Privacy Policy

Last updated 24 October 2026 · Ler em português

This describes exactly what Stream Universe stores about you, why, and how to get rid of it. It is the whole list, not a summary.

Stream Universe is run by Enzo Dall'Agnol Gonçalves, who decides what is done with your data: the controller, in the LGPD's terms. For anything about your data, write to [email protected].

What we store

• Your account. Name, email address, the country and language you use the app in, the profile picture you chose from the actors in the catalogue, when the account was created, and when you accepted the terms of use and which version of them. If you used a coupon or an access code, which one, and any attempts with codes that do not exist, which we limit so that nobody can find a code by guessing. If the account is suspended for breaking the rules, until when.
• Your profile. Your @ and when you last changed it, your bio, who can see your profile, and the favourite titles you choose to show on it.
• Your settings. Which emails you want to get, whether the Home may order titles by your taste, whether reviews with sensitive content show straight away or covered, whether other people may share your reviews to Stories, and whether your use goes into the usage statistics.
• Your services. Which streaming services you tell us you pay for.
• Your lists. The titles you save, the playlists you make, and when you did each, and the titles you picked when you created your account.
• Your ratings and your diary. Your ratings, the titles you liked, the reviews you write and whether they contain spoilers, the titles you marked as watched, on what date, and whether it was a rewatch. Also the outcome of the moderation of each review, and what came in from a Letterboxd import: the rows of the file you sent, with the catalogue title we matched to each one.
• What you do with other people's reviews. The ones you liked and the ones you disliked. The author sees who liked. Nobody else sees a dislike: it only counts towards the order in which reviews appear.
• Who you follow. Who you follow, who follows you, follow requests, and who you have blocked or muted.
• Your notifications. What shows in Activity: who followed you, asked to, or accepted your request, who liked a review of yours, and the titles you were waiting for that landed on a service you pay for.
• Titles you track. The titles you asked us to track, and when we told you they had landed.
• Your reports. What you reported, the reason, what you wrote, and a copy of what was reported.
• Ideas and bug reports. The ideas you post and your votes. A bug report keeps its text, the part of the app, the version, the kind of device and the screenshot, if you attach one. It is only linked to your account if you ask the team to reply. To limit reports to ten a day, the count uses a scrambled code that leads neither to you nor to your reports.
• What you looked up. Titles you have opened, on which days and how many times. Searches you have run, on which days, how many times, and whether they found anything.
• Your answers on the Home. What you mark on a title on the Home or on its page: “Not interested”, “I have seen it”, and your answer to “Good pick?” on Tonight's pick.
• Your answers in the Review Game. Each card you skipped, marked as watched or saved to your Watchlist, and whether you liked a title you marked as watched.
• The emails we send. Which titles went into the arrival emails and, if you turn on the weekly suggestions, which titles we sent you each week.
• Your taste profile. What the Home works out from everything on this list to choose and order titles for you, which title led your Tonight's pick on each day, and when you last opened the Home, to the hour, which we use to decide whose lists we rebuild each day. See “Recommendations”, below.
• The Home's records, from 20 October 2026. What the Home showed you on each visit, how far into each row you looked, which titles you opened and from where (for example the Home, a search, another title or an email), the times you left the app to watch and for which service, the titles you removed from your Watchlist, and which cards the Review Game dealt you.
• Usage statistics, from 1 November 2026. The screens you open and what you do on them, counted by the kind of action, and only these: a page opened (the page's name, never which title or profile); a step of sign-up; the account created, and whether with email, Google or Apple; a search, whether for titles or for people and whether it found anything; a title saved, and in which part of the app; a playlist created; a trip to a service to watch, and from which part of the app; a rating, a heart, a review or a watched mark saved, only that it was saved and never what; a Review Game card, and whether you marked it as watched, saved it or skipped it; the wheel spun, and with how many titles; a Letterboxd import, and how many films and lists it brought; somebody else's review liked or disliked; somebody followed; an idea posted; a bug reported; a plan chosen; early access granted; and a subscription started, cancelled or ended, with its plan. With them go the day and time, the kind of device, the system and the browser (without versions), the country of the connection, the language, whether the account has a plan, the site you came from (only its name, such as google.com) and the link's campaign, when the link is ours and has one. See “Usage statistics”, below.
• Your devices. For each signed-in session: the browser or device, when it signed in and was last used, and the approximate city and country of the connection, as Cloudflare reports it. This is what the devices screen shows, so you can recognise a session and end it. Supabase, which runs sign-in, also records each session's IP address.
• Your subscription. Which plan you are on, whether it is active, when the period ends, and the identifiers Stripe uses for your customer record and subscription.
• Protection against abuse. Each request to the catalogue leaves the time and a scrambled code of the IP address it came from, without your name or your account, so that we can measure and contain excess.
• Waiting list. If you left your email on the waiting list before the app opened: that email, your answers to the form, the language, which form it came from, the country and the browser, and a scrambled code of your IP address, which is only there to stop mass sign-ups. It is kept apart from the account.

