Türkçe

Privacy Policy

Last updated: 12 November 2026

Popcorn Pact ("the app", "we") helps you and your friends agree on a movie, a dish, or both ("Dinner & a show"). We collect as little data as we can. There are no accounts with email or passwords, no ads, and we never sell your data.

Who we are and how to reach us

Popcorn Pact is made by an independent developer: the publisher shown on the app's Google Play and App Store listing. That developer is the data controller under the EU/UK GDPR and Türkiye's Personal Data Protection Law (KVKK, no. 6698).

Email: lunaydestek@gmail.com · Website: popcornpact.web.app

The short version

• You get a random, anonymous account. We never ask for your email, phone number or real name.
• What you enter in a game (a display name, your answers, and diet and allergies in food games) is shared with the room. Anyone with your room code or invite link can open the room.
• Rooms are not deleted automatically yet. They stay until you email us to remove them or until we delete old rooms, which we may do from time to time.
• You can delete your data at any time in Settings > Delete my data.
• Usage statistics can be turned off in Settings. We use no advertising id and do no cross-app tracking.

What we store and why

Your anonymous account

The app signs you in with Firebase Authentication as an anonymous user, which creates a random user id. It is not linked to your name, email, phone number or Google/Apple account.

Game rooms

When you start or join a game, a room is stored in Google Cloud Firestore so every phone stays in sync. For each player a room holds:

• the anonymous user id and the display name you typed;
• your answers: for movies, genres to skip, moods, decade and length; for food, cravings, cuisines to skip, diet, allergens to leave out, heat and budget;
• the titles or dishes you marked "already seen" or "never again", so the game leaves them out;
• your swipe votes, emoji reactions and veto, and whether you are the host or have left.

The room also holds the game settings (mode, language, country, chosen streaming services, family-friendly filter, meal setup), the results and the decision, and whether the host has Pact+. Under the room the app can also store:

• Verdicts: the stars and guesses each player gives after the night, keyed by the anonymous id. A player sees the others' verdicts only after sealing their own.
• Shared lists: on "Our lists" nights, a copy of the titles in your "My list", so the room can pick from them.

Who can see a room: anyone with your room code or invite link can open it. Rooms cannot be searched or listed, but share codes only with people you want to play with. Verdicts and shared lists can be read only by players in that room.

Diet and allergies are optional and are used only to filter dishes. The screen where you choose them says, before you pick anything, that what you pick is shared with everyone in the room and saved with the room, and that picking it means you agree to that. If you pick nothing, nothing is shared. Allergen information in the app describes typical recipes and is not medical advice.

Playing in the browser

Friends without the app can play from an invite link in their browser (popcornpact.web.app/play). The browser version gets the same kind of anonymous account and stores the same room data described above: the display name you type and your answers, including diet and allergies in food games. The join screen says so and links to this policy. Your browser keeps the anonymous sign-in and your last answers in its own storage until you clear this site's data. The browser version does not use Firebase Analytics, sets no analytics cookies and has no Delete my data: to have your name and answers removed from a room, email us with the room code.

Your history, memory and list

Stored in Firestore under your anonymous account. Only you can read them:

• Pact history: past results, your star rating, and the display names and anonymous ids of the other players in each game. In the same way, other players' history keeps your display name and anonymous id for games you played together.
• Memory: titles and dishes you mark "seen", "had it lately" or "never again".
• My list: titles you save, including titles copied from Simkl if you link it.
• Weekly rhythm: your streak and pact-night pattern.

You can remove single entries in the app, or everything at once with Delete my data.

Security, fraud prevention and fair use

• Device trial record: so that free trials cannot be claimed again by reinstalling, we store a salted SHA-256 hash of your phone's Android ID (on iPhone, of a random id kept in the Keychain) and how many free trials were used. The original id never leaves your phone.
• Request counters: a daily counter per anonymous user, and a shared monthly counter, limit how often streaming-availability data can be requested.
• Firebase App Check: checks that requests come from the genuine app. It uses Google Play Integrity on Android, Apple App Attest/DeviceCheck on iPhone and Google reCAPTCHA Enterprise in the browser version. These send device and app attestation data to Google or Apple.
• Root/jailbreak check: runs on your phone only and sends nothing. On a modified phone, streaming availability ("where to watch") switches off; nothing else changes.

Purchases (Pact+)

Pact+ subscriptions are paid through Google Play or the Apple App Store. We never see your card or payment details. Subscriptions are managed by RevenueCat, which receives your anonymous user id, your purchase history and the store receipts, so your subscription works and can be restored.

Analytics and diagnostics

• Firebase Analytics records usage events (for example "pact started", "invite shared", "paywall viewed") with a pseudonymous app-instance id. In the EU/EEA, the UK, Switzerland and Türkiye (and whenever your device's region, language or time zone settings point there, or the app can't tell your region) it stays off until you tap "Allow" in the one-time question the app shows; elsewhere it is on by default. Either way you can change it at any time in Settings ("Share anonymous usage"). It is not used for advertising: the advertising signals (ad storage, ad user data, ad personalisation) are always denied, and the advertising id and IDFV are not collected. The browser version does not use it at all.
• Firebase Crashlytics sends crash and error reports: device model, operating system, app version, the error and technical log lines, which can include your anonymous id or a room code. It cannot be turned off in the app, because we need it to fix bugs.
• Firebase Remote Config downloads feature settings using a Firebase installation id.

Simkl (optional)

If you link your Simkl account, the access tokens are kept only in your phone's secure storage (Keychain/Keystore) and are used to read your "plan to watch" list. Those titles are copied into "My list" in our database. Delete my data revokes the tokens at Simkl and removes them from your phone. You can also revoke access on simkl.com.

