Scroll Movies

Privacy Policy

Last updated October 16, 2026

Scroll Movies is an iPhone app and a website (scrollmovies.app) operated by Eli Riedel, based in the United States (full address under "Contact" below) ("we", "us"). We are the "controller" (the business responsible) for the personal data described here. This policy explains what we collect, why, who we share it with, how long we keep it, and the choices and rights you have. It is written to be read; if anything is unclear, email hello@scrollmovies.app.

The short version. We collect what we need to run your account, your membership, your feed and the social features, plus usage analytics you can turn off. Trailers play in YouTube's player, so Google receives data about the videos you watch, under its own privacy policy. We advertise Scroll Movies on Facebook, Instagram and Reddit. To measure those ads, the app shares some activity with Meta and Reddit only if you allow tracking, Meta is told when a trial starts or a membership is paid for, and the website shares visits with Meta and Reddit only if you accept the cookie banner. We only use your device's advertising identifier if you allow it, and you can switch the rest off in the app. If your account is in the US and you don't have a membership, we may send you up to three getting-started emails, each with a one-tap unsubscribe. Your messages are private between you and the people you write to, but they are stored on our servers and can be reviewed if reported. We don't sell your data and we don't show ads in Scroll Movies. Payment card details go to Apple or Stripe, never to us. You can delete your account in the app at any time.

Contents

  1. What we collect
  2. How we use it, and our legal bases
  3. Who we share it with
  4. Trailers and YouTube
  5. International transfers
  6. How long we keep it
  7. Your choices
  8. Your rights
  9. Do Not Sell or Share
  10. Children
  11. This website and cookies
  12. Contact

What we collect

Things you give us

Things we record as you use Scroll Movies

What we do not collect

Your precise location, contacts, health data, browsing history, microphone or camera. We only see the one photo you choose for your profile, not the rest of your photo library. We only read your device's advertising identifier (IDFA) if you allow tracking when iOS asks. We don't show ads in Scroll Movies, and we do not sell personal data for money.

How we use it, and our legal bases

Where the EU or UK GDPR applies, we rely on the following legal bases.

PurposeLegal basis
Creating and running your account, the feed, watchlist, ratings, reviews, episode tracking, comments, follows, messages, shared lists, Activity, and your movie personalityPerformance of our contract with you (the Terms)
Showing where to watch in your country, and the app in your languageContract
Selling and managing your membership and free trial, handling refundsContract; legal obligations (tax and accounting records)
Emails you need: codes to confirm your email address or reset your password; purchase confirmations and renewal information for web membershipsContract; legal obligations (automatic-renewal laws)
Push notifications (replies, likes, new followers, messages, sent titles, list invitations)Your consent, given in iOS; withdraw it any time in Settings
Keeping the community safe: the word filter, reviewing reports (including reported messages), removing content, suspending accountsLegitimate interests (a safe service) and contract
Product analyticsLegitimate interests (understanding and improving Scroll Movies); you can object with the "Share usage data" switch
Crash and error reportsLegitimate interests (keeping the app working)
Measuring and improving our ads with Meta and Reddit: the app events listed above, your advertising identifier and hashed email (app), or their pixels (website)Your consent: "Allow" in the iOS tracking prompt, or "Accept" on the website banner. Withdraw it any time (see "Your choices")
Telling Meta when a trial starts or a membership is paid for or renews (sent by RevenueCat and our server), without your advertising identifier if you haven't allowed trackingLegitimate interests (knowing which of our ads work, so we can keep Scroll Movies affordable); you can object with the "Share usage data" switch or by emailing us
Getting-started emails: up to three emails (1, 3 and 6 days after you sign up) to accounts in the US without a membershipLegitimate interests (helping people who signed up get started); unsubscribe any time with the one-tap link in each email
Responding to legal requests and protecting rights and safetyLegal obligations; legitimate interests

We don't make decisions about you that have legal or similarly significant effects based solely on automated processing. The feed ranking and movie personality are automated personalization of which trailers you see, nothing more. The automated word filter can stop a comment, review, message or name from being posted; you can rephrase it, or email us if you think it was a mistake.

Who we share it with

We use these service providers ("processors") to run Scroll Movies. Each receives only what it needs for its job, under a contract that limits its use of the data to providing its service to us, except where we say a company acts under its own terms.

