Privacy Policy

Rankiew is operated by Matheus de Magalhaes Franco LTDA (trading as Matheus Franco Produções), Brazilian company registry (CNPJ) 42.173.373/0001-04. This policy explains what data we collect while operating the website (rankiew.app) and Rankiew's iOS and Android apps, and what we do with it. Questions or requests about your data can be sent to contato@rankiew.app.

Account: when you create an account (via email and password, or by signing in with Google or Apple), we receive your name, email address and, when available, a profile picture. Authentication is handled by our infrastructure provider; we never see or store your Google or Apple password.

Content you create: the names and descriptions of your lists, the movies added to them, and whether you've marked each movie as watched.

Clubs: when you join a club, we keep your club nickname, discussion posts, poll and bracket votes, quiz answers, scheduled sessions and points. This is visible to the other club members, and the person who created the club sees the member list and can remove participants.

Premium subscription: if you subscribe to Premium, that charge is processed through Stripe (on the website) or the App Store / Google Play, via RevenueCat (in the apps). We never have access to your card number in either case. That data is processed and stored by Stripe, Apple or Google, as applicable.

Technical data: basic error and access logs (such as time and device type), used only to keep the service running securely. We don't use this for advertising or tracking across other apps or sites.

Security at sign-up: when you create your account, we record the IP address and the (approximate) country, derived from the IP, where the sign-up was made. We use this for security: preventing fraud, fake accounts and abuse, investigating incidents and meeting legal obligations such as keeping access logs. We don't use it for advertising, we don't sell it and we don't share it, except under a legal order. It is kept while your account exists and is deleted along with it, except for what the law requires us to keep.

When you write to support, we use your message and the contact email you provide (and, if you're signed in, your account ID and language) only to answer your request. It is sent by our server through a transactional email provider, and we don't store the message in our database.

We use this information only to: authenticate your login; show your lists and any shared with you; process and maintain your Premium subscription; and respond when you contact support. We don't use your data for advertising, we don't sell data to third parties, and we don't build behavioral profiles.

We also use the sign-up IP and country for the security of the service (preventing fraud and abuse).

We work with a small number of service providers, each receiving only the data needed for their role:

• Cloud infrastructure: website hosting, authentication and data storage.
• Stripe: payment for the Premium subscription made on the website.
• RevenueCat, Apple and Google: payment for the Premium subscription made through the apps (App Store / Google Play).
• TMDB (The Movie Database): receives only the term you type when searching for a movie, so it can return the title, year, poster and synopsis. None of your personal data (name, email, etc.) is sent to it.
• Google Cloud Translation: receives the text of a review only when a Premium user taps “Translate”, so it can return the translation. No personal data (name, email, etc.) is sent along with it.
• OpenStreetMap (Nominatim): OpenStreetMap service that finds your country from your approximate location, only if you agree to share it in the blog's upcoming releases post. The location is rounded and not stored.

When you share a list, anyone with the link can view it without needing an account. That's the whole point of the feature. The link contains a random identifier (not the database's sequential ID), so only people who get the link directly from you can access it. Lists you don't share remain private.

We keep your data for as long as your account exists. You can request deletion of your account and all associated data at any time by writing to contato@rankiew.app. We process the request within 15 days, except for what the law requires us to retain (for example, tax records of payments already made).

As a data subject under Brazil's General Data Protection Law (LGPD, Law 13.709/2018), you can at any time request: confirmation of what data we hold about you, access to it, correction of incomplete or outdated data, portability, deletion, and information about who we share your data with. All of these requests can be made through the contact e-mail above.

Rankiew isn't directed at anyone under 18, and we don't knowingly collect data from children. If you're the guardian of a minor who created an account without your authorization, please contact us so we can delete it.

We only use strictly necessary cookies: the session cookie that keeps you logged in and, only when you choose them, the preference cookies for your language (rankiew_locale) and your “where to watch” country (rankiew_watch_region). We use no tracking or advertising cookies and no third-party analytics, so we don’t ask for cookie consent. To protect login and sign-up from bots, we load Cloudflare Turnstile on those forms only. The YouTube trailer (cookie-free domain, youtube-nocookie) only loads after you press play. When you vote on a blog post, we only store in your browser that you already voted. In the apps, the session stays on your device, not in browser cookies.