Privacy

No login or user profile is required to read or generate reviews on HB Reviews.

If you choose to create an account, Supabase Auth stores your sign-in identity. HB Reviews stores only your optional display name and the reviews you save to your private library. Row-level security limits those account records to your signed-in user. You can remove saved reviews at any time from My HB Reviews.

Search terms and selected title IDs may be processed by server API routes so the app can call TMDb, Supabase and the configured AI provider. Published reviews are stored as public published content in Supabase.

If you post a public review on the Support page, your display name, rating, comment, page path and basic browser user-agent details may be stored so the review can be shown publicly and moderated if needed.

If you send private feedback, the message, optional name, optional email, page path and browser user-agent details may be stored as a support ticket and sent to HB by email when email delivery is configured.

API keys stay server-side. The browser must never receive the Supabase service role key, Gemini key, OpenAI key, or TMDb bearer token.

With your permission, HB Reviews records anonymous, first-party usage events such as page views, review-generation outcomes, source visits, sharing and app installation. A temporary random session identifier links pages during one browser session. We also record broad device, browser and operating-system families, referral and campaign labels, and approximate country, region, city and timezone derived by Vercel from the connection location.

Analytics does not store search text, names, email addresses, account identifiers, raw IP addresses, postal codes, precise GPS coordinates or full browser user-agent strings. It cannot identify a logged-out visitor. Analytics records are kept for up to 30 days, browser Do Not Track settings are respected, and you can change your choice below at any time.

No file uploads are part of this MVP.