Who we are
GoodPicksDB is a movie, television, and book recommendation service operated by YA Industries in Texas, United States. In this policy, “GoodPicksDB,” “we,” “us,” and “our” refer to the GoodPicksDB service and YA Industries.
Information we collect
Account information
When you create an account with an email address, we collect your email address, display name, verification status, and a securely hashed version of your password. We never store your password in readable form. We also create and store account, session, email-verification, and password-reset records needed to operate and secure your account.
Google sign-in information
If you choose “Continue with Google,” we request only the OpenID Connect openid, email, and profile scopes. Google provides your Google account identifier, verified email address, display name, and profile image. We use this information only to create, link, and sign you into your GoodPicksDB account and to display your account profile. We do not receive your Google password, request access to Gmail or Google Drive, or store the temporary Google access token after sign-in is complete.
Activity and content
We collect the recommendations you submit or endorse, optional recommendation pitches, titles you have received or viewed, items you save, whether a recommendation worked for you, and notification status. Recommendation titles and pitches may be reviewed by our editors and published in the public catalog. We do not publicly display your account email address with a recommendation.
Device and technical information
We collect a browser device identifier, IP address, user-agent string, request counts, timestamps, and security or blocking status. We also receive ordinary server logs and error information. This information helps us operate the service, prevent abuse, investigate problems, and protect users.
Service monitoring
When enabled, private monitoring records page visits, search result counts, service errors, and action outcomes. These records exclude search text, comments, email addresses, IP addresses, credentials, and raw error messages. Existing device and authenticated account identifiers may be replaced with identifiers that change each day. Monitoring creates no additional browser identifier. Do Not Track and Global Privacy Control disable optional browser events and monitoring identifiers; aggregate service health and action outcomes remain available. Records are held in a private archive; no automatic archive expiration is currently configured, so they remain until deliberately removed.
Browser storage and cookies
We use essential cookies for signed-in and guest sessions, Google sign-in state, device security, and your language, design, and color preferences. Signed-in session cookies can last up to 30 days; guest, device, and preference cookies can last up to one year. Your browser’s local storage keeps a random submission-session identifier and whether you dismissed our storage notice. Recommendation history is stored with your signed-in or guest account on our servers so that recommendations do not repeat. We do not currently use advertising cookies or third-party behavioral advertising trackers.
How we use information
- Provide, personalize, and synchronize your recommendation experience.
- Create, verify, authenticate, and support accounts.
- Review, publish, deduplicate, and moderate recommendations and pitches.
- Send requested verification, password-reset, security, and service messages.
- Maintain service reliability, measure request volume, prevent abuse, and enforce our Terms.
- Comply with law and protect the rights, safety, and integrity of users and the service.
How we share information
We do not sell or rent personal information. We may share it in these limited circumstances:
- Service providers. Infrastructure and communications providers process information for us, including Google for sign-in and Cloudflare for network security, object storage, DNS, and transactional email. They may use the information only to provide services to us under their own terms and privacy commitments.
- Public catalog. Recommendation titles and optional pitches may become public after editorial review. Account email addresses are not displayed with them.
- Legal and safety reasons. We may disclose information when reasonably necessary to comply with law, respond to valid legal process, prevent fraud or abuse, or protect rights and safety.
- Business changes. Information may transfer as part of a merger, financing, reorganization, sale, or transfer of the service, subject to applicable law and this policy.
- With your direction. We may share information when you ask or consent.
Google user data
Google user data is used only to authenticate you, link the correct GoodPicksDB account, display your chosen profile details, prevent account abuse, and provide support. We do not use Google user data for advertising, sell it, or allow people to read it except when necessary for security, support you request, legal compliance, or service operations. Our use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.
Retention and deletion
We keep account and activity information while your account is active and as reasonably necessary to provide the service, secure it, resolve disputes, and meet legal obligations. You can permanently delete your signed-in account and its related active account data from Settings. Submission and duplicate-review records may be retained without your account identifier for moderation and catalog integrity, and content already published to the catalog may also be retained in de-identified form. Limited records may remain temporarily in backups or security logs, or longer when law requires.
Your choices
- Update your display name or delete your account in Settings.
- Delete server-side recommendation history for each media category through the in-product reset control.
- Clear local identifiers and preferences through your browser settings; this does not delete server-side history.
- Manage or revoke GoodPicksDB’s Google access from your Google Account permissions.
- Block or delete cookies in your browser, although essential account features may stop working.
- Contact us to request access, correction, or deletion where applicable law provides those rights.
Security and international use
We use administrative, technical, and organizational safeguards designed to protect information, but no online service can guarantee absolute security. GoodPicksDB is operated from the United States, so information may be processed in the United States and other locations used by our service providers.
Children
GoodPicksDB is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided information to us, contact us so we can review and delete it as appropriate.
Changes to this policy
We may update this policy as the service or law changes. We will post the revised policy here and update the effective date. If a change materially affects how we use personal information, we will provide additional notice when appropriate.
Contact us
For privacy questions or requests, email [email protected]. For account support, email [email protected].