Privacy Policy
Last updated: February 2026
1. Information We Collect
When you sign in, we collect your name, email address, and profile picture from your chosen sign-in provider (e.g. Google). We also store the lists, saved items, and profile information you create on Masterlist.
2. How We Use Your Information
We use your information to operate the Service — to display your profile, maintain your lists, and personalise your experience. We do not sell your personal data to third parties.
3. Data Storage
Your data is stored securely via Supabase. Authentication is handled by Supabase Auth using OAuth 2.0 (PKCE flow). Player state and guest lists are stored locally in your browser's localStorage and never sent to our servers.
4. Third-Party Services
We embed content from YouTube, Spotify, and Vimeo. These platforms may set their own cookies and collect data according to their own privacy policies. We use Avatarverse for generated avatars (no personal data is sent — only a deterministic seed).
5. Cookies
We use cookies only for authentication (session management via Supabase). We do not use advertising or tracking cookies.
6. Your Rights
You may delete your account and all associated data at any time from Account Settings. You may also contact us to request a copy of your data or ask any questions.
7. Changes to This Policy
We may update this Privacy Policy occasionally. We will notify you of significant changes by posting a notice on the Service.
8. Contact
Privacy questions? Contact us at hello@themasterlist.xyz.