Privacy policy
Last updated 19 October 2026
The Rotation is a small app for friend groups who take turns picking a movie, show, album or book each week. This page explains what the app stores about you, who can see it, and how to get rid of it. We’ve tried to write it in plain language.
The short version
- We store what you put into the app: your account, your clubs, your scores and posts, your library and lists.
- Your email is never shown to other users.
- No ads, no analytics, no tracking, and we never sell or share your data for marketing.
- You can delete your account yourself, in the app, in a few taps.
Who we are
The Rotation is run by Tyler Stallworth, an individual developer based in Virginia, United States. In this policy, “we” means him. Questions, access requests and anything else about your data: support@the-rotation.app.
What we store
All of this is stored with Google Firebase (Realtime Database, Authentication, Cloud Functions and Hosting) in United States data centres.
- Your account
- Your email address (or the private relay address Apple gives us if you use Sign in with Apple), your username, your display name, and an optional bio.
- Clubs and what you do in them
- The clubs you join and your member name in each, plus your scores, notes, picks, nominations, votes, suggestions and discussion posts.
- Your personal space
- Your library and ratings, your queue, your lists and top 10s, and who you follow and block.
- Reports
- Reports you submit about content or people, so a moderator can review them.
- Notifications
- Your notification settings; the device push tokens we need to reach your phone or browser (Apple Push Notification service for iPhone, your browser’s Web Push service for the web app); your time zone, so reminders arrive at a sensible local time; and a notification inbox, which we keep for 60 days.
- Sign-in abuse protection
- Counters of recent sign-in attempts, keyed by a hashed IP address or username, kept for no more than a day. They exist only to slow down password guessing.
Who can see what
- Your email is never shown to other users. When you sign in with a username, the lookup happens on our server.
- Private clubs: everything in them is visible only to that club’s members.
- Public clubs are visible to any signed-in user.
- Your profile is private or public, your choice. A public profile shows your display name, bio, top 10s, public lists, public ratings and the club scores that have been revealed. Making it private removes those from the public directory.
- Search: being found by name is opt-in. Finding you by exact username always works.
Other services the app talks to
To work, the app calls a few outside services. Here is what each one receives.
- OMDb and TMDB for film and TV search, posters and streaming availability. They receive your search terms, and no account information.
- Apple iTunes Search API for album search.
- Open Library for book search.
- Apple for Sign in with Apple and for delivering push notifications to iPhones.
- Google Firebase hosts the service and stores the data described above.
Some pages link out to Spotify, Apple Music, JustWatch, Bookshop, Libby and Open Library. Following one of those links opens that service, which has its own terms and privacy policy.
What we don’t do
- No advertising.
- No analytics and no tracking.
- No selling your data, and no sharing it for marketing.
- No tracking across other companies’ apps or websites, which is why the iPhone app never shows the App Tracking Transparency prompt.
On your device
The app uses local storage on your device to cache things and remember settings. On iPhone, your sign-in refresh token is kept in the Keychain. On iPhone the Home Screen widget reads a short summary of your clubs that the app keeps on the phone.
How long we keep it
We keep your data while your account exists. When you delete your account, your data is deleted within 30 days, and backups roll off within 30 days. The notification inbox is trimmed after 60 days regardless. See Delete your account for exactly what is removed.
Your rights and choices
You can ask to see, correct, export or delete the data we hold about you. Email support@the-rotation.app from the address on your account. Deleting your account is also available directly in the app. We honour California and EU-style privacy rights for everyone, wherever you live.
You can also change what you share without contacting anyone: make your profile private, turn off any notification type, block people, and leave clubs.
Children
You must be at least 13 to use The Rotation. If you are under 18, you should have a parent’s permission. The app is not directed at children under 13, and we delete any account we find belongs to someone under 13.
Where data is processed
Our servers are in the United States. If you use The Rotation from elsewhere, your data is sent to and stored in the United States.
Changes to this policy
If we change this policy in a way that matters, we’ll tell you in the app. The date at the top shows when it was last updated.