Legal

Privacy Policy

Effective September 26, 2026

This Policy explains how CTF Designs, LLC, the owner and operator of ineedsomethingtowatch.com (“we,” “us,” or the “Site”), handles information when you use the TV recommendation service.

Information we handle

• Your request. We process the shows, genres, moods, and streaming preferences you type so the service can generate recommendations. Please do not include sensitive personal information.
• Your account and library. If you create an account, Supabase processes your email address and authentication data. While signed in, we store your recommendation searches and results, favorites, watchlist, watched-episode progress, plan status, and any request to join the premium waitlist.
• Technical information. Our hosting provider may process IP address, browser, device, request time, and diagnostic information needed to deliver and secure the Site.
• Daily quota. The server converts your IP address into a salted one-way hash to enforce the ten-search daily limit. The quota record contains the current UTC date and count and is overwritten on a later day; we do not store the plain IP address in that record.
• Analytics. When configured, PostHog receives cookieless pageview and product events, including selected language, whether a recommendation succeeded, response time, model name, token counts, region code, and remaining quota. We do not intentionally send your typed request or recommendation text to PostHog.
• Preferences. Your language choice is stored locally in your browser.

How we use information

We use information to provide and localize recommendations, show likely streaming availability, measure reliability and cost, enforce limits, prevent abuse, troubleshoot errors, and improve the Site. We do not sell personal information or use it for targeted advertising.

Service providers

Your request is sent through Netlify’s AI Gateway to OpenAI to generate the three recommendations. Netlify hosts the Site and functions. Supabase provides account authentication and stores signed-in library data. PostHog provides privacy-focused analytics when enabled. These providers may process information under their own terms and privacy notices. Streaming links may lead to third-party sites such as JustWatch; their practices apply after you leave our Site.

Retention and security

For visitors who are not signed in, we do not intentionally keep recommendation prompts in our own database. For signed-in viewers, searches and results are saved to their private library until deleted or the account is removed. Favorites, watchlists, episode progress, account records, and premium-interest records remain while needed to provide those features or meet legal obligations. Providers may retain limited metadata or logs for security, operations, billing, and legal compliance. We use reasonable safeguards, including database row-level access controls, but no online service is completely secure.

Your choices and rights

We respect browser Do Not Track for PostHog analytics. You may block analytics through your browser or privacy tools and clear the saved language preference through browser storage controls. Depending on where you live, you may have rights to access, correct, delete, restrict, or object to processing of personal information. Contact us to make a request. We may need to verify it.

Children

The Site is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

International use and changes

Information may be processed in countries other than your own. We may update this Policy as the service changes. The effective date above shows the latest revision.

Contact

Privacy questions or requests: roman@ctfdesigns.com.