The small print
Privacy policy
In short. Have a Gander keeps what it needs to learn your taste and to share it with the friends you choose: your account (from Google), your ratings, your watchlist, your friends, the titles you send them, and your movie nights. Your friends can see your ratings and watchlist; nobody else can. The app shows no ads, contains no analytics or tracking code, and sells nothing to anybody. You can delete your account and everything in it from the app at any time.
1. Who is responsible
The controller for the personal data processed through Have a Gander (the Android app, the version that runs in a browser, the server they talk to, and this website) is:
Hagworks, a sole proprietorship (eenmanszaak) owned by Maurits van ’t Hag
The Netherlands
Chamber of Commerce (KvK): Hagworks is being registered with the KvK. The registration number and business address will be listed here as soon as it is.
Privacy questions: privacy@haveagander.app
Company contact: contact@hagworks.com
Hagworks has not appointed a data protection officer; questions about privacy go to the privacy address above, and are answered by the owner.
During the preview the app may still call itself by its working title, Rated. It is the same app, and this policy covers it.
2. What we keep, why, and on what basis
We only collect what the app needs to work. We never ask for your address, phone number, date of birth, location, contacts or photos.
| What | Why | Legal basis (GDPR) |
|---|---|---|
| Account, from your Google sign-in: your name (which you can change in the app), your email address, whether Google has confirmed it, a link to your Google profile picture, your Google account ID, your personal invite code, and when the account was created and last changed | To sign you in, to show your name and picture to your friends, and to reach you about your account. We do not keep the access tokens Google hands out, and we never read anything else from your Google account. | Contract (art. 6(1)(b)) |
| Sign-in sessions: a random session token, when the session started, was last renewed and expires, and a description of the browser or device it was used from (user agent). We do not store your IP address with it. | To keep you signed in, and to spot a session that is being misused. | Contract; legitimate interest in security (art. 6(1)(f)) |
| A short-lived check during sign-in with Google | To make sure the answer that comes back from Google belongs to the sign-in you started. | Legitimate interest in security |
| Your ratings: your gut score for each film or series, any category, detail, season and person scores you add, the score the app predicted before you rated, and when | This is the service: learning your taste, predicting your scores and explaining them, your statistics, and comparing tastes with friends. | Contract |
| Your watchlist, and the titles you swiped away as “Not for me” | To keep your list, and to stop showing you titles you passed on. | Contract |
| Your friends, and the titles you send each other, with the short note you add (up to 140 characters) and what the other person did with it (saved, passed or rated) | To compare tastes and share titles with the people you invited. | Contract |
| Movie nights: who joined, the titles in the deck, each member’s votes and predicted scores, and the result | To run the movie night and find the match. | Contract |
| Reports you make about another user or a note: the reason you pick and any detail you add (up to 500 characters) | To deal with abuse, which the app stores require us to do. | Legitimate interest in a safe service; legal obligation where it applies |
| Daily usage counters, holding your account ID | To enforce fair-use limits, such as how many reports an account can make, or how many new titles it can add to the catalogue, in a day. | Legitimate interest in a working service |
| What you search for | To find titles and people. The search is passed to TMDB (see below) to answer it, and is never stored with your account. To answer the same search faster, Cloudflare keeps the answer for up to a day, filed under the search text, without anything that identifies you. | Contract |
| Your IP address, briefly, to limit how many requests one connection can make | To keep the service up and stop abuse. Cloudflare’s rate limiter counts requests per address over one minute; the address is never written to our database. | Legitimate interest in a working, secure service |
| Email to us: what you write to support or privacy, and our replies | To help you, and to show that we handled your request. | Legitimate interest in answering you |
Predictions, statistics and taste matches are worked out from your ratings whenever you open them; we do not store a profile of you beyond the data above. We do not use your data for advertising, and we do not sell or rent it to anyone. The app’s predictions are suggestions about films; they are not automated decisions with legal or similarly significant effects.
The app keeps no request logs in production, and no analytics, crash-reporting or advertising code is built into it.
3. Who can see what
- Your friends, the people who used your invite link, whose link you used, or whom you confirmed as a friend at a movie night, see your name and picture, your ratings (with any details you added), your watchlist and your taste match with them. They never see your email address.
- People in a movie night with you see your name and picture, how far you are through the deck, and how many people voted yes or no on each title. Those who are also your friends see how you voted on the top picks, and your predicted score for them.
- A friend you send a title to sees the title and your note.
- Anyone with your invite link sees your name and picture, so they know whose invitation it is. In the same way, a signed-in user with the code of a movie night you host sees your name and picture before joining.
- Nobody else can see your data. There are no public profiles.
You can remove a friend at any time and reset your invite link, so the old link stops working.
