Privacy Policy
Effective date: March 22, 2026 · Last updated: March 22, 2026
RecME ("we", "our", or "us") is committed to protecting your privacy. This policy explains what data we collect, how we use it, and the rights you have over your information.
1. Information We Collect
- Account Information: When you sign up, we collect your name and email address. If you use Google Sign-In, we receive your name and email from Google.
- Usage Data: We store your watchlist and watched history to power personalised recommendations.
- Authentication Tokens: We use secure HTTP-only cookies to keep you signed in. We do not store plain-text passwords — only bcrypt-hashed versions.
2. How We Use Your Information
- To provide personalised movie recommendations powered by our AI engine.
- To sync your watchlist and watched history across sessions.
- To power the Movie of the Day feature with a personalised daily pick.
- We never sell, rent, or share your personal information with third parties for marketing purposes.
3. Third-Party Services
- TMDB (The Movie Database): Movie metadata, posters, and backdrop images are fetched from TMDB's public API. Your personal data is never shared with TMDB.
- OMDb: Movie ratings and additional metadata are sourced from OMDb.
- Google OAuth: If you choose to sign in with Google, your name and email are shared with us by Google per their OAuth terms.
4. Data Storage & Security
- Your data is stored in a MongoDB database. Access is restricted and protected by authentication.
- Passwords are hashed using bcrypt before storage — we never store plain-text passwords.
- We use HTTPS for all data transmission between your browser and our servers.
5. Your Rights
- Access: You can view your profile information at any time from the Profile page.
- Correction: You can update your display name from your Profile page.
- Deletion: You can permanently delete your account and all associated data (watchlist, watched history) from the Danger Zone in your Profile page.
6. Cookies
- We use a single HTTP-only session cookie to keep you authenticated. This cookie contains a JWT and expires after 7 days.
- We do not use tracking cookies, advertising cookies, or third-party analytics cookies.
7. Changes to This Policy
- We may update this Privacy Policy occasionally. Changes will be reflected on this page. Significant changes will be communicated via the platform.
8. Contact
- If you have any questions about this Privacy Policy, please contact us at reddyvaru12@gmail.com.