Privacy Policy

This Privacy Policy explains what information TopTen collects, how we use it, and the choices you have. By using TopTen you agree to this policy and our Terms of Service.

1. What we collect

• Account information: your email address, password (handled by Google Firebase Authentication; we never see or store your password), and whether your email is verified.
• Profile information: your name, username, bio, and profile photo link. These are public.
• Content you post: lists and their items, notes, links and photos; comments; emoji reactions; and the visibility you choose for each list.
• Connections: who you follow, friend requests, and friendships. If you join through someone's invite link, we record who invited you so we can send them a friend request for you.
• Usage data: we use Vercel Web Analytics to count page views and visitors. It is cookieless and doesn't track you across other websites; it records things like the page visited, referring site, country, browser, and device type in aggregate.
• Stored on your device: your browser keeps your sign-in session and a few small settings (for example, whether seasonal decorations are turned off, or an invite link you opened) in local storage.
• Search lookups: when you search for movies or TV shows while making a list, your search text is sent to The Movie Database (TMDB) to suggest titles.

2. How we use it

• To run TopTen: create your account, verify your email, show your lists and profile to the people you choose, and power follows, friends, comments, and reactions.
• To show link previews and search-engine listings for public lists and profiles.
• To send account emails, such as email verification links. We don't send marketing email.
• To understand how the site is used, keep it secure, prevent abuse, and fix problems.

3. We don't sell your data

We don't sell or rent your personal information, and we don't share it for targeted advertising.

4. Who we share it with

• Other people, as you choose: public content can be seen by anyone (including search engines); friends-only content by your accepted friends; private content by you only. Your profile and username are public.
• Service providers that run TopTen for us: Google Firebase (sign-in, database, and photo storage, operated by Google) and Vercel (website hosting and analytics). TMDB receives movie and TV search text, as described above.
• Legal reasons: if required by law, or to protect the rights, safety, and security of TopTen, our users, or others.

5. Affiliate and outside links

Some shopping links (such as gift ideas) may be affiliate links, and links in lists can lead to other websites. When you click them you leave TopTen, and the other site's own privacy policy applies. Stores may use cookies to credit a referral to TopTen.

6. Your choices and rights

• Edit your profile, change who can see each list, and delete your lists and comments at any time.
• Unfollow people, cancel or decline friend requests, and unfriend at any time.
• Delete your account yourself at any time: go to Edit profile, then “Delete my account.” This permanently deletes your lists and photos, your comments and reactions, your follows, friend requests and friendships, your profile and username, and your sign-in account. If anything is left behind, or you can't sign in, contact us using our contact form and we'll remove it. Some information may remain for a short time in backups.
• Depending on where you live, you may have other rights, such as asking for a copy of your data. Contact us using our contact form to make a request.

7. How long we keep it

We keep your information while your account is active. Content you delete is removed from TopTen; backups may keep it briefly.

8. Security

We use Firebase security rules so only the right people can read or change each piece of data, and all connections use HTTPS. No online service is perfectly secure, so please use a strong, unique password.

9. Children

TopTen is not for children under 13, and we don't knowingly collect personal information from them. If you believe a child under 13 has created an account, contact us using our contact form and we'll delete it.

10. Changes to this policy

We may update this policy from time to time. We'll change the effective date above and, for important changes, may let you know on the site.

11. Contact

Questions about privacy? Contact us using our contact form.