Privacy Policy
We've written this in plain English. If you have questions about anything here, email us at hello@pressplayd.com and we'll answer properly.
Who we are
pressplayd is operated as a personal project based in Ireland. When this policy says "we", "us" or "our", it means the developer of pressplayd.
For the purposes of EU and Irish data protection law (GDPR), we are the data controller of any personal information you provide to us.
Contact: hello@pressplayd.com
What data we collect
We only collect what we need to run the app. Here's exactly what that is:
- Account information — your email address and password when you sign up. If you choose to add them: a display name, username, bio, and location.
- Content you create — the media logs, ratings, reviews, lists and comments you post in the app.
- Social data — who you follow and who follows you.
- Push notification token — a device identifier used to send you push notifications. Only collected if you grant permission.
- Category preferences — the media types you select during onboarding.
We do not collect your precise location, payment information, or any other sensitive personal data.
How we use your data
We use the data listed above for the following purposes:
- To create and maintain your account
- To show your logs, reviews and lists to you and (if public) to other users
- To power the social feed — showing you what people you follow have logged
- To send you push notifications about likes, comments and follows (only if you enable them)
- To display follow suggestions to new users during onboarding
- To respond to support requests you send us
We do not use your data for advertising, and we do not sell it to third parties. Ever.
Legal basis for processing (GDPR)
Under GDPR, we need a legal basis for processing your personal data. Ours are:
- Contract — processing your account data is necessary to provide the service you signed up for.
- Legitimate interests — operating, improving and securing the app.
- Consent — for push notifications, which you can withdraw at any time in your device settings.
Where your data is stored
Your data is stored using Supabase, a cloud database platform. Supabase stores data on AWS infrastructure. The primary region for our database is EU West (Ireland), meaning your data stays within the EU.
Supabase's privacy policy is available at supabase.com/privacy.
Third-party services
pressplayd uses the following third-party services to function. Each has its own privacy policy.
- Supabase — database, authentication and file storage
- TMDB (The Movie Database) — film and TV show metadata. No personal data is shared with TMDB.
- iTunes Search API (Apple) — music and album metadata. No personal data is shared.
- OpenLibrary — book metadata. No personal data is shared.
- RAWG — game metadata. No personal data is shared.
- Expo Push Notifications — for delivering push notifications to your device.
Your rights under GDPR
As someone based in the EU, or using a service operated from the EU, you have the following rights:
- Access — you can request a copy of the personal data we hold about you.
- Correction — you can update your profile information at any time from within the app.
- Deletion — you can delete your account and all associated data from within the app, or by emailing us. We will action deletion requests within 30 days.
- Portability — you can request an export of your data in a machine-readable format.
- Objection — you can object to processing based on legitimate interests.
- Withdraw consent — you can turn off push notifications at any time in your device settings.
To exercise any of these rights, email hello@pressplayd.com. You also have the right to lodge a complaint with the Data Protection Commission (Ireland) at dataprotection.ie.
Age requirement
pressplayd is intended for users aged 16 and over. We do not knowingly collect personal data from anyone under 16. If you believe a person under 16 has created an account, please contact us at hello@pressplayd.com and we will delete the account promptly.
Data retention
We keep your data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal reasons.
Anonymised or aggregated data (e.g. total log counts) may be retained indefinitely as it cannot identify you.
Changes to this policy
If we make material changes to this policy, we'll notify you via the app or by email before the changes take effect. The "last updated" date at the top of this page will always reflect the most recent version.
Contact
If you have any questions about this policy or how we handle your data, email us at hello@pressplayd.com. We'll respond within a few days.