Privacy Policy

Overview

Opnshelf is a personal media tracker built on the AT Protocol. We take your privacy seriously. This policy explains what data we collect, why we collect it, and how we use it.

1. Information We Collect

From your AT Protocol account

Most Opnshelf accounts are created on Opnshelf's own PDS (personal data server), so Opnshelf hosts your AT Protocol account and authenticates it. If you instead sign in with a handle you already own, such as a Bluesky handle, your existing provider authenticates you.

When you sign in, we read your public AT Protocol profile information, including your handle, display name, and avatar.

Signing up with a password asks for a username, an email address and a password. We pass the email address and the password to the PDS and store neither. Our own database keeps your handle and whether the email has been confirmed. Signing up with Google gives us the email address on your Google account, which we hand to the PDS the same way.

Content you create

We store the following data that you actively provide:

• Your media shelf (movies and TV show episodes you track)
• Watch history, including dates watched
• Star ratings you submit
• Notes and reviews you write
• Lists you create
• Follow relationships (who you follow and who follows you)

Automatically collected data

We collect standard server logs (IP address, browser user agent, pages visited) to operate and improve the Service. These logs are not sold or shared with third parties.

On the live site we also use PostHog to measure how the Service is used: which features people use, how pages perform, when a visit ends, and diagnostic details when the app encounters an error. Analytics runs only on opnshelf.xyz and the data is processed in the European Union. We strip the page address and the referring page out of every event, because our addresses can contain things you typed. Once you sign in, these events are linked to your account identifier.

2. How We Use Your Information

• To provide and personalise the Service
• To show your activity to users you follow (based on your privacy settings)
• To generate aggregate statistics (e.g., popular titles)
• To respond to feedback you send us
• To diagnose bugs and improve performance using server logs

We do not sell your data to third parties.

3. Third-Party Services

We rely on the following third-party services:

• The Movie Database (TMDB) for movie and TV metadata. Poster images and descriptions are served from TMDB's CDN. See TMDB's privacy policy.
• AT Protocol for decentralised identity. Opnshelf runs its own PDS and hosts the accounts it creates there. Public profile data, such as display names and avatars, is read from Bluesky's public API. See atproto.com.
• Google, if you choose to sign up or sign in with Google. Google tells our PDS your email address and whether it is verified. See Google's privacy policy.
• Cloudflare for the signup captcha (Turnstile) and for sending account email, such as your verification code. See Cloudflare's privacy policy.
• PostHog for product analytics and error diagnostics on the live site and in the mobile app, processed in the European Union. See PostHog's privacy policy.

4. Data Retention

Your data is retained for as long as your account is active. You can delete your account yourself in Settings, which removes your Opnshelf data. You can choose to delete the records Opnshelf saved to your PDS at the same time.

5. Your Rights

Depending on your location, you may have rights including access, correction, and deletion of your personal data. To exercise these rights, please contact us via Bluesky.

6. Cookies and Local Storage

We keep you signed in with a session cookie. The cookie is httpOnly, so only our API can read it. We use browser local storage for your theme preference, for a random id that labels this browser on your devices list, and to remember which prompts you have dismissed on this browser. On the live site, analytics sets a first-party cookie that recognises this browser between visits. We do not use third-party tracking cookies or advertising cookies.

7. Changes

We may update this Privacy Policy from time to time. Continued use of the Service after changes constitutes acceptance of the updated policy.

8. Contact

For privacy-related questions, please reach out via Bluesky.