backup: a readable file containing your whole record, saved wherever you choose. Restoring it is how you move to a new phone. No copy of it ever reaches us.

What Peliteca never does

No accounts. No advertising. No analytics. No tracking. No advertising identifier. We do not sell or share anything with anybody, because there is nothing collected about you to sell. There is nothing to opt out of.

Children

Peliteca is not aimed at children, and it collects nothing that would identify anyone of any age.

If you join the waitlist

If you leave your email on our website's waitlist, we use it to send one message on launch day, then nothing else. Ask us to delete it any time.

Changes

If any of this changes, this page changes with it, and the date at the top moves.

Contact