Privacy

Picksjar is a place to keep and share the media you recommend. This page says what we store, why, who else is involved, and how to remove it. Picksjar is run by an independent developer; questions about your data go to support@picksjar.com. Effective 10 September 2026.

What we store

From your Google account, when you sign in: your name, email address, profile picture and Google account ID. We use Google for sign-in only — we never see or store a password.
What you choose: your handle and display name.
What you make: your jars (titles, descriptions, tags), your picks, the jars you subscribe to, and the items you save for later.
Housekeeping: a sign-in session so you stay signed in, and per-account counters that limit how many searches an account can run, so one account can't exhaust the search quota for everyone.

What is public and what is private

Your profile (handle, display name, picture), your jars and your picks are public pages that anyone can open without an account. A jar shows how many people subscribe to it, never who. Your subscriptions and your saved items are private to you. Your email address is never shown to anyone.

How we use it

To run picksjar: to show your jars and picks under your name, to build your Home feed from the jars you follow, to keep your saved items, and to answer you when you write to support. We do not sell your data, we do not show advertising, and we do not use your data to train anything.

Our use of information from your Google account follows the Google API Services User Data Policy, including its Limited Use requirements.

Who else is involved

Google handles sign-in, and Google Analytics counts visits: which pages are opened, from which country, on what kind of device, and how people move through the site. We run it without cookies, so it cannot recognise you from one visit to the next. It receives the pages you open, never your name or email.
Convex stores the data above and runs the app's backend.
Vercel hosts the site. We use Vercel Analytics, which counts page views in aggregate and does not use cookies or identify you.
YouTube, Spotify and TMDB supply the titles, artwork and players. When you search or paste a link, the search text goes to Spotify's or TMDB's service from our server, without your identity. When you press Play on a card, a YouTube (privacy-enhanced mode) or Spotify player loads on the page; from that moment those services may set their own cookies under their own privacy policies. Nothing loads from them until you press Play.

Cookies

Picksjar sets what it needs to keep you signed in and nothing else. There are no advertising or tracking cookies. Google Analytics runs in its cookieless mode and sets none. Third-party players set their own cookies only after you start playback.

Deleting your account

Open Account and choose Delete account. This permanently removes your profile, every jar and pick, your subscriptions in both directions, your saved items, and the link to your Google account. There is no undo. Titles and artwork that Picksjar fetched from YouTube, Spotify or TMDB are a shared cache that is not tied to you and is not deleted with your account.

Children

Picksjar is not intended for children under 17, and we do not knowingly keep their data.

Changes

If this page changes in a way that matters, the effective date above changes with it. Questions and requests about your data go to support@picksjar.com.

What we store

From your Google account, when you sign in: your name, email address, profile picture and Google account ID. We use Google for sign-in only — we never see or store a password.

What you choose: your handle and display name.

What you make: your jars (titles, descriptions, tags), your picks, the jars you subscribe to, and the items you save for later.

Housekeeping: a sign-in session so you stay signed in, and per-account counters that limit how many searches an account can run, so one account can't exhaust the search quota for everyone.

How we use it

Our use of information from your Google account follows the Google API Services User Data Policy, including its Limited Use requirements.

Who else is involved

Google handles sign-in, and Google Analytics counts visits: which pages are opened, from which country, on what kind of device, and how people move through the site. We run it without cookies, so it cannot recognise you from one visit to the next. It receives the pages you open, never your name or email.

Convex stores the data above and runs the app's backend.

Vercel hosts the site. We use Vercel Analytics, which counts page views in aggregate and does not use cookies or identify you.

YouTube, Spotify and TMDB supply the titles, artwork and players. When you search or paste a link, the search text goes to Spotify's or TMDB's service from our server, without your identity. When you press Play on a card, a YouTube (privacy-enhanced mode) or Spotify player loads on the page; from that moment those services may set their own cookies under their own privacy policies. Nothing loads from them until you press Play.

Deleting your account