Privacy policy

Later Tonight is a shared watch list for your group. This policy covers the iPhone and iPad app, the service behind it, and this website. The short version: we collect what it takes to run a shared list and nothing else. No ads, no analytics, and we never sell your data.

What we collect

Your account. When you sign in with Apple, Apple gives us a stable identifier for you, your email address (or a private relay address if you chose Hide My Email), and, the first time only, the name you agreed to share. We use these to keep you signed in, connect you to your lists, and show your name to the people you share lists with. You can change your display name in the app any time.

Your session. Signing in creates a random session token. The app keeps it in your device's Keychain, and our server stores only a hash of it. It expires after a year or when you sign out.

Things you add. Lists you create, titles you add, notes, comments, emoji reactions, and when you mark something watched. Each is recorded with your account and a timestamp so the other members can see who did what.

Invite links. When you create an invite link we store a random token, which list it opens, who made it, and when it expires. Links expire after seven days and can be revoked earlier from the app.

Device attestation. To keep bots off the service, the app may use Apple's App Attest when you sign in. That gives us a key your device generates and a counter, neither of which identifies you personally. We delete keys that haven't been used in a year.

Server logs. Our API records each request's method, path, status, size, and timing, plus sign-in events tied to your account id. We use these to keep the service running and to investigate problems. They don't include your name, your email, or the contents of what you add.

What we don't collect

No analytics or tracking SDKs, no ad networks, no location, no contacts, no photos, and no fingerprinting. This website sets no cookies. If you've opted in to sharing analytics with developers in your iOS settings, Apple may share aggregated crash and usage data with us; that's between you and Apple, and you can turn it off there.

Who can see what

• Members of a list can see your display name and everything you've added to that list: titles, notes, comments, reactions, and watched marks.
• Anyone who opens an invite link sees the list's name, the owner's display name, and how many people are on it, even before signing in. Treat links the way you'd treat a group chat invite.
• Your email address is never shown to other users.
• We never sell your data or share it for advertising.

Services we rely on

• Apple, for Sign in with Apple and App Attest.
• The Movie Database (TMDB), for search results and title details. Searches go through our server, so TMDB sees our server, not you. Posters load directly from TMDB's image servers, so TMDB sees your device's IP address like any image on the web.
• OMDb, for IMDb and Rotten Tomatoes ratings. Our server looks these up by title; nothing about you is sent.
• Hosting and infrastructure providers in the United States, which run our API, store our database and server logs, and serve this website. They may keep their own access logs, which can include your IP address.

On your device

The app keeps your session token in the Keychain and a copy of your profile (name and email) in app storage so it can start without waiting on the network. Everything else is loaded from our server when you open a list. Signing out clears both. iOS may cache poster images the way it caches any other image.

Deleting your account

Open Account in the app and choose Delete account. That:

• deletes every list you own, so the other members lose access to them
• removes you from lists you joined
• revokes your sign-in and any active sessions
• removes your name and email from our records

Titles you added and comments you left on lists you joined stay, attributed to "Deleted user", so the list still makes sense for everyone else. Delete anything you'd rather not leave behind before you delete your account.

Deleted lists and accounts become inaccessible immediately. We keep the underlying records in a deleted state so the app can tell other members what happened; email us if you'd like them removed entirely.

Your choices

• Change your display name in the app.
• Keep your real email address from us at sign-in with Apple's Hide My Email.
• Delete your own comments and items, or leave a list, at any time.
• Email us for a copy of your data, or to have records tied to a deleted account removed.

Wherever you live, we'll honor requests to access, correct, export, or delete your data.

Children

Later Tonight isn't for children under 13, and we don't knowingly collect data from them. If you think a child has an account, email us and we'll delete it.

Changes

If this policy changes, we'll update it here and change the date at the top.

Contact

Later Tonight is built and run by Jimmy Sawczuk. Questions or requests go to hello@latertonight.app.