Privacy Policy

Nitrate is a film diary. This page explains what data it keeps about you and why, in plain language. The short version: we collect only what the app needs to work, we don't track you, and we don't sell anything to anyone.

What we collect

Everything Nitrate stores about you falls into three buckets:

Your account. Username, email address, and a bcrypt hash of your password (we never store the password itself). Optional profile fields if you fill them in: display name, bio, location text, a website link, and avatar/banner images you upload.

What you post.Diary entries, ratings, reactions, reviews, tags, comments, lists, your watchlist, who you follow, and places you tag on the map. That's the product — it exists because you typed it in.

Plumbing. A session cookie so you stay logged in (httpOnly, expires after 30 days), and your IP address, used only for rate limiting (to slow down password-guessing and spam). Rate-limit counters live in memory and are never written to the database — your IP is not kept in any permanent record.

That's the whole list. There are no analytics scripts, no tracking pixels, no ad targeting, no fingerprinting, and no data brokers. We don't sell or rent your data to anyone, ever.

Who else sees anything

Nitrate runs on a small number of services, each of which sees only what it needs:

OMDb supplies film metadata (titles, posters, cast). Your searches for films pass through our server to OMDb; your account details never do.

Resendsends transactional email — currently just password resets. It sees your email address and the reset message, because that's what sending an email requires.

Tigris (via Fly.io)stores avatar and banner images you upload. The images are public (they're shown on your profile); nothing else about your account is in the bucket.

OpenStreetMap / Nominatimpowers place search and map tiles for the Places feature. Your place-search text goes to Nominatim through our server; your identity doesn't.

The app and its database are hosted on Fly.io, so data lives on Fly's infrastructure like any hosted service.

How long things are kept

Real numbers, not "as long as necessary": see Your Data for the full retention table. The headlines: password-reset links die after 1 hour and a single use; sessions expire after 30 days; a suspended account's data is kept but hidden while the situation is resolved; and when you delete your account, it vanishes from the site immediately and the underlying data is permanently erased 30 days later. You can download a complete copy of your data from Settings at any time, no reason needed.

Where this is operated from

Nitrate is operated from Saskatchewan, Canada, and any dispute about the service is governed by the laws of Saskatchewan and Canada. If you use Nitrate from somewhere else, your local privacy law may still give you rights regardless of that sentence — that's how privacy law works.

One honest note: this page is a plain-language summary written by the site's operator, not legal advice, and it should be reviewed by an actual lawyer before anyone leans on it — especially once users outside Canada are involved.

Questions

Ask the operator directly — the contact address is on the site's domain. If you believe there's a security problem, please report it privately rather than posting it publicly.