ProviderWhat forWhat they receiveWhere
SupabaseDatabase, sign-in, file storage (profile photos), sending push notificationsAccount, activity, content including messages, quiz result, analytics events, device tokens, Sign in with Apple token, profile photoUnited States (Ohio, us-east-2)
CloudflareHosting this website, DNS, and routing email sent to scrollmovies.appIP address, requested pages; emails you send usGlobal network
AppleApp Store purchases, push notifications (APNs), Sign in with ApplePurchase and trial status, device token; your Apple account data stays with AppleUnited States / global
GoogleSign in with Google (if you choose it)Your Google account email and nameUnited States / global
YouTube (Google)Playing trailers in YouTube's embedded player (see "Trailers and YouTube")The videos you play, your IP address, device and browser information, and cookies or identifiers YouTube's player usesUnited States / global
TMDB (The Movie Database)Film and series information and images; searching for titles not yet in our catalogYour IP address when the app loads posters and images; your search text for those searches. No account informationUnited States / global
Movie of the NightStreaming availability (where to watch)The title and country you look up, and your IP address. No account informationUnited States
RevenueCatMembership and trial management for both App Store and web purchases; runs our web checkout page; tells Meta about trials and paid memberships for ad measurementAccount ID, purchase history, device and app information, device identifiers (the IDFA only if you allow tracking) and Meta's anonymous app ID, email (web purchases)United States
StripeCard and Apple Pay payments in our US web checkoutEmail, payment details, billing country and postal code (held by Stripe, not us)United States
ResendSending our emails: codes to confirm your email address or reset your password, purchase and renewal notices for web memberships, and getting-started emailsEmail address and the messageUnited States
PostHogProduct analyticsInstall or account ID, in-app events, app version, device type, IP address (as part of the connection)United States
SentryCrash, error and performance reportingAccount ID, error details, device model, OS and app version, IP addressUnited States
AnthropicOur servers use Anthropic's Claude model to look at frames of trailers and find where each trailer's content starts, so the feed can skip studio logosTrailer frames and title information only. No personal dataUnited States
Meta Platforms (Facebook, Instagram)Measuring and improving our ads on Facebook and Instagram (advertising measurement partner)App, only if you allow tracking: install and app opens, account created, quiz completed, checkout started, title opened from a shared link. Trial started and membership paid or renewed (sent by RevenueCat, with price); Meta's anonymous app ID, the IDFA if you allow tracking, device and app information, IP address; for web purchases, hashed email and hashed account ID. Website, only if you accept: pages viewed, App Store button clicks, Meta cookies, IP address and browser informationUnited States / global
Reddit, Inc.Measuring and improving our ads on Reddit (advertising measurement partner)App, only if you allow tracking: trial started, trial still active after an hour, membership paid or renewed (with price), hashed email, hashed advertising identifier, IP address, sent by our server. Website, only if you accept: pages viewed, App Store button clicks, Reddit cookies, IP address and browser informationUnited States

About Meta and Reddit. Meta receives this under its Business Tools Terms and handles it under its own privacy policy; Reddit under its advertising terms and its own privacy policy. They may match it with what they know from their own services to tell us, in aggregate, which ads led to installs and memberships, and to show our ads to people likely to enjoy Scroll Movies. We never give them your name, the titles you watch or rate, your reviews, comments or messages, or your quiz answers, and we don't use advanced matching.

Other members see what you share publicly in Scroll Movies: your username, display name, bio, profile photo, follower, following and watched counts, your comments and reviews, ratings and likes shown on your profile, and who you follow. Your public profile can also be opened on the web at scrollmovies.app/u/your-username, and your likes, ratings and reviews can appear in the Friends feed of people who follow you. Messages and titles you send are seen only by the people in that conversation, and shared lists only by their members.

We may also disclose information if the law requires it, or to protect the rights, property, and safety of Scroll Movies, its members, or others. If Scroll Movies is ever sold or transferred, your data would move with it, still protected by this policy, and we would tell you first.

Trailers and YouTube

Scroll Movies uses YouTube API Services. Trailers and other videos play in YouTube's embedded player, loaded from YouTube's servers, so Google receives information about the videos you play, your IP address and device information, and may set or read cookies or similar identifiers in the player. Google handles this under the Google Privacy Policy, and by watching videos in Scroll Movies you agree to the YouTube Terms of Service. We don't receive your YouTube or Google account data. You can review and revoke third-party access to your Google data at the Google security settings page, although Scroll Movies never asks for access to your Google account for videos. Separately from YouTube, the app records which trailers you watch as part of your feed activity (above).

International transfers

We are based in the United States and our providers store data mainly in the United States. If you use Scroll Movies from the EU, the UK, or elsewhere, your data is transferred to the United States. Where the GDPR or UK GDPR applies, we rely on the European Commission's Standard Contractual Clauses (and the UK Addendum), or on the EU-US Data Privacy Framework and UK Extension where the provider is certified, as offered in each provider's data processing terms.