We never see or store your card number. Stripe handles payment and holds those details.

Why we store it

To run your account and your subscription, which is the contract between us, and to do the one thing the product exists for: rank what is available by what you already pay for. Your services and your lists are what make that possible. Your ratings, your profile and who you follow exist because they are what you publish and follow in the app. Device details exist to keep your account safe, and reports and moderation to keep the community within the rules.

We do not sell your data. We do not share it with advertisers. We do not build a profile of you for anybody else: the taste profile described below is only for your own Home.

Recommendations

The Home orders what is on your services using what you rated, liked, marked as watched, saved, made a favourite, picked at sign-up or turned down, the titles you track and, from 20 October 2026, also the titles you opened, the times you left the app to watch, the titles you removed from your Watchlist and the titles it showed you that you passed over. We call this your taste profile. It stays with your account and is never sent to anyone: it only reaches you, in the reasons the Home shows and, if you turn on the weekly suggestions, in the email Resend delivers. It is not used for advertising, and no outside model ever sees your profile or your history: OpenAI still reads only the text of the reviews you publish, as explained below.

The legal basis is legitimate interest (LGPD, Article 7, IX): ordering the catalogue by your taste is what you expect from an app that exists to help you choose what to watch. You can object at any time by turning off “Personalise the Home” in Settings, under Privacy. With it off, the Home stops ordering titles by your taste: For you shows the best rated on your services, the “Because you...” rows and new seasons of your series no longer appear, the lists for you give way to the main lists, and Tonight's pick follows our team's order. It only leaves out what you have already watched, rated, liked, saved, made a favourite, picked at sign-up or turned down: nothing moves down for being like something you turned down, or for having been shown without you taking an interest.

In the same place, “Clear what the Home learned” deletes the titles you opened, what the Home showed you and how far you looked, the times you left the app to watch, the titles you removed from your Watchlist, the cards the Review Game dealt, your answers “Not interested”, “I have seen it” and “Good pick?”, the “I did not like it” in the Review Game, and the taste profile built from all of it. Your ratings, your lists, your favourites, the titles you track, your decisions in the Review Game and the titles you picked at sign-up stay, and the Home starts again from them. Your searches stay too.

Turning off “Personalise the Home” does not stop the records: from 20 October 2026 the Home keeps making the records described under “What we store”, so that we know whether it works, and those records follow the period described under “How long we keep it”. If you turn the setting back on, the Home orders titles by your taste again, counting what was recorded while it was off too.

Added to what other members do, and without your name, what you do also counts towards the catalogue's order of relevance and towards the Home's Top 10. This week's top 10 counts how many people opened each title in the seven days before today, without showing who opened it. Those counts do not show anyone what you did. Our team can also show a row on the Home to only some people, whether the setting is on or off: for example, to those who pay for a given service, searched for a given word, opened a given title or signed up with a coupon.

Tonight's pick comes from the titles our team picks (when none of them is left for you, the Home uses a title from your own rows), and the row names and the wording of every reason are written by our team: no machine writes the reasons. To see why a title is there, use “Why this?” on the Home itself: on Tonight's pick on any device and, on a computer, on every title in the rows too. What counts, how much and for how long is explained in How the Home chooses.

Usage statistics

From 1 November 2026, we count how the app is used, to learn how many people it helps, what they use, where they give up and what to improve. Only what is under “Usage statistics”, in “What we store”, goes in. Your name, your email, your @, your IP address, the titles you open, save or rate, what you search for and anything you write never go.

When you are signed in, the statistics go under a pseudonym: a code made from your account with a secret key that only our server holds, which does not lead to your account for anyone without that key. When you are not, they go under a visit code that only exists while the tab is open (see “Cookies”), and nothing links one visit to another. If you sign in during a visit, what was counted in it is joined to your pseudonym.

They are kept by PostHog, which stores them for us on servers in the European Union, and they reach it through our server, never straight from your browser: that is why PostHog does not receive your IP address. We do not use the statistics for advertising, we do not sell them and we do not decide anything about you from them. They are for looking at the app as a whole.

The legal basis is legitimate interest (LGPD, Article 7, IX): understanding how the app is used is necessary to keep it running and to improve it, and what goes in was chosen so that it does not weigh against you. Nothing goes that identifies you directly, nor what you watch, search for or write, and you can say no at any time.

To say no, turn off “Usage statistics” in your account settings, under Privacy. With it off, nothing of your use is counted, on any device where you are signed in, and we ask PostHog to delete what was counted under your pseudonym. If you turn it back on, counting starts again under a new pseudonym. When you are not signed in, or only for this browser, use the button below. And if your browser sends the Global Privacy Control or Do Not Track signal, we count nothing from it.

