Privacy Policy
Last updated: 11 July 2026
This policy explains what data Mosaic collects, why, and what you can do about it.
1. Data we collect
- Account: username, email and password (stored hashed, never in plain text).
- Activity: the works you log, ratings, reviews, lists, comments and who you follow.
- Optional: avatar, banner, bio and profile preferences.
- Technical: the minimal session data needed to keep you signed in.
2. How we use the data
We use your data to run the Service: showing your profile and diary, generating your feed and recommendations, and enabling social interactions. We do not sell your data.
3. What is public
Your profile, diary, reviews and lists are, by default, visible to other users. Your email and password are never public. You can adjust visibility in settings where available.
4. Third-party services
We use external sources for catalogue entries (e.g. TMDB, Open Library). Mosaic does not process payments or store payment data.
5. Cookies
We use only essential cookies for authentication and session security. We do not use advertising or third-party tracking cookies.
6. Retention
We keep your data for as long as the account exists. When you delete your account, your content and personal data are removed.
7. Your rights
You can access, correct and delete your data in settings, or by asking us. Under the GDPR, you also have the right to portability and to object to certain processing.
8. Security
Passwords are stored hashed and connections are encrypted. No system is 100% secure, but we apply reasonable measures to protect your data.
9. Changes
We may update this policy. Material changes will be announced in the Service.
10. Contact
Questions about privacy? Contact ola@usemosaic.online.