Privacy

Top Five (topfives.co) lets you log the movies, shows, games, books and music you get to each year, rank a top five, and share it. This page explains what we collect to do that. We don't sell your data, and we don't show ads.

What we collect

• Your account. If you sign in, your email address and, with Apple or Google, the basic profile those services share (your name and their ID for you). If you use Apple's “Hide My Email”, we only get the relay address.
• Your profile. Your username, display name, avatar, accent colour, the categories you track, and whether your profile is public.
• What you log. Titles you log or add to your watchlist, when you finished them, your rankings, and a history of ranking changes. Also who you follow.
• Guest use. You can use Top Five without an account. We then create an anonymous account tied to your browser, holding the same kinds of data as above, minus email. If you later sign in, it moves into your account.
• Feedback. If you send a bug report or feedback: your message, the contact details you choose to give, the page you were on, your browser's user agent and the app version.
• Usage and errors. Which features get used (for example “logged a movie” or “created a share card”), page views, device and browser type, approximate location from your IP address, and crash reports.
• Searches. What you type into search is sent to our servers to find titles. We don't store it with your account.

What's public

Your profile and lists are private unless you switch on “Public profile” in Settings. Then anyone with the link can see your username, display name, avatar and top fives. Share cards you create can be seen by anyone you send them to, even if your profile is private.

Who processes it

• Supabase stores the database and handles sign-in.
• Vercel hosts the site and collects anonymous performance and visit statistics.
• PostHog records product usage so we can see what works.
• Sentry receives error reports.
• Apple and Google, if you sign in with them.
• TMDB, IGDB, Google Books, Open Library and Deezer supply titles and cover art. They get your search text from our servers, never your identity.

These services may process data outside your country, including in the United States.

Cookies and local storage

We use cookies and your browser's storage to keep you signed in, remember guest lists, and run the analytics above. There are no advertising cookies.

How long we keep it

Account data stays until you delete it or ask us to. Guest accounts that go unused may be deleted after a period of inactivity. Analytics and error data is kept by those providers for their standard retention periods.

Your choices

In You you can edit your profile, choose what's public, download all your data, and delete your account. Deleting removes your profile, logs, rankings, lists, watchlist and follows straight away. Feedback you've sent is kept without your account attached, and copies of share cards may stay cached where they were posted for a while. If you can't get in, or want something else, such as a correction or objecting to processing, email hello@topfives.co from the address on your account and we'll handle it within 30 days.

Children

Top Five isn't meant for children under 13, and we don't knowingly collect their data.

Changes

If this policy changes in a way that matters, we'll update the date above and tell signed-in users in the app.

Contact

Questions or requests: hello@topfives.co.