Skip to content

Privacy Policy

Last updated: September 14, 2026

Who is responsible

TheAttReviews is operated by Gordon Casey, based in the United Kingdom, who is responsible for personal information used to provide this website. Email theattreviews@gmail.com for privacy questions or requests about your data. You can read the public site without an account; registration is optional.

Information and purposes

  • Accounts: Supabase handles your email address, account identifier and authentication information to register you, sign you in and support password recovery.
  • Private watchlists: we save the shows, movies and books you select, their status, progress and private notes against your account. Your personal list is not published and does not change the editor's public lists or ELO rankings. Authorised administration may be needed for maintenance or support.
  • Messages: we use the name, email and message you send through the contact form or by email to respond and handle support or corrections. Do not send passwords or unnecessary sensitive information.
  • Technical data: providers process information such as IP addresses, browser/device information, requested pages and request times for delivery, security and usage measurement.
  • Preferences: browser storage remembers sign-in, theme and consent choices.

Legal bases

Where a legal basis is required, account and watchlist processing provides the service you request. Necessary support and security processing serves legitimate interests in responding to enquiries, maintaining reliability and preventing abuse. Optional analytics or advertising processing relies on consent where required. Information may also be processed to meet legal obligations.

Providers and advertising

  • Supabase: authentication, database and media storage.
  • Vercel: website hosting and Web Analytics. Web Analytics does not use analytics cookies but does process technical usage information.
  • Google Analytics: website usage measurement. Google tags communicate technical information to Google.
  • Google AdSense and participating partners: advertising delivery, personalisation, measurement and fraud prevention, where available. These services may use cookies, web beacons, IP addresses and other identifiers. The consent message describes participating vendors and purposes.
  • Email providers: delivery and storage of messages sent to our contact inbox.

We do not sell your account information or private watchlist. Read how Google uses information from sites using its services, and the privacy notices for Supabase, Vercel and Google.

Third-party vendors, including Google, use advertising cookies to serve ads based on your previous visits to this website and other websites, where permitted by your consent choices and applicable requirements. These cookies allow Google and its partners to personalise advertising. You can opt out of personalised Google advertising through Google My Ad Center, and manage participating third-party vendors' personalised advertising through YourAdChoices. These preferences are separate from this website's cookie consent settings.

Consent and browser storage

Google Consent Mode is configured to deny advertising and analytics storage by default for the EEA, UK and Switzerland. Where the consent message is shown, you can accept, refuse or manage the offered purposes. Merely visiting the website does not constitute consent to optional storage.

Denied storage does not mean no network communication: Google can receive cookieless signals and limited advertising may be available. Necessary service traffic and Vercel's cookie-free measurement are separate. See our Cookie Policy for changing a choice.

Retention and deletion

We keep account and list information while needed to provide your account service. You can edit or remove individual watchlist entries. To request access, a copy of your information or deletion of your account and associated private lists, email us from your registered address. This is a request-based process, not an automated delete-account button. We may verify account ownership; never send your password.

Correspondence is retained while needed to resolve the enquiry or a related dispute. Necessary security or legal records may be retained longer where justified. Deleted information may remain in restricted backups until the provider's backup cycle expires. Retention depends on purpose, continuing need and applicable obligations rather than one period for all records.

International processing and security

Providers operate internationally and may process information outside your country. Their privacy notices and data-processing terms describe the relevant locations and transfer safeguards. Contact us for information about the arrangements affecting your data.

Authentication and access controls protect private records. No online service can guarantee absolute security. Keep your sign-in details confidential and tell us if you suspect unauthorised access.

Your rights

Depending on applicable law, you may request access, correction, deletion, restriction or a portable copy of your information. You may object to processing based on legitimate interests and withdraw consent where it is the basis for processing. Withdrawal does not affect earlier lawful processing. Contact the email above to make a request.

You may complain to your local data-protection authority; UK visitors can contact the Information Commissioner's Office. We do not use your private watchlist for automated decisions with legal or similarly significant effects on you.

Updates

We update this page when our practices change and show the revision date above. Material changes affecting account information will be brought to users' attention as required.