Privacy

No login or user profile is required to use HB Reviews.

Search terms and selected title IDs may be processed by server API routes so the app can call TMDb, Supabase and the configured AI provider. Published reviews are stored as public published content in Supabase.

If you post a public review on the Support page, your display name, rating, comment, page path and basic browser user-agent details may be stored so the review can be shown publicly and moderated if needed.

If you send private feedback, the message, optional name, optional email, page path and browser user-agent details may be stored as a support ticket and sent to HB by email when email delivery is configured.

API keys stay server-side. The browser must never receive the Supabase service role key, Gemini key, OpenAI key, or TMDb bearer token.

No file uploads are part of this MVP.