Privacy Policy

Introduction

BingeBracket ("we," "our," or "us") respects your privacy. This Privacy Policy explains how we collect, use, and protect your information when you use our website and services.

Information We Collect

Information You Provide

• Account Information: Email address, display name (if you create an account)
• Tournament Data: Movie choices, tournament winners, completion times (stored anonymously unless you create an account)
• Custom Tournaments: Tournament names, descriptions, and movie selections you create
• Social Interactions: Users you follow and users who follow you
• Reports: If you report a user or tournament, we collect the report details and your identity

Information Collected Automatically

• Usage Data: Pages visited, features used, tournament sessions
• Device Information: Browser type, device type, IP address
• Cookies: Analytics and consent cookies (see Cookies section below for details)

Authentication

We use passwordless authentication via email. When you sign in, we send a one-time magic link to your email address. We do not store passwords. Magic link tokens expire after 15 minutes and are deleted after use.

How We Use Your Information

We use your information to:

• Provide and improve our tournament services
• Maintain your account and tournament history
• Display your statistics and achievements
• Enable you to create and share custom tournaments
• Analyze usage patterns to improve the service
• Communicate updates based on your email preferences (such as product updates, achievement notifications, and marketing — each of which you can individually enable or disable in your account settings)

Data Storage and Security

• Passwordless Authentication: We use one-time magic links sent to your email — no passwords are stored
• HTTPS: All data transmission is encrypted via SSL/TLS
• Database Security: User data is stored in secure PostgreSQL databases
• Token-Based Authentication: User sessions are managed via short-lived JWT tokens stored in your browser. Authentication does not rely on cookies.

Data Sharing

We do not sell your personal information, share your email address with advertisers, or use your data for targeted advertising.

We may share data in the following circumstances:

• If required by law or legal process
• To protect our rights or prevent fraud
• With service providers (Railway, TMDB API) who help us operate the service

We also share aggregated, anonymized insights about content preferences — such as which movies audiences choose most — with streaming platforms, studios, and entertainment industry partners. These insights are derived from collective user behaviour and cannot be used to identify individual users.

Your Rights

You have the right to:

• Access: Request a copy of your data
• Delete: Request deletion of your account and all associated data
• Export: Download your tournament history and statistics
• Opt-Out: Unsubscribe from any emails we send (except critical account notifications)
• Profile Visibility: Control whether your profile is public, unlisted, or private

To exercise these rights, contact us at: [email protected]

Data Retention

• Active accounts: Data retained for as long as your account remains active
• Deleted accounts: All personal data deleted within 30 days
• Anonymous tournament data: Individual matchup results (movie choices per round) are retained without personal identifiers and may be used in aggregate for analytics and service improvement

Cookies

We use a small number of cookies:

• Analytics (visitor_session): A first-party, httpOnly cookie used to track unique daily visitors. It expires at the end of each day and is not set if you opt out via our cookie consent banner. We use first-party analytics only — usage data is collected and stored on our own servers and is not shared with third-party analytics providers.
• Cookie Consent (binge_bracket_cookie_consent): Stores your cookie consent preference so we remember your choice. Expires after one year.

We do not use cookies for authentication — login sessions are managed via tokens stored in your browser's local storage. You can disable cookies in your browser, but this may limit analytics functionality.

Do Not Track

We do not currently respond to "Do Not Track" browser signals. However, as noted above, we use only first-party analytics and do not share usage data with third-party tracking services.

Children's Privacy

Third-Party Services

We use:

• TMDB (The Movie Database): For movie data and images (subject to TMDB's privacy policy)
• JustWatch: For streaming provider information (subject to JustWatch's privacy policy)
• Cloudflare: For DNS, CDN, and security protection (subject to Cloudflare's privacy policy)
• Railway: For hosting (subject to Railway's privacy policy)
• Resend: For sending authentication emails (subject to Resend's privacy policy)
• hCaptcha: For bot protection during sign-in (subject to hCaptcha's privacy policy)

International Users

BingeBracket is intended for users in the United States. We do not specifically target or market our services to users outside the U.S. Our service is hosted in the United States, and by using BingeBracket, you consent to the transfer and processing of your information in the U.S.

California Privacy Rights (CCPA/CPRA)

California residents have the right to:

• Know what personal information is collected
• Know if personal information is sold or disclosed
• Opt-out of the sale of personal information (we do not sell personal information)
• Request deletion of personal information
• Request correction of inaccurate personal information
• Limit the use and disclosure of sensitive personal information
• Not be discriminated against for exercising these rights

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by:

• Posting the new policy on this page
• Updating the "Last Updated" date
• Emailing users if changes are material (if you have an account)

Your continued use of BingeBracket after changes constitutes acceptance of the updated policy.

Data Breach Notification

In the event of a data breach that affects your personal information, we will:

• Notify affected users as soon as reasonably practicable, and in compliance with applicable law
• Provide details about what information was compromised
• Explain steps we're taking to address the breach
• Advise on steps you can take to protect yourself

Contact Us

If you have questions about this Privacy Policy or your data:

Email: [email protected]
Website: https://bingebracket.com

Attribution: This service uses TMDB API but is not endorsed or certified by TMDB.