Do not count this browser

Who else touches it

• Supabase hosts the database your account lives in, runs sign-in, and stores the screenshots attached to bug reports.
• Cloudflare serves the site and the API, holds the waiting list and the codes left by catalogue requests, and counts page visits without cookies and without identifying you.
• GitHub runs, every day, the programs that refresh the catalogue and rebuild the Home's lists in our database.
• Stripe processes payments and holds your payment details.
• Resend sends your account emails, such as confirmation codes and password resets, and the emails you ask for: the notices about titles you were waiting for and, if you turn them on, the weekly suggestions.
• OpenAI reads the text of the reviews you publish, and nothing else, to say whether it breaks the community rules. The review text goes and nothing with it: not your name, not your @, not your email, no identifier of any kind. OpenAI does not use this content to train models.
• PostHog stores the usage statistics, from 1 November 2026, on servers in the European Union (Frankfurt, Germany). It receives from our server what is described under “Usage statistics”, with the pseudonym or the visit code, and nothing else: not your name, not your email, not your IP address. The transfer to the European Union is allowed by the LGPD (Article 33, I), because the ANPD has recognised that it offers an adequate level of protection (Resolution No. 32/2026 of the ANPD's Board of Directors).

Nothing about you is sent to TMDB or to the streaming services. Our catalogue is our own copy, refreshed daily, so searching does not tell anyone else what you searched for.

Posters and photos come straight from TMDB's image servers, and the fonts from Google Fonts. As on any website, your browser asks them for each image and each font, with your connection's IP address and nothing from your account.

How long we keep it

Until you delete your account, with the exceptions below, which are written here so that nothing is quietly purged. Deleting your account removes your profile, your services, your lists, your ratings, your history, your devices, your subscription record and everything else in this policy that belongs to your account, in one go.

• The Home's records. What the Home showed, how far you looked, where you opened each title from, the times you left the app to watch and the cards the Review Game dealt are kept for 180 days. After that, they become counts per title and per day, with nobody in them. The titles you removed from your Watchlist are kept until you delete your account. “Clear what the Home learned” deletes all of it sooner, whenever you like.
• Tonight's pick. Which title led Tonight's pick on your Home each day is kept for 30 days, so that the same title does not lead all the time.
• The usage statistics. They are kept by PostHog for up to a year and then deleted. If you turn off “Usage statistics” or delete your account, we ask PostHog to delete what was counted under your pseudonym, and it deletes it within two weeks. For that, your account's code is noted until the request has been made, and only then deleted. What was counted when you were not signed in leads to nobody and follows the one-year period.
• What stays after you delete your account. The ideas you posted stay on the list, without your name. Bug reports stay, without the link to your account. A report somebody else made about something you published keeps its copy of what was reported, for moderation. The identifiers Stripe uses for your customer record and subscription are kept, so that billing is cancelled at Stripe too. The counts per title and per day and the codes left by catalogue requests have nobody in them. The waiting list is kept apart from the account: to leave it, write to us.

Your rights

Under the LGPD you can ask us to confirm what we hold, correct it, delete it, or hand it to you in a portable form. You can also object to processing and ask who we have shared data with.

You can download a copy of your data, turn off the Home's personalisation, clear what it learned, turn off the usage statistics and delete everything yourself from your account settings. For anything else write to [email protected] and we will answer within fifteen days.

Cookies

Two, and neither is for tracking:

• Session. Keeps you signed in. It is HttpOnly, so no script on the page can read it, and it goes when you sign out.
• Country. Holds your connection's country for a day, only to open the page in the right language.

Your browser also keeps a few things on your own device, outside cookies:

• Until you clear your browser's data. Your language and your account's country; your name and profile picture, so the top of the page can draw without waiting; copies of the screens you opened, such as the Home and your lists, and of your choice about sensitive content, so they appear at once; the links to the streaming services; the answers of a sign-up that has not finished; a one-time code while you sign in; whether you have seen the Review Game's introduction; whether you closed the notice about this policy; and whether you asked for this browser not to be counted in the usage statistics. Your name, your picture and the copies of the screens go when you sign out.
• Only while the tab is open. The email address we sent a code to, until you confirm it; where to return after signing in and the plan you chose; what has already been introduced once on this visit; the titles for over-18s you have already opened, so you are not asked again; which of the day's arrangements of the Home you are seeing; the three Review Game cards the Home showed last; where you opened the last title from, which goes along when that title's page records the open; and the usage statistics' visit code, which changes after half an hour without use.

We run no analytics or advertising cookies. The usage statistics use no cookies: they use the visit code, which goes when the tab closes.

Security

Every row of your data is behind row level security in the database, keyed to your account, so one person's request cannot reach another person's rows. Passwords are hashed and never stored in the clear. All traffic is encrypted in transit.

Children

Stream Universe is not intended for children under 18, and we do not knowingly collect their data.

Changes

If this policy changes we will post the new version here and tell you before it takes effect. This version was published on 24 October 2026, and the usage statistics only start on 1 November 2026.

Contact

Enzo Dall'Agnol Gonçalves · [email protected]

Catalogue data from TMDB. Availability by JustWatch. Service names, logos and artwork belong to their owners.