Privacy Policy

This Privacy Policy explains what information ShareTens collects, how we use and share it, and the choices you have. ShareTens (sharetens.app) is operated by RyanKing, LLC, Allentown, Pennsylvania (“ShareTens,” “we,” “us”), which is responsible for your information. Please also read our Terms of Service.

1. What we collect

• Account information: your email address, your password (handled by Google Firebase Authentication; we never see or store it in readable form), and whether your email is verified.
• Profile information: your name, username, bio, and profile photo link. These are public.
• Content you post: lists and sublists, list items, notes and links; photos you upload (stored in Firebase Storage); comments; emoji reactions; and the visibility you choose for each list (public, friends-only, or private).
• Connections: who you follow and who follows you, friend requests, and friendships.
• Invite referrals: if you join through someone's invite link, we record who invited you so we can connect you as friends.
• Messages to us: when you use the contact form (including content reports), we store your message, the email address and topic you give us, and your account ID if you're signed in.
• Search lookups: when you search for movies or TV shows while making a list, your search text is sent to The Movie Database (TMDB) to suggest titles.
• Usage data: we use Vercel Web Analytics, which is cookieless and doesn't track you across other websites. It records aggregate information like the page visited, referring site, country, browser, and device type. Our hosting provider also keeps standard server logs (such as IP address and request time) for security and troubleshooting.
• Stored on your device: your browser keeps your Firebase sign-in session and a few small settings in local storage, such as whether seasonal decorations are turned off and an invite link you opened.

2. Cookies and tracking

ShareTens doesn't use advertising cookies, tracking pixels, or cross-site tracking, and we don't let ad networks collect data on our site. The browser storage described above is needed for sign-in and remembering your settings. If you click a store link and leave ShareTens, that store may set its own cookies (for example, to credit a referral).

3. How we use it

• To run ShareTens: create your account, verify your email, show your lists and profile to the people you choose, and power follows, friends, invites, comments, and reactions.
• To show link previews and search-engine listings for public lists and profiles.
• To send account and service emails, such as email verification. We don't send marketing email.
• To answer your messages and review content reports.
• To understand how the site is used, keep it secure, prevent spam and abuse, enforce our Terms, and fix problems.
• To comply with the law.

4. We don't sell your data

We don't sell or rent your personal information, and we don't “share” it for cross-context behavioral (targeted) advertising, as those terms are defined in US state privacy laws.

5. Who we share it with

• Other people, as you choose: public content can be seen by anyone (including search engines); friends-only content by your accepted friends; private content by you only. Your profile and username are public.
• Service providers that process data for us under their own terms and security commitments:
  • Google Firebase (sign-in, database, and photo storage)
  • Vercel (website hosting and cookieless analytics)
  • Resend (delivering our emails, sent from noreply@mail.toptens.app)
  • TMDB (receives movie and TV search text)
• Legal reasons: if required by law or valid legal process, or to protect the rights, safety, and security of ShareTens, our users, or others.
• Business transfers: if ShareTens is sold or reorganized, your information may be transferred to the new operator, subject to this policy.

Our providers are located in the United States, so your information is processed in the US.

6. Affiliate and outside links

Some shopping links (such as gift ideas) may be affiliate links, and links in lists can lead to other websites. When you click them you leave ShareTens, and the other site's own privacy policy applies. We don't receive your purchase details from stores beyond whatever aggregate commission reports they provide.

7. Your choices and rights

• Edit your profile, change who can see each list, and delete your lists, photos and comments at any time.
• Unfollow people, cancel or decline friend requests, and unfriend at any time.
• Delete your account yourself at any time: go to Edit profile, then “Delete my account.” This permanently deletes your lists and photos, your comments and reactions, your follows, friend requests and friendships, your profile and username, and your sign-in account.

8. State privacy rights

Depending on where you live (for example, California, Colorado, Connecticut, Virginia, and other US states), you may have the right to:

• Know what personal information we have about you and get a copy of it;
• Correct inaccurate information;
• Delete your information;
• Opt out of the sale of personal information, targeted advertising, or profiling (we don't do any of these);
• Not be treated differently for using these rights; and
• Appeal if we deny your request.

We offer these rights to all users regardless of where they live. To make a request, use our contact form or email privacy@toptens.app. We may need to confirm your identity (for example, by having you write from your account's email). An authorized agent may make a request for you with your written permission. We'll respond within 45 days. To appeal a decision, reply to our response with “Appeal” in the subject line; if you're not satisfied with the appeal, you may contact your state attorney general. We honor Global Privacy Control signals, although we don't sell or share data in the first place.

9. How long we keep it

• Account, profile, content, and connections: while your account is active, or until you delete them.
• After you delete something or your account: it's removed from our live database promptly. We don't keep separate backups of deleted data; brief copies may remain in our service providers' systems (for example, server logs) for a short time under their own retention practices.
• Contact-form messages and reports: kept as long as needed to handle them, and generally no longer than 2 years.
• Analytics and server logs: kept by Vercel under its retention periods, and only in aggregate for analytics.
• We may keep information longer if the law requires it, or to resolve disputes, prevent abuse, or enforce our Terms.

10. Security

We use Firebase security rules so only the right people can read or change each piece of data, passwords are handled by Firebase Authentication, and all connections use HTTPS. No online service is perfectly secure, so please use a strong, unique password. If a data breach affects your personal information, we'll notify you as required by law.

11. Children under 13

ShareTens is not for children under 13, and we don't knowingly collect personal information from children under 13, consistent with the Children's Online Privacy Protection Act (COPPA). If we learn that we have collected information from a child under 13, we will delete the account and its information promptly. If you're a parent or guardian and believe your child under 13 has an account, contact us at privacy@toptens.app or through our contact form with the username, and we'll delete it. Users aged 13 to 17 should use ShareTens with a parent's or guardian's permission and think carefully before making lists public.

12. Changes to this policy

We may update this policy from time to time. We'll change the effective date above and, for important changes, let you know on the site or by email before they take effect.

13. Contact

RyanKing, LLC, Allentown, Pennsylvania. Questions or requests about privacy? Email privacy@toptens.app or use our contact form.