Privacy

Controller

name or company, street, postcode and city

Email: email address

Hosting and server logs

The site runs at Hetzner Online GmbH, Gunzenhausen, servers in Germany. When you visit, the server processes technically necessary data: IP address, time, requested address and browser identifier. We need it to deliver the site and to protect it from abuse. For that we briefly count requests per IP address in memory.

We delete logs after 14 days at the latest. The legal basis is our legitimate interest in secure operation (Art. 6(1)(f) GDPR). We have a data processing agreement with the host.

What stays in your browser

Without an account we keep your taste only in your browser's local storage: favourite titles, ratings, watchlist, dismissed titles, your services, your guest name, quiz results and settings such as sound. If you play the quiz or join a round, we create an anonymous account without an email address; your browser stores its ID so rounds and the quiz recognise you. A cookie remembers your language.

All of this is needed for the features you use (Section 25(2) no. 2 TDDDG). You can delete it at any time in your browser settings (clear site data).

Picks, search and images

For picks your browser sends favourite titles, ratings and filters to our server. It uses them to query The Movie Database (TMDb) and stores none of it. Search terms go through our server the same way.

Our server fetches posters, stills and logos from TMDb and passes them on to you. Your browser does not connect to TMDb for this. The legal basis is providing the service (Art. 6(1)(b) GDPR).

Trailers come from YouTube (Google Ireland Limited, data may go to the USA) via youtube-nocookie.com. They only load when you tap "Watch trailer". From then on, Google's privacy policy applies. There is an adequacy decision for the USA (EU-US Data Privacy Framework), and Google is certified under it.

Sentences about your taste (Claude)

For "What grips you" and for reasons in rounds we send the titles you picked and the round's votes and taste details to Claude by Anthropic (Anthropic PBC, USA). We do not send names or email addresses; people only carry random IDs there.

Anthropic processes the data on our behalf under a contract with standard contractual clauses and does not use it to train its models. The legal basis is providing the feature you use (Art. 6(1)(b) GDPR).

With friends (rounds)

When you start or join a round, we store on our server: your display name, your votes, mood and taste choices, language and your (possibly anonymous) account ID. Everyone in the round sees the names and the shared matches. If you leave an email address for updates, we store it in the round.

We send round emails via Resend (Plus Five Five, Inc., USA, sending via servers in the EU), only to addresses people entered for themselves.

We delete rounds after 90 days without activity. The legal basis is providing the round (Art. 6(1)(b) GDPR).

Account

With an email address you keep your taste across devices. For this we use Supabase (Supabase Inc., servers in Supabase project region). We store your email address, display name, language, country, your profile (favourites, ratings, watchlist, dismissed titles, services, "What grips you"), quiz results and trophies. Supabase sends the sign-in code by email via Resend (Plus Five Five, Inc., USA, sending via servers in the EU).

Supabase processes the data on our behalf. You can delete your account yourself at any time under "You"; all related data is gone immediately. Anonymous accounts without an email address expire after a long period of inactivity. The legal basis is providing the account (Art. 6(1)(b) GDPR).

Quiz

We store quiz results with your (possibly anonymous) account so you can find them again, earn trophies and compare with everyone who plays. Others only see aggregated values.

In Claude and ChatGPT

If you use Couchmood in a chat service such as Claude or ChatGPT, the service sends the details from your question (such as favourite titles and mood) to our server. We compute picks from them and store none of it. What the chat service itself stores is governed by its own privacy policy.

Your rights

You can request access to your data and have it corrected, deleted, restricted or transferred (Art. 15 to 20 GDPR). You can object to processing based on our legitimate interest (Art. 21 GDPR).

Write to email address. You can also complain to a data protection authority (Art. 77 GDPR).