Privacy Policy

Last updated: October 8, 2026

This Privacy Policy explains how Red Reactions handles information in connection with redreactions.com and the Red Reactions mobile app. Red Reactions operates the website and app; no registered legal entity is represented by this policy.

Contact

For privacy questions or requests, email privacy@redreactions.com.

Information you provide

If you email Red Reactions, we receive the information included in your message, such as your email address and the details you choose to provide. We use it to respond to and manage the correspondence.

Newsletter subscriptions

If you actively subscribe to Red Reactions Weekly, we send your email address to Resend to maintain the newsletter contact and subscription segment. We do not request a name, phone number, date of birth, interests or a tracking profile for newsletter signup. Resend processes the contact and unsubscribe status needed to send the newsletter.

You can unsubscribe using the link included in a newsletter. To request deletion or help with a subscription, email privacy@redreactions.com.

Technical information

When you visit the site, technical information may be processed automatically, including your IP address, browser and device information, request and security logs, and cookie or local-storage identifiers where applicable.

Reader ratings

On selected reviews, you can give the reviewed movie, series, episode or game an integer score from 1 to 10. Red Reactions stores the rating target, your score, timestamps and a non-reversible keyed hash of a random browser identifier. The application does not store your raw identifier, email address, name, full user agent or precise location with a rating.

The random identifier is held for up to one year in a Secure, HttpOnly, SameSite cookie named __Host-rr_rating_id. It is used only to keep one active rating per browser and reviewed item and to let that browser change its rating. Ratings are anonymous on a best-effort basis, not verified-user votes: clearing browser data, changing browser or using another device can create another identity.

Rating records may be retained while the reviewed item remains available and the rating feature is operated. The browser identifier expires after one year unless refreshed by a later rating. Red Reactions may remove ratings or disable a target when needed for abuse response, data integrity or legal obligations.

Mobile app accounts and activity

The mobile app stores an account email and authentication data, public profile fields (username, display name, bio and avatar URL), selected interests, private tracking and watched history, ratings, reactions, comments and replies, likes, follows, lists, blocks, reports, notification preferences including editorial choices, in-app notifications and device push tokens. It records the version and time of your Terms and Community Guidelines acceptance. Public profiles and lists you explicitly make public can be seen by other members. Comments and replies are visible in their communities. Eligible rating, reaction and public-list activity is shared with followers only if you turn on activity sharing; it is off by default. Tracking, email, blocks, reports and push tokens are not displayed on public profiles.

Supabase provides account authentication, the app database, server functions and scheduled processing. Search terms and requested title identifiers are processed by the authenticated media function and TMDB to return movie and television metadata. TMDB's image service receives image requests. Providers can process request/IP and other operational metadata to deliver and secure those services; search history is not a public profile feature.

Expo provides app builds and push delivery. If you enable push, the device's Expo push token is stored and used for the notification categories you select. Android delivery uses Google Firebase Cloud Messaging and Firebase Installations, which can automatically create installation identifiers and process default operational/device and delivery metadata. These installation identifiers are distinct from your account ID and are not advertising IDs. Notification permission is requested when you choose a push option, not during onboarding.

If you use an externally hosted HTTPS avatar image, the selected image host receives requests when that image is loaded, which can include IP address and ordinary network/device request information. Do not put private tokens or sensitive information in an avatar URL.

App members can change notification and activity choices in Settings, including stories about titles they follow. Editorial previews come from Red Reactions; opening Read full story uses the separate website and its browser privacy/consent behavior. The native app has no advertising SDK, native ads, purchases or subscriptions. Website reader ratings use a separate anonymous browser mechanism and are not linked to mobile app accounts.

App account deletion

In the app, open Profile → Settings → Account → Delete account. The flow verifies your current password and removes the authentication account and dependent app data, including profile, tracking/history, interests and policy acceptance, ratings/reactions, comments and dependent reply threads, lists, follows, blocks/reports, notification preferences/history and the app database's push tokens.

You can also request app account and data deletion on the website without reinstalling or signing in to the app. The request uses email and manual ownership verification; do not send your password. Limited moderation audit records, support correspondence or provider security/delivery logs may remain where reasonably needed for safety, abuse prevention, handling the request or legal obligations. Provider retention follows the relevant service's practices; deleting the app account does not itself reset every Firebase installation identifier on your device. Ask about related records in your request.

