Privacy Policy

Last updated: July 11, 2026 · Effective date: July 11, 2026

1. Introduction

This Privacy Policy explains how Spotlit ("Spotlit," "we," "us"), the operator of spotlit.tv and related pages (the "Service"), collects, uses, and shares information when you use the Service. Spotlit is a taste-based movie and TV discovery service currently offered as a private, invite-only beta.

By using the Service, you agree to this Policy. If you don't agree, don't use the Service.

2. Information we collect

Information you provide.

• Account information. When you sign in with Google or with an email "magic link," we receive your email address and, from Google sign-in, basic profile information such as your name. We do not receive or store your Google password.
• Taste-profile inputs. As you use the Service, you provide the inputs that make it work: the titles you add and rate, the "traits" you select or write, deal breakers and content filters, saved titles ("My List," "Upcoming"), mood selections, and your natural-language "vibe search" queries.
• Feedback. If you use the in-product feedback widget, we collect the category and message you submit, along with context to help us act on it — the page you were on, your browser and operating system, and a short trail of your recent in-app navigation.
• Communications. If you email us, we keep those messages.

Information collected automatically.

• Usage analytics. We record a small, fixed set of product events to understand how the beta is used — for example, that you signed up, completed onboarding, ran a search, rated a title, or saved something, along with which part of the app the action came from. We also record that a signed-in account was active on a given day. This is intentionally a curated list, not broad clickstream tracking.
• Log and technical data. Our infrastructure providers automatically process technical data such as IP addresses, devices, and browser types, as well as error diagnostics, so the Service can run, stay secure, and recover from bugs.
• Cookies. We use a small number of first-party cookies that are necessary to keep you signed in and to operate the Service. We do not use advertising cookies or third-party ad-tracking. See Section 6.

3. How we use information

We use the information above to:

• Provide the Service — authenticate you, build and store your taste profile, and generate your recommendations, verdicts, and archetypes;
• Operate, maintain, secure, debug, and improve the Service during the beta;
• Respond to your feedback and support requests, and send you service-related emails (such as magic-link sign-in and account notices), and send you optional product updates and digests, which you can unsubscribe from at any time;
• Understand aggregate usage so we can decide what to build and fix;
• Comply with the law and enforce our Terms.

4. AI processing of your inputs

Spotlit's recommendations are generated using Google's Gemini models through the Gemini API. To produce your results, your taste-profile inputs and vibe-search queries (or information derived from them) are sent to Google for processing. We use the paid tier of the Gemini API, under which Google does not use your prompts or the model's responses to train or improve its models, and processes that data under its data-protection terms. We send only what's needed to generate your recommendations.

5. How we share information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

We share information only as follows:

• Service providers ("subprocessors"). We use trusted vendors to run the Service. They process data on our behalf, for the purposes described above:

• Legal and safety. We may disclose information if required by law, to respond to legal process, or to protect the rights, safety, and property of Spotlit, our users, or others.
• Business transfer. If Spotlit is ever involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction. We'll note any change of control here.

6. Cookies and tracking

We use only cookies that are strictly necessary to run the Service — chiefly to keep you signed in. We do not run third-party advertising networks or use cookies to build advertising profiles. Because we don't rely on non-essential tracking, we do not currently show a cookie-consent banner. Your browser can block or delete cookies, but the Service may not function properly without essential ones.

Do Not Track. Some browsers send "Do Not Track" (DNT) signals. We do not respond to DNT signals — but we also do not track you across third-party websites or over time for advertising, so there is no cross-site tracking for such a signal to alter.

7. How long do we keep information

Your account and taste profile persist for the life of your account, so your recommendations improve over time. We keep feedback and analytics for as long as they're useful for running and improving the beta. When you delete your account, we delete or de-identify your personal information within a reasonable period, except where we must retain some data to comply with law, resolve disputes, or enforce our agreements. As a beta service, data may also be reset or lost during development (see the Terms).

8. Your choices and rights

• Access and deletion. You can ask us to see, correct, or delete the personal information associated with your account through the contact form on the Service or by emailing legal at spotlit dot tv. You can stop using the Service at any time.
• Email. Service emails (like sign-in links) are required to use the account. Any optional product emails will include an unsubscribe link.

California residents. Spotlit is currently a small beta that likely falls below the thresholds at which the California Consumer Privacy Act (CCPA/CPRA) applies. Regardless, we honor requests to know, access, correct, or delete your personal information, and we will never discriminate against you for making one. Because we do not sell or share personal information for advertising, there is no "Do Not Sell or Share" action needed. To make a request, use the contact form on the Service or email legal at spotlit dot tv; we'll verify your request against your account before acting on it.

9. Security

We use reasonable measures to protect your information, including access controls and encrypted connections. No system is perfectly secure, and Spotlit is an early-stage beta — we can't guarantee absolute security. Please use a secure email and Google account, since those control access to Spotlit.

10. Children's privacy

While in private beta, the Service is intended only for adults 18 and older (see the Terms), and it is not directed to children under 13. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us information, reach out to us through the contact form on the Service or at legal at spotlit dot tv, and we'll delete it.

11. Where we operate

Spotlit is operated from the United States and intended for U.S. users. If you access it from elsewhere, your information will be processed in the United States, which may have different data protection rules than those in your location.

12. Changes to this Policy

We may update this Policy from time to time. If we make material changes, we'll provide notice (for example, by email or through the Service) and update the "Last updated" date above. Your continued use after an update means you accept it.

13. Contact

Questions or requests about your privacy? Use the contact form on the Service, or email us at legal at spotlit dot tv.