Privacy Policy

Last updated: September 20, 2026

Popcorn Room (“the app”, “we”, “us”) is a group movie-picking app operated by Fenil Shah. This policy explains what data the app collects and how it is used, and it covers the website, the iOS app, and the Android app. By using Popcorn Room you agree to this policy.

The short version

No account, no email, no real identity - you join with an anonymous session and a display name you choose.
We don’t sell your data, run ads, or use third-party analytics or cross-app tracking.
The little data that exists is only there to make the shared room work.

What we collect

An anonymous ID. On first use, Firebase Authentication creates a random anonymous identifier for your device or browser. It contains no personal information and is kept so you remain the same participant across sessions.
A display name. The name you type when creating or joining a room, shown to others in the same room. It isn’t verified - use a nickname if you prefer.
Room activity. The rooms you create or join (room code, chosen filters, the deck of titles), your swipe votes, your progress through the deck, and a “last seen” timestamp used to show who is currently online. Your individual votes are kept private - other participants can never see how you voted.
We do not collect your email, phone number, real name, address, payment details, precise location, contacts, photos, or advertising identifiers.

How we use it

Only to operate the app: to run the shared room, sync everyone’s swipes in real time, determine the group’s match, and show who is online. Nothing else.

Where your data is stored

We rely on a small number of service providers:

Google Firebase (Authentication, Cloud Firestore, Cloud Functions) stores the anonymous ID, display name, and room activity, and runs the matching logic. It is hosted on Google Cloud and processed on our behalf under Google’s privacy terms.
Vercel hosts the website and, like any web host, may log standard technical request data (such as IP address and browser type) for security and operation.
The Movie Database (TMDB) is the source of movie and TV details. TMDB is queried only by our servers for general catalog data (for example, popular titles on a given service). Your personal data is never sent to TMDB.

We do not share your data with anyone else, and we never sell it.

Data stored on your device

The app keeps a small amount of data locally so it works smoothly: your anonymous session (so you aren’t signed out every visit) and your last-used display name (so you don’t retype it). On the web this uses browser storage; in the mobile apps it uses the device’s local app storage. You can clear it any time by clearing the site’s data (web) or uninstalling the app (mobile).

Data retention

Room data and your anonymous participant record persist while the app operates so rooms keep working. Inactive anonymous accounts may be removed automatically after a period of inactivity. In the mobile apps you can erase your data yourself from Settings → Delete my data: this deletes your anonymous session and your votes, and replaces your display name in past rooms with “Deleted player”. You can also request deletion by contacting us - because sessions are anonymous, we may ask for the relevant room code(s) to locate it.

Security

Data is transmitted over encrypted connections (HTTPS/TLS) and protected by server-side security rules that, among other things, keep individual votes private. No method of transmission or storage is completely secure, but we take reasonable measures to protect your information.

Children’s privacy

Popcorn Room is not directed to children under 13 (or the equivalent minimum age in your country), and we do not knowingly collect personal information from them.

Your choices and rights

You can stop using the app at any time. Depending on where you live (for example, the EEA/UK under GDPR, or California under the CCPA), you may have rights to access or delete your data. To make a request, contact us below.

Platform-specific notes

Website

Served by Vercel. Uses browser storage for the anonymous session and remembered name. No advertising or third-party analytics cookies.

iOS app

Distributed via the Apple App Store. The app does not use the Advertising Identifier (IDFA), does not track you across apps or websites, and shows no ads. The only data linked to you is the anonymous ID and the display name you enter.

Android app

Distributed via Google Play. The app collects no advertising identifiers, shows no ads, and does not track you across apps. Data is encrypted in transit. The only data associated with you is the anonymous ID and the display name you enter.

Changes to this policy

We may update this policy as the app evolves. Material changes will be reflected here with a new “Last updated” date.

Contact

Questions or requests? Email fenils.dev@gmail.com or visit the Contact page.