Cloudflare

Cloudflare Pages provides hosting, network delivery and security infrastructure for this website. Cloudflare may process technical request data needed to deliver and protect the site.

Google AdSense and advertising

The Red Reactions website uses Google AdSense; the native app has no ads. Google and advertising partners may use cookies or similar technologies on the website for advertising, measurement, fraud prevention and, where permitted, personalization. Third-party vendors, including Google, may use cookies to serve ads based on visits to this and/or other websites. Google provides advertising and privacy controls through its own services and account settings.

Google Analytics

Red Reactions uses Google Analytics 4 only after you explicitly allow analytics. Before consent, and after rejection, the website does not load its Analytics tag or send Analytics measurements. Once allowed, Google receives page visits, technical browser/device information and ordinary network information, which can support approximate geographic reporting. We send published page URLs and titles; URL queries and fragments, external referrer paths, form contents, newsletter addresses, app accounts and reader-rating identifiers are not sent to Analytics. Google signals and advertising personalization are disabled for this integration. Google processes information under its own privacy policies.

Adsterra banner advertising

Red Reactions offers an optional 300×250 Adsterra banner within articles. When enabled, the banner requires a separate affirmative Adsterra choice in every region, including before any request to its script provider. Rejecting ads does not restrict access to articles. Global Privacy Control blocks Adsterra even if a previous choice allowed it.

After you allow the banner, ad requests disclose technical information such as IP address and browser details to the provider. Advertising technologies may use cookies or similar identifiers for ad delivery, measurement and fraud prevention. Adsterra's Privacy Policy describes its technical data processing, service providers, international transfers, retention and privacy rights. Its Cookies Policy describes technologies on Adsterra's own website; it is not a verified inventory of cookies for this banner.

The approved script provider is bancadeltempoidea.org, placement 31613527. The banner is isolated in a restricted frame. Red Reactions does not send app accounts, newsletter addresses or reader-rating identifiers to this banner. No exact advertising-cookie names or retention periods are asserted without a verified inventory for this placement.

Consent choices

Allow or reject optional analytics in the on-page choice. To change or withdraw it, use Analytics consent under Cookie Settings in the footer to open the analytics settings. Withdrawal destroys the active Analytics context, stops future measurements and clears this site's accessible Analytics cookies. Analytics choices are separate from Google advertising and Adsterra; allowing analytics never grants advertising consent. Where Google presents an advertising consent-management interface, its choices apply to Google's advertising services. Those choices do not authorize Analytics or Adsterra. The initial article choice disappears after you allow or reject Adsterra. To change or withdraw it, follow Adsterra consent under Cookie Settings in the footer to the Cookie Policy. Withdrawal removes active banner frames and prevents new banner requests. Requests already sent cannot be undone; third-party cookies already stored may need to be cleared in your browser.

YouTube embeds

Some articles include embedded YouTube videos. The site uses youtube-nocookie.com privacy-enhanced embeds. External content may still communicate with YouTube or Google when it is loaded or interacted with.

Why information is used

Information may be used to operate and secure the website and app, provide app features and chosen notifications, moderate community content, maintain reader-rating integrity, respond to correspondence, provide advertising and measurement on the website where applicable, and comply with legal obligations.

Legal grounds

Depending on applicable law and the context, processing may be based on consent where required, legitimate interests where applicable, responding to user requests, or legal obligations. No single legal basis necessarily applies in every jurisdiction or situation.

Sharing and international processing

Relevant service providers, including Google, Cloudflare, Resend, Supabase, Expo, TMDB and, if you allow the enabled banner, Adsterra, may process information as described above. These providers may process data in multiple countries, subject to safeguards and policies applicable to their services.

Retention

Information is retained only for as long as reasonably necessary for the relevant purpose, subject to third-party provider policies and legal obligations.

Your rights

Depending on applicable law, you may have rights to request access, correction, deletion, restriction or objection, withdraw consent where applicable, or complain to the appropriate data protection authority. Contact us to make a request.

Changes to this policy

We may update this policy to reflect changes to the website, app or applicable practices. The latest version will be posted on this page.