Kept only on your phone

• Your name, your last answers (including diet and allergies, to prefill the next game), meal and night setup, bedtime, rituals, mode, theme, sound, streaming services and daily game count.
• Reminders. They are scheduled on the phone; there is no push server.
• Home-screen widget content, cached posters and an offline copy of rooms you were in (Delete my data clears it too).
• No backups: on Android the app opts out of Google's app backup and of copying to a new phone, so none of this leaves the phone that way. On iPhone, an iCloud or computer backup of the phone can include the app's data, as for any app.
• Clipboard: once, at the end of onboarding, the app checks your clipboard for a Popcorn Pact invite link, so it can take you straight into that room. Nothing else from the clipboard is kept or sent.
• Play install referrer: on Android the app reads the install referrer from Google Play, on the phone, only to find an invite room code.

Other services

• Google Firebase (Authentication, Firestore, Analytics, Crashlytics, Remote Config, App Check) and RevenueCat process data for us as described above.
• Movie information comes from Simkl, and posters load through the wsrv.nl image proxy. Streaming availability comes from the Streaming Availability API by Movie of the Night. Its requests contain the title id, your country and your chosen services, and the answers are cached in our database without personal data.
• Like any website you load, these catalog and image services see your IP address and which titles are requested. We do not send them your name or answers.
• "Find where to stream" (JustWatch), trailers, recipe searches, maps and delivery apps are plain links that open in your browser or their app. They receive the title or dish name you search for, plus whatever their own site collects. We are not affiliated with them.
• When you share an invite, the link goes through the sharing app you choose.

We do not show ads, do not use the advertising id, and do not sell or rent your data.

Legal bases (GDPR Art. 6 and KVKK Art. 5)

• Providing the app you asked for (contract): anonymous account, rooms, history, lists, Simkl link and purchases.
• Legitimate interests: security and fraud prevention (App Check, device trial record, request counters), crash reports, and, outside the regions below, usage statistics to improve the app. You can object at any time; for statistics, just turn Analytics off in Settings.
• Consent (GDPR Art. 6(1)(a), KVKK Art. 5(1)): usage statistics (Firebase Analytics) in the EU/EEA, the UK, Switzerland and Türkiye. You can withdraw it at any time in Settings; withdrawing doesn't affect statistics sent before.
• Explicit consent (GDPR Art. 9(2)(a), KVKK Art. 6): diet and allergy answers, which can reveal health or religious information. They are always optional. You give this consent by picking them on the screen that tells you they are shared with the room and saved with it; picking none means no consent and nothing is shared. To withdraw, leave them empty in your next games and use Delete my data (in the browser, email us with the room code) to remove them from past rooms.
• Legal obligations: purchase and tax records kept by the stores and RevenueCat.

How long we keep data

Room data (rooms, verdicts, shared lists) and request counters have no automatic deletion yet. We may delete old rooms and counters from time to time, but we do not promise a schedule. To have them removed, email us at lunaydestek@gmail.com with a room code or invite link, and we will delete them.

If you uninstall the app without using Delete my data, your history stays on our servers under an anonymous id that nobody can sign in to anymore. Use Delete my data before you uninstall, or email us.

How to delete your data

Open Settings > Delete my data. This:

• deletes your history (with the ratings saved in it), memory, My list and weekly rhythm;
• in every room this phone knows you were in (however old) and every room in your history, blanks your name and removes your answers (diet and allergies included), your "never again" list, your votes, your reactions and your shared list;
• revokes and removes the Simkl link, signs you out of RevenueCat, cancels reminders, resets the Analytics app-instance id, and clears the settings and the offline copy of rooms on your phone;
• deletes your anonymous account and starts the app fresh.

If your history or a room can't be reached (for example, you are offline), the deletion stops before deleting anything else and asks you to try again, so no room is lost. If a room refuses the change, the app finishes the deletion and then shows that room's code: email it to us and we will remove your name and answers there.

What stays, and why:

• Verdict stars and guesses, your anonymous id in a room's player list, and veto markers stay until the room is deleted (email us and we will delete it), because changing them would spoil the game for the others.
• Rooms this phone does not know about (for example, joined from another phone) stay until they are deleted; email us with the room code and we will delete them.
• Other players' history can still show your display name and anonymous id, because it belongs to their account.
• The device trial record, today's free-game count and your Analytics on/off choice stay, so deleting data cannot reset trials or turn Analytics back on.
• Crash reports and Analytics data already sent are kept for the periods above.
• Pact+ is not cancelled. Cancel it in Google Play or the App Store. RevenueCat and the stores keep the purchase record.

You can also email lunaydestek@gmail.com to ask us to delete data the app cannot reach, such as your RevenueCat record or your name in other players' history. We do not know who you are, so include details that help us find it, such as a room code or your Google Play / App Store order number.

Your rights

Under the GDPR and KVKK (Art. 11) you can ask to access, correct, delete or export your data, to restrict or object to its use, and to withdraw consent at any time. Email us; we answer within 30 days. You can also complain to your local data protection authority, or in Türkiye to the Personal Data Protection Board (KVKK Kurulu, kvkk.gov.tr).

International transfers

Google (Firebase) and RevenueCat can process data in the United States and other countries. These transfers are covered by the European Commission's Standard Contractual Clauses in the providers' data processing terms and, for Türkiye, by the safeguards in KVKK Art. 9.

Children

Popcorn Pact is meant for people aged 13 and over and is not directed at children under 13. If you think a child under 13 has used the app, email us and we will delete the data we can find.

Changes

When we change this policy, we update this page and the "Last updated" date.