How long we keep it

DataHow long
Account, profile and photo, quiz result, likes, watchlist, ratings and reviews, episode progress, lists you own, follows, comments, messages and sent titlesUntil you delete them or your account. Account deletion removes them from our live database immediately, including the conversations you're part of; backup copies are overwritten within 30 days. A deleted comment's text is removed; other people's replies to it may remain under a "[deleted]" marker. Titles you added to someone else's shared list stay on that list, without your name.
Feed interactions used to rank your feed12 months, then deleted automatically
Activity notifications6 months, then deleted automatically
Sign in with Apple tokenDeleted with your account, after we ask Apple to revoke it
Product analytics events12 months, then deleted automatically. When you delete your account, events in our own database are unlinked from it.
Crash and error reportsUp to 90 days
Data shared with Meta and Reddit for ad measurementKept by them under their own terms and privacy policies; we can't delete it for you, but you can ask them through their privacy settings and tools
Reports and moderation recordsAs long as needed to enforce the Terms and keep the community safe
Purchase and billing recordsKept by Apple, Stripe, RevenueCat and us for as long as tax and accounting law requires (usually up to 7 years)
Emails you send usUp to 3 years after the conversation ends

Your choices

Your rights

Depending on where you live, you may have the right to: access your data and get a copy in a portable format; correct it; delete it; restrict or object to how we use it (including analytics based on legitimate interests); withdraw consent you've given; and not be treated differently for using these rights.

To use any right, email hello@scrollmovies.app from the email on your account (or tell us your username). We may need to confirm it's you. We answer within one month (45 days for US state-law requests), and tell you if we need more time as the law allows. An authorized agent can act for you with your signed permission.

California details

In the last 12 months we collected these categories of personal information, for the purposes described above, and disclosed them only to the service providers listed above: identifiers (email, username, account and install IDs, IP address, device tokens); customer records (name, email); commercial information (membership and purchase history); internet or other electronic network activity (in-app activity, feed interactions and analytics events); audio or visual information (the profile photo you upload); approximate location that providers may derive from IP address; inferences (your movie personality and feed preferences); and sensitive personal information limited to account login credentials and the contents of messages you send to other members. We have not sold personal information. We share these categories with Meta Platforms for cross-context behavioral advertising: identifiers (advertising identifier if you allow tracking, Meta's anonymous app ID, hashed email and account ID for web purchases, IP address), commercial information (trial and membership events), and internet or other electronic network activity (with your consent, the app events listed above and website pages viewed). With your consent (the iOS tracking prompt in the app, the banner on our website), we share with Reddit, Inc. trial and membership events with hashed email, hashed advertising identifier and IP address (app), and website pages viewed and App Store button clicks with cookie identifiers and IP address (website). We don't knowingly sell or share the personal information of anyone under 16.

Do Not Sell or Share My Personal Information

You can opt out of our sharing with Meta and Reddit for advertising at any time, wherever you live:

Children

Scroll Movies is not for children under 13, and we do not knowingly collect personal data from them. If you are under the age at which you can consent to data processing in your country, you need a parent or guardian's permission to use Scroll Movies. If you believe a child under 13 has created an account, email us and we will delete it.

This website and cookies

scrollmovies.app sets no cookies of its own and runs no analytics scripts. Its fonts and images are served from our own domain. It is hosted by Cloudflare, which processes your IP address to deliver pages and protect the site. Pages for a shared title (scrollmovies.app/t/…) load that title's poster and backdrop from TMDB's image servers, and shared profile pages may load the member's profile photo from our storage at Supabase; both receive your IP address. If the page is shown without our server's help, your browser asks our database at Supabase for the title or public profile directly.

Meta and Reddit pixels, only with your consent. When our ad pixels are switched on, a banner asks every visitor whether we may use Meta's and Reddit's pixels to measure our ads. Until you tap Accept, nothing from Meta or Reddit loads and none of their cookies are set. If you accept, the pixels load from Meta and Reddit, set their cookies (such as Meta's _fbp, up to 90 days, and Reddit's _rdt_uuid, up to 90 days), and tell them which of our pages you viewed (including a shared title or personality, but never a member's username or a list) and when you tap an App Store button. We remember your choice in your browser's local storage (key sm-consent), not in a cookie. You can change it with "Cookie settings" at the bottom of any page; a Global Privacy Control signal counts as Decline. For visitors in the EU, EEA and UK our legal basis for the pixels is your consent.

The web checkout opened from the app is run by RevenueCat and Stripe on their own domains, under their own cookie and privacy terms.

Security

Data travels over encrypted connections, access to user data in our database is restricted by row-level security (for example, only the people in a conversation can read its messages, and only a list's members can see it), and only the minimum people and systems can reach it. No system is perfectly secure, but if a breach affects your data we will tell you and the authorities as the law requires.

Changes

If we change this policy in a way that matters, we will tell you in the app or by email before it takes effect. The date at the top always shows the current version.

Contact

Eli Riedel (Scroll Movies) · hello@scrollmovies.app
216 Flint Ridge Rd, Apt 2201, San Marcos, TX 78666, United States