Privacy Policy

Last updated: 29 May 2026 · Applies to users in the United Kingdom and European Economic Area

Reaxly (“we”, “us”, “our”) is the data controller for the personal data we collect when you use this service. This policy explains what data we collect, why, and your rights under UK GDPR and the Data Protection Act 2018.

1. Data we collect

  • Account data — email address, username, avatar (emoji), and profile information you provide on sign-up.
  • Content data — reactions, timestamps, and comments you post on the platform.
  • Usage data — pages visited, features used, and interaction logs collected automatically.
  • Authentication data — session tokens stored in cookies to keep you signed in.
  • Moderation data — reports you submit and actions taken on your account.

2. Why we collect it

  • Providing the service — your account data is necessary to create and manage your profile and posts.
  • Safety and moderation — we process content and moderation data to enforce our Community Guidelines and keep the platform safe.
  • Improving Reaxly — usage data helps us understand how the product is used and fix issues.
  • Legal obligations — we may retain data to comply with applicable law.

Our lawful bases under UK GDPR are: contract (to deliver the service you signed up for), legitimate interests (safety, fraud prevention, product improvement), and legal obligation where required.

3. Data retention

Account data is retained for as long as your account is active. If you delete your account, your personal data is removed within 30 days, except where retention is required by law. Moderation records may be retained for up to 2 years to investigate appeals and abuse patterns.

4. Data sharing

We do not sell your personal data. We share data only with:

  • Supabase — our database and authentication provider. Data is stored on EU-based servers.
  • Vercel — our hosting provider.
  • A website analytics and performance-monitoring tool — collects aggregated page views, performance/timing metrics, referrers, and approximate location and device/browser info derived from your IP address. It is cookieless and does not identify you individually. We rely on legitimate interests as the lawful basis, to understand usage and keep the site fast.
  • TMDB — we fetch film and TV metadata; no personal data is sent to TMDB.
  • Law enforcement — only when required by a valid legal request.

5. Your rights

Under UK GDPR you have the right to:

  • Access — request a copy of the personal data we hold about you.
  • Rectification — ask us to correct inaccurate data.
  • Erasure — request deletion of your data (“right to be forgotten”). You can delete your account from Settings.
  • Restriction — ask us to pause processing of your data while a complaint is resolved.
  • Portability — receive your data in a machine-readable format.
  • Object — object to processing based on legitimate interests.

To exercise any of these rights, email us at privacy@reaxly.app. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.

6. Cookies

We use cookies for authentication and session management. See our Cookie Policy for full details.

7. Contact

For any privacy-related questions, contact us at privacy@reaxly.app.