Privacy

What is collected when you sign in

Signing in is optional — everything that only reads is readable without an account. If you do sign in, it is through a third-party provider (Google today, possibly Apple or Spotify later), and this site receives and stores:

• The name of the provider you used — for example, Google.
• The unique account identifier that provider issues for you. It is meaningless outside that provider.
• For each sign-in: the time, the IP address and the browser user-agent string, so that you can recognise a session that is not yours.

That is the whole list. Your name, your email address and your profile picture are not stored — not shown to anyone, not kept in a hidden column, not held in a backup. There is no mailing list and no way for this site to email you, because it has no address to email and no software that sends mail. Nothing here needs to know who you are: there is nowhere to post, nothing to sign, and votes are only ever published as totals.

No password is ever created, stored or transmitted. This site has no password field and no way to set one.

Accounts are matched on the (provider, unique id) pair only, and never on email address — there is no stored address to match on. Signing in with a second provider therefore creates a second, separate account. This is deliberate: Apple's Private Relay issues a different address to every application, so matching on email would either split one person across several accounts or merge two people into one.

What is collected when you are not signed in

The web server keeps ordinary request logs — IP address, browser user-agent, the path requested and the time — for up to 30 days, for debugging and abuse handling. A session cookie is set so that pages and forms work. Nothing else.

There is no analytics product, no advertising network, no tracking pixel and no third-party script anywhere on this site. Nothing you do here is shared with anybody for measurement.

Votes and corrections

A vote you cast — a short's tier, or an age rating — is stored against your account so that you can change it and so that each person counts once. The aggregate result is public; who voted which way is shown to nobody but you.

Timestamp corrections are submitted blind: the reviewer sees the correction, not who sent it. There is one exception, for abuse or a legal question, and using it is recorded on the correction itself — that a submitter was unmasked, when, and by whom.

YouTube and Google

This site uses YouTube API Services to match the media discussed on the podcast to the right video. By using the site you agree to the YouTube Terms of Service, and Google's Privacy Policy describes how Google handles the data it collects.

Of everything the YouTube API returns, only the video id is kept. Titles, thumbnails, channel details and statistics are treated as a cache and are refreshed or deleted within 30 days, as Google's API rules require.

You can review and revoke this site's access to your Google data at any time from Google's security settings page.

Where a page embeds a video it is embedded through youtube-nocookie.com, which does not set advertising cookies until you press play. Once you do, you are interacting with YouTube and their policies apply.

How long things are kept, and how to have them deleted

Account details and votes are kept for as long as the account exists. Request logs are kept for up to 30 days and cached YouTube data for no more than 30 days. Deleting an account removes the account, its sessions and its votes; aggregate counts are recalculated without them.

Delete your account yourself, at any time, from your account page — sign in and press the button. That is the only way an account can be deleted, because it is the only way to show that it is yours: no email address is stored, so a request sent by email cannot be tied to an account.

Questions about what is stored go to [email protected]

What is never done

Nothing collected here is sold, rented or shared, and there is no advertising, sponsorship or affiliate arrangement to share it with. Data is disclosed only where the law requires it. Beyond the hosting provider, the object-storage provider holding encrypted backups, and the sign-in provider you chose, there is no third party involved.

Changes and contact

If this policy changes materially the change is announced on the home page. It is written by the person who runs the site rather than by a lawyer, and it is meant to be read rather than survived.

Questions about privacy go to [email protected]