Privacy Policy

Next Showing helps you decide which streaming services are worth paying for each month. To do that, it stores what you choose to tell it — the services you pay for and the shows, movies, and people you follow. We don't run ads, we don't sell your data, we don't track you around the web, and we never connect to your streaming accounts. This page explains the details in plain English.

Your account. Sign-in is handled by Clerk, our authentication provider. Through them we receive your name, email address, and profile photo. If you use a password, it is stored by Clerk — it never touches our servers.

What you add to Next Showing. The streaming services and prices you track, the titles and people you follow, your collections, your watchlist, titles you mark as watched or "Not interested," and — if you use the import — your Letterboxd username and watched-films list. This is the product working; none of it is collected quietly.

How you use the product. We record product events (for example, that a subscription was added) along with which pages you visit inside the app and how long each page is visible to you. We use this to see which features matter and where people get stuck. It stays inside Next Showing — it is never used for advertising and never shared for anyone else's marketing.

The boring technical minimum. Our hosting providers keep short-lived server logs (IP addresses, request paths) for security and debugging, and our rate limiter briefly holds per-account request counters to keep the service healthy.

• Your streaming accounts. We never connect to Netflix, Disney+, or any other service. When you pause or cancel, you do it on their site — we only record what you tell us.
• Payment information. Next Showing is currently free and collects no payment details.
• Bank data. The app contains an optional bank-sync experiment that is switched off. If we ever enable it, this policy will describe it before it reaches you.

One purpose: running Next Showing. Your follows and services are the inputs to your recommendations. Usage data helps us see which features matter. Logs and rate limits keep the service secure and stable. That's the list — there is no advertising use, no profiling for third parties, and no sale of personal data.

We want to be precise here, because it's easy to overclaim. Usage events are stored against a salted one-way hash of your account id rather than the id itself. Nobody reading that table can work backwards from a hash to a person.

But we hold the salt and your account id, so we can recompute your hash and connect those events back to you — and our own funnel report does exactly that to measure how far new users get. So this data is pseudonymous, not anonymous. We treat it as yours: it's covered by the access and deletion rights below, and it is never sold, shared for advertising, or linked to you anywhere outside Next Showing.

We share data only with the infrastructure that runs the product, under their standard data-processing terms:

• Clerk — sign-in and account management
• Supabase — our database (hosted PostgreSQL)
• Vercel — hosting and delivery
• Upstash — rate limiting

Title information (posters, release dates, where things stream) comes from TMDB — but those lookups happen from our servers, and TMDB receives nothing about you. If you import from Letterboxd, we fetch only the data you exported or made public. We never send your personal data to anyone else, full stop.

We do not sell your personal information, and we do not share it for cross-context behavioural advertising — including as those terms are defined by US state privacy laws. Because we run no advertising and no cross-site trackers, there is nothing to opt out of. We also honour Global Privacy Control signals, though they change nothing about what we do.

Next Showing uses only essential cookies: the session cookies Clerk needs to keep you signed in, and a preference for light or dark mode. There are no advertising or cross-site tracking cookies, which is why there's no cookie banner.

Some browsers send a "Do Not Track" signal. There is no agreed standard for what a site should do with one, and we don't change our behaviour based on it — because the behaviour it exists to prevent, tracking you across other websites, is something we never do in the first place.

Your account data — services, follows, collections, imports — is kept for as long as your account exists, because it is the product. Delete your account and it goes with it.

Server logs and rate-limit counters are short-lived and expire on our providers' own schedules, typically within days. Usage events are kept while they're useful for understanding how the product is used, and are deleted with your account.

You can delete your account yourself, and it takes effect immediately. On the website, open the profile menu and choose Account & data; in the phone app it's on the You tab. Either one removes your services, follows, collections, watchlist, imports and usage events from our database, and deletes your sign-in from Clerk.

If you'd rather we did it, email privacy@thenextshowing.com and a human will confirm when it's done. There is no backup to restore from afterwards — deletion is final.

Wherever you live, we honor the same set of rights: ask us what we hold about you, correct it, export it, or delete it. Email privacy@thenextshowing.com and a human will respond. We may ask you to confirm you control the account's email address before we act, so that nobody else can request your data. If we ever refuse a request, we'll tell you why and you can reply to challenge it.

Your data sits in a managed Postgres database that is not reachable from the public internet, behind sign-in handled by a specialist provider. We don't store passwords ourselves. Access to production is limited to people who need it.

No service can promise perfect security, and we won't. If a breach ever affects your data, we'll tell you what happened, what was exposed, and what we did about it.

Next Showing is operated from the United States, and our providers may process or store data in the United States and other countries. If you use Next Showing from outside the US, your information will be handled in countries whose privacy laws may differ from your own.

Next Showing is built around telling you where to watch things, so it links out constantly — to streaming services' own sites when you pause or subscribe, and to other pages about titles. Those sites are not ours, we don't control them, and their privacy practices are their own. A link from us isn't an endorsement or a sign we're affiliated with them.

Next Showing is not directed at children under 13, and we do not knowingly collect their data. If you believe a child has created an account, email us and we'll remove it.

If our practices change, this page changes first and the effective date above moves. For material changes — anything that would surprise you — we'll say so in the product, not just here.

Questions about privacy: privacy@thenextshowing.com