Last updated 5 October 2026

Privacy Policy

MUVIZ is run by CamelCase Labs Inc., Canada. This page says what MUVIZ keeps about you, why, where, and for how long. Questions or requests:info@camelcaselabs.app.

What we keep

What you track: the movies and episodes you log (with the dates you give, or "date unknown"), rewatches, ratings, favorites, your watchlist, shows you stop, your time zone (so "today" is your today), and the country you pick for Where to watch, if you pick one. We also keep a summary of recent activity (for example "watched 3 episodes of season 2") to show to the people you approve.
Lists: the lists you make, their names, descriptions, titles and notes. A Public list is shown to the people you approve, on your profile, and, with "Show this list's updates" on, in their feed (when you made it Public and how many titles you added each day).
Shared lists: a list you share, or join, is seen only by the people on it. They see who added each title and its note, and, for each title on that list, whether each of them has watched it (from what they logged, never "Not sure how far") and their rating. Someone who blocks you, or whom you block, sees none of that from you, and you none from them. If a member deletes their account, the titles they added stay on the list as added by "a former member" and their notes are deleted. If the owner deletes their account, the member who joined first becomes the owner.
As a guest: a random identifier in a cookie on this browser, tied to what you track. No name or email.
With an account: your email address, a scrambled form of your password (never the password itself), your handle, display name and bio, and when you accepted these terms.
Signing in with Google: Google tells us your name, your email address and an identifier for your Google account, so we know it's you next time. We don't keep your Google profile photo or any access to your Google account (no tokens), and we never see your Google password.
People: who you follow, who follows you, follow requests, and who you've blocked.
Alerts: if you turn them on, your browser's push address and keys, a short device label like "Chrome on Mac", which alert types you want, which episodes you've already been alerted about (so you never get one twice), and, for each shared list, whether you muted it and when your adds to it last sent an alert.
Sign-in sessions: the IP address and browser type each session started from, to help keep your account secure.
App opens: the days (not times) you opened MUVIZ, as a member or a guest, so we can see how the trial is going and when a guest has gone unused. Not kept in a browser where "Share usage data" is off (the switch is per browser). Deleted after 13 months.
Safety: reports you make (the reason only; who reported is visible to the operator alone), reports about you, and the operator's moderation actions. A report about a list keeps a copy of the list's name and description as they were when it was reported, even after the list or the account is deleted. Your IP address and, when signing in, your email are counted briefly (up to an hour) to limit abuse.
On your device: the sign-in cookie, your "Share usage data" choice, a note that you've visited before, and a saved copy of your Up Next page so it opens offline.

Usage data and error reports

Usage data (PostHog, hosted in the EU): counts of what's used, like "a title was logged", "a search ran" or "the app was opened", with your MUVIZ identifier and the page's address without anything after the path. Never your searches, the titles you log, your ratings, your handle, who you follow, block or report, or your IP address. You can turn it off in Settings under "Share usage data".
Error reports (Sentry, hosted in the EU): when something breaks, a report of what failed, with addresses and identifying details removed. These stay on even with usage data off, so we can fix problems.
No advertising, no ad tracking, and no tracking across other sites.

Who else is involved

The server runs on Hetzner Cloud in the EU. Encrypted backups are kept in Cloudflare R2, with 7 days of history.
Movie and show details and images come from TMDB, and Where to watch from JustWatch through TMDB. Images and service logos load straight from TMDB's servers, so TMDB sees your IP address when they load.
Trailers play from YouTube in its reduced-tracking mode, and nothing loads from YouTube until you press Play trailer.
Alerts are delivered by your browser maker's push service (for example Apple, Google or Mozilla). They carry only what the alert says: a show's name, or for follows and shared lists a person's name or handle and the list's name.
We don't sell or share your data with anyone else.

How long we keep it

Deleting your account (Settings → Account → Delete account) hides your profile from everyone at once and signs out every device. For 30 days you can sign in and restore it. After that, everything above is deleted: your history, ratings, lists, activity, follows, requests, blocks, alerts, sessions and account, and we ask PostHog to delete your usage data.
Your handle stays reserved for 90 days after you ask to delete, so nobody can pose as you straight away.
Reports you made stay, without your name. If your account was reported or moderated, those records and the handle you had are kept, so repeated abuse can be recognized.
Guest data is tied to that browser. Clearing its cookies, or switching browsers, loses it. A guest unused for 12 months is deleted. History from this browser that you didn't add to your account after signing in is deleted after 30 days.
Deleted data leaves the backups within 7 days. If we ever restore a backup, we delete again every account deleted since, before the app comes back. For that, we keep a list of deleted accounts' internal IDs (random codes, with no name, email or handle) next to the backups.

Your rights

You can ask to see, correct, export or delete your data at info@camelcaselabs.app. Most of it you can already see in your library and settings, and you can delete your account yourself.