Privacy

Picksjar is a place to keep and share the media you recommend. This page says what we store, why, who else is involved, and how to remove it. Picksjar is run by an independent developer; questions about your data go to support@picksjar.com. Effective 2 October 2026.

What we store

From your Google account, if you sign in with Google: your name, email address, profile picture and Google account ID.
If you sign in with an email code: your email address and when it was verified. There is no password — we never see or store one.
What you choose: your handle and display name.
What you make: your jars (titles, descriptions, tags), your picks, the jars you subscribe to, and the items you save for later.
Housekeeping: a sign-in session so you stay signed in, and per-account counters that limit how many searches an account can run, so one account can't exhaust the search quota for everyone.

What is public and what is private

Your profile (handle, display name, picture), your jars and your picks are public pages that anyone can open without an account. A jar shows how many people subscribe to it, never who. Your subscriptions and your saved items are private to you. Your email address is never shown to anyone.

How we use it

To run picksjar: to show your jars and picks under your name, to build your Home feed from the jars you follow, to keep your saved items, and to answer you when you write to support. We do not sell your data, we do not show advertising, and we do not use your data to train anything.

Our use of information from your Google account follows the Google API Services User Data Policy, including its Limited Use requirements.

Who else is involved

Google handles Google sign-in, and Google Analytics counts visits: which pages are opened, from which country, on what kind of device, and how people move through the site. It sets a cookie so it can tell a returning browser from a new one. It receives the pages you open, never your name or email.
Resend delivers sign-in code emails. It receives your email address and the code, nothing else.
Convex stores the data above and runs the app's backend.
Vercel hosts the site. We use Vercel Analytics, which counts page views in aggregate and does not use cookies or identify you.
YouTube, Spotify, TMDB and IGDB supply the titles, artwork and players. When you search or paste a link, the search text goes to Spotify's, TMDB's or IGDB's service from our server, without your identity. When you press Play on a card, a YouTube (privacy-enhanced mode) or Spotify player loads on the page; from that moment those services may set their own cookies under their own privacy policies. Nothing loads from them until you press Play.

Cookies

Picksjar itself sets only what it needs to keep you signed in. Google Analytics sets its own cookies (named _ga) to tell one browser from another; they carry no name or email. If you are visiting from the EU, the UK or Switzerland, that cookie is set only after you allow it in the notice we show, and you can change your choice at any time from Cookie settings at the bottom of every page — switching it off removes the cookie. There are no advertising cookies. Third-party players set their own cookies only after you start playback.

Deleting your account

Open Account and choose Delete account. This permanently removes your profile, every jar and pick, your subscriptions in both directions, your saved items, and the link to your Google account. There is no undo. Titles and artwork that Picksjar fetched from YouTube, Spotify, TMDB or IGDB are a shared cache that is not tied to you and is not deleted with your account.

Children

Picksjar is not intended for children under 17, and we do not knowingly keep their data.

Changes

If this page changes in a way that matters, the effective date above changes with it. Questions and requests about your data go to support@picksjar.com.

What we store

From your Google account, if you sign in with Google: your name, email address, profile picture and Google account ID.

If you sign in with an email code: your email address and when it was verified. There is no password — we never see or store one.

What you choose: your handle and display name.

What you make: your jars (titles, descriptions, tags), your picks, the jars you subscribe to, and the items you save for later.

Housekeeping: a sign-in session so you stay signed in, and per-account counters that limit how many searches an account can run, so one account can't exhaust the search quota for everyone.

How we use it

Our use of information from your Google account follows the Google API Services User Data Policy, including its Limited Use requirements.

Who else is involved

Google handles Google sign-in, and Google Analytics counts visits: which pages are opened, from which country, on what kind of device, and how people move through the site. It sets a cookie so it can tell a returning browser from a new one. It receives the pages you open, never your name or email.

Resend delivers sign-in code emails. It receives your email address and the code, nothing else.

Convex stores the data above and runs the app's backend.

Vercel hosts the site. We use Vercel Analytics, which counts page views in aggregate and does not use cookies or identify you.

YouTube, Spotify, TMDB and IGDB supply the titles, artwork and players. When you search or paste a link, the search text goes to Spotify's, TMDB's or IGDB's service from our server, without your identity. When you press Play on a card, a YouTube (privacy-enhanced mode) or Spotify player loads on the page; from that moment those services may set their own cookies under their own privacy policies. Nothing loads from them until you press Play.

Deleting your account