Privacy policy

Last updated: 1 October 2026

PassOnThat helps you stop scrolling: you swipe through titles and the app stops showing you what you don't want to see. To do that it needs to remember two things — who you are and what you've dismissed. Nothing else.

What we store

Your email address. It's the only thing that identifies you. There's no password: you sign in with a link we email you, or with Google or Apple.
Your decisions. Every time you pass on a title, save it for later, mark it as already seen, or put it off with "not now", we record which title it was and when. That's what lets us stop showing it to you.
Your filters. The genres, languages, categories and services you've ruled out, and how far back you accept releases.
Your preferences. The country whose catalog you see, the app's language, whether you've been through the initial setup, and how often you want to hear about what's new (daily, weekly or never).
A notification token, only if you allow notifications in the app. Apple or Google gives it to your phone so we can send it the notice of what's new. It identifies the phone for that and nothing else, and it's deleted when you sign out or delete your account.
Your connections, if you connect with someone to watch together: the email address you sent the invite to, the name you chose for them to see you by, and who you ended up connected with. See Watching with someone.

What we don't store

We don't ask for your name, phone number, address or date of birth.
We don't track your location. No GPS, and we don't look you up by IP address. To pick a catalog the app reads your device's time zone — a setting already on your phone, which never leaves it — and you can change the country yourself at the bottom of Filters.
We don't access your contacts, photos, camera, microphone or files.
We don't store payment details. The app is free and charges nothing.
No ads and no trackers. We don't use Google Analytics or anything like it, and there are no social network pixels.
We don't know whether you actually watched anything. The app never connects to Netflix, Disney+ or any other service with your account; when you tap a service, all we do is open its search with the title.

What stays on your device

Some things live only in your browser or phone and never reach us: whether you're looking at movies or series, and the marks saying you've been through the initial setup and the gesture tutorial. They're erased if you clear the site's data or uninstall the app.

Watching with someone

You can connect with another person to swipe the same deck. It takes both of you: you invite by typing their email, and nothing happens until they accept. Either of you can undo it whenever you want, from Filters.

While you're connected, the other person sees only two things:

The name you chose when inviting. Your email address is not shown to them.
The titles you both saved. That's a match, and it's the only thing revealed.

What they never see: your saved list, what you passed on, what you marked as already seen, or your filters. The deck you share is built by adding both sets of exclusions together, but neither of you can see which ones the other put in — only the result.

Of the email address you type when inviting, that's all we keep: the address, so the invite can reach whoever signs in with it. Remove the invite — or the connection — and it's deleted.

Who it's shared with

Apart from that, nobody, other than the services the app needs in order to work:

Supabase holds the database and handles signing in. Your email address, your decisions and your filters live there.
Resend delivers the email with your sign-in link, and the email with what's new on your services unless you turned it off in Settings or from the email itself. It only receives your address and the message.
Apple and Google deliver the notifications, if you allowed them. They receive the phone's token and the text of the notice: how many new titles there are and the names of two of them.
Google, only if you choose "Continue with Google": Google confirms your email address to us and passes on your name, which we neither use nor store. We ask for nothing else and send nothing about you.
Apple, only if you choose "Continue with Apple": the same thing, and Apple lets you hide your real address behind a relay one if you prefer.

We don't sell or rent your data to anyone, and we don't use it for advertising. We don't share it with the streaming services either.

Where the titles come from

The catalog comes from TMDB, and which service each title is on comes from JustWatch. We download that information ahead of time: your data never travels to them, and they don't know you exist.

This product uses the TMDB API but is not endorsed or certified by TMDB.

How long it's kept

For as long as you have an account. Your history is what makes the app useful: without it we'd show you again what you already dismissed.

How to delete everything

Email passonthat@cambuston.com from your account's address and ask us to delete it. Your account, your decisions and your filters are erased, with no copy kept. We do it within 30 days and confirm when it's done.

If you'd rather just start from scratch without deleting the account, say so in the same email.

Children

PassOnThat isn't aimed at children under 13, and we don't knowingly collect their data. If you believe a child gave us their email address, write to us and we'll delete it.

Security

Everything travels encrypted (HTTPS). In the database, each person can only read and write their own rows: that's enforced by the database itself, not just by the app.

Changes

If this changes, we update the date above. If the change is a significant one, we'll tell you inside the app before it takes effect.

Contact

passonthat@cambuston.com

Español — Esta misma política, en español: passonthat.com/privacidad.html

See also (in Spanish): where the information comes from · how accurate the data is