Your data, plain and simple

What we store, where, why and how you delete it. No fine print.

This is a translation. If in doubt, the Spanish version is the one that counts.

Who

Lucas Laguens is the data controller for Palomify. Questions or requests? Write to lucas.laguens@gmail.com.

Without an account

If you play without an account, your latest streaming services are remembered on your phone. The streaming services for each game travel to the room, the group sees them, and they're deleted with it after 24 h. Your vetoes are just for that game: they travel to the room, nobody else sees them, and they're deleted with it after 24 h. Whatever you say you're in the mood for is, like your vetoes, just for that game: it travels to the room, nobody else sees it (the group only sees which way the deck is leaning), and it's deleted with the room after 24 h.

With an account

To sign in we use Auth0 (servers in the EU). If you sign in with email, it stores your email and your encrypted password: we never see it. If you sign in with Google, it stores your Google profile.

In Cloudflare D1 (EU) we store your name, your avatar color, your streaming services, whether you want to hide what you've seen, what you've seen with its title, and your “Love it!” and “Yes” votes with their genres. If you set up your people, also your @username, your friend code, your friendships, requests and groups. Your vetoes and what you're in the mood for are never saved to your profile: they belong to each game.

Taking the taste quiz? We store your “Yes” and “Love it!” votes as tastes, what you mark as seen and whether you finished or skipped it. It all shows up in “Download my data” and is deleted with your account.

We never store your “Nope” votes. And we don't even ask for your location.

Your people

What do your friends see about you? Your name, your @username, your color and whether you share your tastes. Never your streaming services, what you've seen or your groups.
Your friend code lets people add you instantly, and you can change it whenever you want. The friend link never goes through our servers. That said, we log each account's failed codes for an hour, to stop anyone guessing blindly.
Only you can see your groups.
With “Share my tastes with my people”, your tastes count in your friends' group games even when you're not playing. Heads up: whoever starts the game could infer something if a title shows up less. That's why it starts off.
Deleting your account? Your friendships, requests and groups disappear, and you leave other people's groups.
“Download my data” includes your usuarioPublico (your @username and your code) and your gente (friends, requests and groups).

What for

Only to deal your group a deck of things you like. No ads, and we never sell your data.

Who else

Auth0, so you can sign in.
Cloudflare, for rooms and your profile.
Vercel, to serve the app.

How long

Until you delete your account. After that we keep only the account ID for about 48 more hours, and D1 backups disappear after 7 days.

Your rights

You can download and delete your data whenever you want from “Your profile”, or by writing to the contact email above.

Delete your data

Want to leave? Go to Your profile → Your data → Delete my account. That deletes your profile, your streaming services, what you've seen, your tastes and your people (friendships, requests and groups), plus your Auth0 user. We only keep the account ID for about 48 h, so nobody can bring it back, and backups disappear after 7 days. If you can't sign in, write to the contact email and we'll do it for you.

Browser storage

We use localStorage and sessionStorage to remember your session, the game, your name and your latest streaming services. No tracking cookies.

The app keeps its own files in Cache Storage so it opens without signal: only the screens and what they need to render, none of your data or your game's.

The NEXT_LOCALE cookie stores the language you pick so the app always opens in it. It lasts one year and only shows up if you pick a language.

Result links

Sharing the winner of a movie or show game? Anyone with the link sees the title, its poster and how it was decided, with no names: not yours, not anyone's in the group. The link works for up to 24 h after the room's last activity; after that, it's expired.

The chat preview only has the title and how it was decided, no poster. Heads up: once it's sent, that service keeps it, and we can't delete it.