Last updated August 20, 2026
Spookee is a horror film tracker run as a personal project. This page explains, in plain terms, what it knows about you and what happens to it. You can browse the whole site without an account. You need one only to rate, review, or keep a watchlist.
We collect what you type in and what your account needs to work. We do not sell it, we do not run ads, and we do not track you around the internet. If your profile is public, the things you write are public. You can delete your account whenever you want, and it is a real deletion, not a deactivation.
When you sign up, we get your email address and either a password, which is stored scrambled and is never visible to us, or the fact that you used Google. Signing in with Google gives us your email address, your name, your profile picture, and the account identifier Google uses to recognize you again. We do not ask Google for anything else, and we never get access to your Gmail, your contacts, or anything else in your account.
On your profile, we store your username, plus a biography and a picture if you add them, and the date you joined.
As you use the site, we store what you record: ratings, reviews, whether you flagged a review for spoilers, the dates you watched things, your watchlist, whether your profile is public, and which rating source you like to see on posters.
If you send a bug report, we store your message, an email address if you give one, and a screenshot if you attach one. We also capture which page you were on, what browser you are using, and how big your window was, because otherwise most bugs cannot be found. If you are signed in, the report is linked to your account.
Our host keeps ordinary server logs, including IP addresses, to keep the site up and to stop abuse.
Signing up sends you a confirmation email, and that is the only email the site sends you. It goes through Supabase, which handles sign-in for us.
There is currently no way to reset a forgotten password by yourself. If you get locked out, write to us at the address at the bottom of this page.
If your profile is public, which is the default, anyone can see your username, picture, biography, join date, reviews, ratings, watch dates, and watchlist, including people who are not logged in. Search engines can find it too.
You can switch your profile to private in settings. That hides your reviews and watchlist from everyone but you. Your username and picture stay visible, because that is how a profile is addressed, and your biography stays readable through the database even though the page stops showing it. So treat a biography as public whatever your setting says.
We set cookies that keep you signed in. That is all they do, and an account cannot work without them.
We also save one date in your browser to remember when you last read the Latest Updates page, so the notification dot stops nagging you. It never leaves your device.
There is no analytics and there are no advertising cookies today. If we add analytics, we will say so here and on the Latest Updates page before we turn it on.
Three companies touch anything of yours, and none of them get it to use for their own ends:
Film data, posters, and the IMDb, Rotten Tomatoes, and Metacritic scores are fetched by our servers on a schedule, not by your browser, so reading a film page does not tell any of them that you were here. Profile pictures are the one exception: those load straight from Google or from Supabase, so those two see a request when a picture appears on your screen.
We would hand something over if the law compelled it, or if it were needed to deal with abuse or protect someone.
Settings has a delete button. It removes your profile, reviews, ratings, watch dates, watchlist, and any picture you uploaded, straight away. It is not a deactivation, and there is nothing to undo it.
One thing deliberately survives it, and we would rather say so than let you find out. Bug reports you sent are kept, with your account unlinked from them, so a problem you reported does not vanish along with the account. That includes any screenshot you attached. Write to us if you want one removed.
Database backups are kept on a rolling basis, so a copy of a deleted record can survive there until the backup it sits in is rotated out.
The database is what enforces your privacy setting: your reviews and watchlist can only be read by you unless your profile is public. Your profile row itself, meaning your username, picture, and biography, is readable either way.
Bug-report screenshots sit in a private store and are only ever shown through links that stop working after an hour. Traffic to the site is encrypted.
That said, this is a project maintained by one person, not a company with a security team. Please do not put anything you would be upset to lose or to see in a review, a biography, or a screenshot.
You need to be at least 13 to have an account. We do not ask your age when you sign up, so nothing currently stops a younger person from creating one. If you tell us about an account belonging to someone under 13, we will delete it.
Write to contact@spookee.com. If you want to know what we hold about you, want it corrected, or want it gone, that is the address, and we will get back to you.
If this page changes in a way that matters, we will note it on the Latest Updates page and change the date at the top here.