Privacy Policy

Who operates the service

Jared Browne operates Rapid Rater. Contact [email protected] for privacy requests.

Information collected

Account data includes email, username, display name, password hash, policy acceptance, profile privacy choices, optional avatar, ratings, watchlists, preferences, imports, friendships, shares, connected-provider metadata, encrypted integration credentials, support messages, consent choices, security events, and redacted lifecycle history. If you install and use the separate Rapid Rater Companion Chrome extension, found in Chrome's Extensions menu after installation, or use the manual IMDb connection, the encrypted integration credential includes IMDb's at-main authentication cookie. Technical data can include a pseudonymous network-address hash, user agent, session identifiers, and optional consented analytics events.

If you connect Steam, stored Steam Data includes your SteamID64, display name, profile and avatar URLs, connection and synchronization status and timestamps, imported-game count, owned-game AppIDs, names and artwork metadata, total and Windows playtime, icon hashes, and import, last-seen, or disconnection timestamps. Rapid Rater never asks for, receives, or stores your Steam password.

Why information is used

Information is used to provide and secure accounts, synchronize ratings, operate requested integrations, support social features, prevent abuse, respond to requests, improve the product when analytics consent is given, and meet legal obligations. The IMDb authentication credential is used only for the rating operations you request. Steam profile and owned-game data is retrieved only when you ask to connect or rescan Steam, then used to show and maintain your game library. Where applicable, processing relies on contract, consent, legal obligations, and legitimate interests in security and service operation.

Recipients, storage, and transfers

Data is processed by hosting, PostgreSQL, Azure Communication Services, and optional PostHog infrastructure. Information is sent to IMDb, TMDB, JustWatch through TMDB, Steam, and a connected AI provider only as needed for features you choose. Steam receives the authentication and API requests, including your SteamID64, needed to connect or rescan your account.

Rapid Rater stores application data and backups, including stored Steam Data, in United States. Service providers may process data in other countries under their own terms and applicable safeguards, but Rapid Rater will update this policy before changing the identified countries where Steam Data is stored.

Visibility

Profiles are private from discovery and ratings sharing by default. If enabled, signed-in users can find your profile and accepted friends can see ratings according to your choices. Blocking restricts future interaction.

Retention

While an account exists, ordinary product-data removals use tombstones: records are hidden from normal use while redacted lifecycle history is retained. Disconnecting IMDb cryptographically wipes the active credential bytes while retaining only a redacted lifecycle record. Disconnecting Steam stops future retrieval but retains imported Steam data and Rapid Rater ratings; its disconnected account link remains until account deletion. Remove Imported Steam Data hides imported ownership records while preserving the account link and retained lifecycle history, Rapid Rater ratings, and shared game-catalog records. Authenticated account deletion permanently erases the account and its account-linked application-database data, including lifecycle history and security events. Verification links expire after 24 hours and password-reset or email-change links after 60 minutes. Security events are retained for up to 365 days while the account exists. Operational logs and encrypted backups should be retained no longer than 30 days unless a security or legal obligation requires longer.

Your choices and rights

Account settings provide profile controls, IMDb and Steam disconnection, Steam imported-data removal, analytics consent withdrawal, a portable JSON export, and account deletion. You may request access, correction, deletion, or other rights applicable where you live by contacting the privacy address. Authenticated account deletion permanently erases account-linked data and retained history from the application database; encrypted backup copies expire under the retention schedule.

Children

The service is not for children under 13. Do not create an account or submit personal information if you are under 13.