Mash Potato
Privacy
Mash Potato is a place where a group of friends rates films together. That means the app holds opinions people gave in confidence, so this page is specific about what is stored, who can see it, and how to take it back.
What we collect
- Your account. Email address (for sign-in and the 6-digit codes we send), display name, chosen avatar, and whether you rate as a Normie or a Cinephile.
- What you rate. Your scores per category, the optional one-sentence take you attach, your solo ratings, saved titles and playlists, and the rubrics you build.
- Your groups. Which groups you belong to, who else is in them, and the rounds those groups run.
- What you write. Comments on titles and messages you send in group chats and direct messages, plus reactions and reports.
- Notification tokens. If you allow push notifications, a device token so we can deliver them.
We do not collect location, contacts, photos, or advertising identifiers, and there is no third-party analytics or advertising SDK in the app.
Who can see your scores
Scores stay hidden until the Reveal, and that is enforced on the server, not in the interface. Until a round is revealed and you have locked your own card, the database itself will not return anyone else's scores to you. Hiding them in the app is not the boundary; the boundary is the boundary.
Inside a group, members see each other's scores once a round is revealed. Outside it, your ratings are never made public automatically — a public profile shows only your display name, avatar, the groups you chose to show, and personal playlists you chose to make public.
When you share a Reveal as an image, the card carries the group's name, the title, the combined score and how split the group was. It never carries member names or anyone's individual score.
When a person reads your content
Ordinarily nobody outside your groups reads what you write. There is one exception, and it is worth stating plainly: if someone reports a message or a comment, a moderator reads it — the reported text, who wrote it, and the reasons given. That is how a report can be acted on at all.
The queue a moderator sees contains only content that has actually been reported. It is not a way to browse conversations, and the rest of a thread does not appear in it. Every moderator action — dismissing a report, removing content, banning or unbanning an account — is written to a record that cannot afterwards be edited or deleted, including by the moderator who took it.
Who we share it with
We do not sell personal data. We use a small number of providers to run the service:
- Supabase — database, authentication and hosting for your data.
- Cloudflare — serves the website and the app.
- TMDB — film and show information. Your searches reach TMDB through our own server, so TMDB does not receive your account identity.
- Apple / Google — deliver push notifications to your device. Notifications carry identifiers only, never score values.
- Resend — sends sign-in, password-reset and email-change codes.
How long we keep it
Your content stays until you remove it or delete your account. A deleted message is hidden immediately and removed from the interface; rounds your group has already revealed remain part of that group's history.
Getting your data out, and deleting it
Both already work in the app, without emailing anyone:
- Export — Profile → Account → Export gives you a JSON file with your ratings, scorecards and one-liners, comments, playlists and saved rubrics.
- Delete — Profile → Account → Danger zone → Delete my account. This removes your personal data. Groups you own are handed to the longest-standing member; a group with only you in it is deleted with the account. It cannot be undone.
Children
Mash Potato is not intended for children under 13, and we do not knowingly collect their data. If you believe a child has created an account, write to us and we will remove it.
Security
Data is encrypted in transit. Access is enforced per-row in the database rather than only in the app, so a request for data you are not entitled to is refused at the source. If you find a security problem, please tell us at support@mashpotato.app.
Changes
If this policy changes in a way that materially affects you, we will say so in the app rather than quietly editing this page.
Contact
Mash Potato is built and run by an independent developer, not a company. Whoever is reading your message is the person who wrote the app. For anything about your data — a question, a correction, a deletion, or a complaint — write to support@mashpotato.app.