4. Who we work with
We use a small number of service providers. Each processes data only to provide its part of the service, under a data processing agreement, or under its own terms as an independent controller where noted.
| Provider | What for | Data involved | Where |
|---|---|---|---|
| Cloudflare, Inc. | Hosting of the app, its server and this website, the database, and protection against attacks | Everything the app stores; IP addresses and request details of visitors | Database in Western Europe; the network that serves pages is worldwide; US company |
| Google (Google Ireland Ltd / Google LLC) | Sign-in with Google, and your profile picture, which your device loads straight from Google | Google confirms who you are and tells us your name, email address, picture and Google account ID. Loading a picture tells Google your IP address. For your Google account itself, Google is an independent controller. | EU and US |
| TMDB (The Movie Database) | Film and series information, and the posters and photos in the app | Our server asks TMDB for the titles and people you look up and search for, without anything that identifies you. Posters and photos are loaded by your device straight from TMDB, which tells TMDB your IP address. | US |
| Expo (650 Industries, Inc.) | Building the app, delivering updates to it, and hosting the preview download | When the app checks for an update: a random installation ID, the app version and the platform. When you download the preview: your IP address and the request details. | US |
| Google Workspace (Google Ireland Ltd / Google LLC) | Our email | What you write to support or privacy, and our replies | EU and US |
Not switched on yet: a “What people are saying” card for title pages, which reads public posts about a film on Bluesky and has them summarised by an AI model from Anthropic. It would send only the title and those public posts, never anything about you. When we switch it on, this policy will be updated first.
To build the “more like this” and mood features, we send film and series descriptions (never anything about users) to Voyage AI, which turns them into numbers we can compare.
For now the Android app is a preview you install from a link we send you. When it comes to Google Play and the App Store, Google and Apple handle downloads and app updates under their own privacy terms, and this section will be updated.
5. Data outside the EU
Cloudflare, Google, TMDB and Expo are based in the United States, or belong to groups that are. Where personal data goes outside the European Economic Area, we rely on the EU–US Data Privacy Framework for providers certified under it, and otherwise on the European Commission’s standard contractual clauses. You can ask us for a copy of the safeguards that apply.
6. How long we keep it
| Data | Kept for |
|---|---|
| Your account, ratings, watchlist and friends | Until you delete them or your account. A rating you remove is gone straight away. |
| Titles you swiped away as “Not for me” | 90 days, after which they can show up again. You can bring them back sooner in Settings. |
| Titles you sent or received | Once saved, passed or rated: 180 days after they were sent. Until then, for as long as they wait. Removing a friend deletes the titles you sent each other. |
| Movie nights | Open for 12 hours, and deleted with their votes 7 days after they started |
| Sign-in sessions | Until you sign out, or until 90 days after you last used the app; expired sessions are removed |
| The check during Google sign-in | Minutes, until it has been used or has expired |
| Daily usage counters | 2 days |
| Reports | Until the account of the person who reported, or was reported, is deleted. A report about a note stays after the sender deletes their account, no longer linked to anyone. |
| Database recovery history | Cloudflare lets us restore the database to an earlier moment, for up to 30 days back, so deleted data is gone from that history after at most 30 days |
| Email to support or privacy | Up to two years after the conversation ends |
7. Security
All traffic is encrypted (HTTPS), and the database is encrypted at rest by Cloudflare. There are no passwords to leak: you sign in with Google. Apart from the name and picture behind an invite link, every request for anyone’s data needs a valid session, and the server only ever returns your own data, what your friends have shared with you, or what people in a movie night with you can see. On your phone, the sign-in session is kept in the phone’s encrypted storage.
Have a Gander is not end-to-end encrypted: your ratings live on our server so they are there on every device and your friends can see them. We keep the risk small by keeping little.
8. Your rights
Under the GDPR (in Dutch: AVG) you have the right to:
- See and take your data (access and portability). The app has no export button yet; ask us, and we send you everything we hold about you as a file you can open and reuse.
- Correct it. You can change your name in the app’s Settings; for anything else, ask us.
- Delete it (erasure). In the app, Settings › Delete account. See Delete your account.
- Object to processing based on legitimate interest, and ask us to restrict processing while a question is settled.
Write to privacy@haveagander.app. We answer within one month, and may ask you to write from the email address of your account so we know it is you.
If you think we handle your data wrongly, please tell us first. You also have the right to complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens, or to the authority in the EU country where you live.
9. Cookies and storage on your device
This website (haveagander.app) sets no cookies, stores nothing on your device, and uses no analytics, trackers or third-party scripts. The fonts are served from our own domain.
The app on your phone keeps its sign-in session in the phone’s encrypted storage, so you stay signed in. It also remembers a few settings on the phone: your theme and style, which library tab you had open, an invite or movie-night link you opened before signing in, and your last movie-night pick. Deleting your account clears them on that device; signing out does not, so uninstall the app to remove them.
The version in your browser uses one cookie to keep you signed in (__Secure-better-auth.session_token, secure and httpOnly) and, during Google sign-in only, a short-lived cookie (__Secure-better-auth.state) that ties Google’s answer to the sign-in you started. Both are strictly necessary, so they need no consent banner. It stores your theme and the same few settings as the phone app in the browser’s local storage.
Neither version uses advertising or tracking cookies.
10. Age
Have a Gander is meant for people aged 18 and over. If you believe someone younger has an account, write to us and we will delete it.
11. Changes to this policy
When we change this policy, we update the date at the top. If a change matters for how your data is used, for example when the app starts storing something new or we switch on the card described in section 4, the app tells you before you continue.
This product uses the TMDB API but is not endorsed or certified by TMDB.