YAP
Privacy notice
Draft for Yap’s private beta, last updated October 2026. It describes how Yap works today and will be reviewed before any public launch.
What Yap stores about you, who can see it, how long it’s kept, and how to get it or delete it.
What we store
- Account: your email address and a hashed password (handled by our database provider’s sign-in service), and the date you accepted these policies.
- Profile: your u/username, display name, bio and photo (photo metadata such as location is removed when you upload it).
- What you post: topics, comments, polls, images and live chat messages, plus your votes and reports.
- Direct messages: the messages you send and receive in Messages, who each chat is with, and when you last read it.
- Your library and settings: watchlist, favourites, watched titles, ratings, the episode you’ve reached on each show (for the spoiler shield), followed teams, interests and privacy choices.
No advertising, no selling or renting of data, and no third-party tracking or analytics cookies. Yap uses a sign-in cookie, and remembers interests on your device when you’re signed out.
Who can see what
- Named posts show your u/username and link to your profile.
- Incognito posts show a one-off random name and are never shown with your account. Yap keeps a private link to your account inside the database so you can delete them and so moderators’ tools can mute or ban the account behind a rule-breaking post.
- Every post records roughly how far its author had watched (for example “covers up to S3E2”), so the spoiler shield can work.
- Direct messages can be read only by the two people in the chat. If you report a message, moderators see that one message as it was reported, never the rest of the chat. Messages always show your u/username, never an incognito name.
- Your email, password, library (unless you make it public), progress, interests (unless you show them on your profile) and settings are private to you.
- People suggestions (“Fans like you”) only use what others made public: posts under their name, a public library, teams and interests they show. Your own private shows and interests are used only to pick suggestions for you; nobody else sees them.
Who processes it
Supabase hosts the database, sign-in and file storage (United States). When Yap goes online it will be served by Vercel. Movie, TV and sports data is fetched from their providers by Yap’s server, so they don’t see who you are. YouTube videos only load when you press play, and from then on YouTube’s privacy policy applies.
How long it’s kept
Live chat is deleted 30 days after a room closes, read notifications after 90 days, and moderation records after 180 days. Everything else stays until you delete it or your account. Deleting your account removes your profile, library and settings straight away; your named posts lose your name, and your username is freed.
Your choices
In Settings you can edit your profile, post incognito by default, choose who can message you, show or hide your interests, hide your activity and teams, switch the spoiler shield off, and delete your account.