Privacy

Who runs this site

Salvatore Amoroso, Zurich, Switzerland. For privacy questions or a request about your data, write to inquiries@salvatoreamoroso.com. Your email address and message are used to respond to that request.

Browsing and service data

• Hosting and security. Vercel hosts the site and processes request information such as your IP address, page URL, referring page, browser and request time. This supports delivery, troubleshooting and abuse prevention. Page URLs can include search terms and filters.
• Temporary abuse counters. The database stores request counts, expiry times and keys derived from the request network using a secret-keyed hash. It does not store raw IP addresses in these counters. Signed-in voting also uses a counter keyed to the voter hash. Read counters stop applying after one minute; voting counters after ten minutes. Expired rows are removed during subsequent requests, so they may remain stored longer when the site is inactive.
• Vercel Web Analytics. Aggregate traffic statistics include page URLs, referrers, country and device information. It uses no analytics cookies. Vercel derives a visitor hash from the request and discards that visitor session after 24 hours. This site does not attach your Google account or votes to analytics events. See Vercel's analytics privacy details.
• Vercel Speed Insights. Browser performance measurements help identify slow pages and layout shifts. They include the page URL, device information and country, without identifying your account. See Vercel's performance data details.

There is no advertising, sale of visitor data, newsletter, contact form, tracking pixel or embedded video on this site.

Preferences in your browser

The streaming panel uses the country supplied by Vercel from your request, or your browser's language settings, to choose an initial country. If you choose another country, local storage remembers it until you clear this site's browser data. This preference is not saved to an account.

Session storage remembers the filters and number of loaded films in a tab so that returning from a film page restores your browsing position. It normally clears when that tab's browser session ends. These preferences are separate from your votes.

Optional Google sign-in

Signing in lets you vote on a film's verdict, report how it held up in a viewing setting, and agree or disagree with its reason boxes. Google provides your stable account id, display name, email address and profile picture URL. Auth.js keeps these in an encrypted session cookie, rather than in a database account profile. Temporary security cookies also support the sign-in flow. The name and picture identify your account in the interface; the email can be checked against an invitation list when a deployment is in private preview.

The session cookie expires, or you can remove it by signing out. Signing out does not delete votes. Google handles sign-in under its own privacy policy. Planeproof does not request access to your mail, contacts or files.

Votes and retention

A vote is stored with a salted SHA-256 hash of your Google account id. The vote database does not store your Google id, name, email address or picture. This is a pseudonymous identifier: the owner holds the secret salt and could match a known Google account id to its votes. It should not be treated as anonymous data.

Vote records contain your verdict, viewing setting and satisfaction, or agreement with a reason box. They remain until you withdraw them or request deletion. Tapping the selected answer again withdraws that vote and deletes its row. The voter hash can remain after the last vote is withdrawn. Public results are totals; no public page lists individual voters or their answers.

Hosting logs, analytics and performance data follow the providers' retention settings. Contact correspondence is kept as needed to answer and resolve your request. Temporary abuse counters have the expiry and cleanup behavior described above.

Providers and external images

Vercel hosts the app and provides analytics and performance monitoring. Supabase hosts the database containing the catalog, pseudonymous votes and abuse counters. These services can process data outside Switzerland. Their policies explain their handling of that data.

Posters load from IMDb's Amazon-hosted image servers or TMDB, and streaming service logos load from TMDB. These image requests expose your IP address and browser request information to the provider. Poster and streaming-logo requests send no page referrer. The streaming availability list is fetched by Planeproof's server. Google supplies the profile image when you sign in.

Your choices and requests

You can browse signed out, clear browser preferences, sign out, and withdraw votes individually. To ask for access, correction or deletion, contact inquiries@salvatoreamoroso.com. Locating votes requires verifying the same Google account; an email address alone does not identify its stored hash. Some hosting records are held by the provider, so a request may need to be referred to them. You may also contact the Swiss Federal Data Protection and Information Commissioner, or your local data protection authority, about a privacy concern.

Changes

This notice is updated when the site's data handling changes. Last updated October 16, 2026.