Back to Home

Privacy Policy

Effective: May 23, 2026

This Privacy Policy (“Policy”) describes how rHater (“rHater”, “we”, “us”, or “our”) collects, protects, uses, and shares Personal Data collected from users (“User”, “you”, or “your”) of the rHater website, mobile applications, APIs, and related services (collectively, the “Service”).

We process your personal information in compliance with the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA/CPRA), and other applicable data protection legislation. By using the Service, you consent to the data practices described in this Policy and ourTerms of Service.

1. Owner & Data Controller

The Data Controller responsible for processing your Personal Data is:

Andrea Surdo

Via Romolo Gessi 1, Rome (RM) 00153, Italy

Owner Contact Email: andrea.surdo13@gmail.com

Legal Inquiry Email: legal@rhater.com

2. Types of Data Collected

Among the types of Personal Data that this Application collects, either directly or through trusted third parties, there are:

  • Usage Data: IP address, browser type, operating system, page views, time spent on pages, clickstream data, and country of origin.
  • Trackers: Small text files (Cookies) and tracking scripts to manage sessions, analytics, and authentication.
  • Account Log-in Info: Username, email address, password, profile picture, movie ratings, and movie review text provided during account creation.

3. Detailed Information on Third-Party Processors

We work with trusted third-party service providers to host, secure, and operate the Service. These processors handle your data as described below:

Vercel (Vercel Inc.)

Purpose: Web application hosting and backend content delivery.

Data Processed: Usage Data, device characteristics, connection logs.

Place of Processing: United States – Privacy Policy

Supabase (Supabase, Inc.)

Purpose: Database hosting, user authentication, and profile asset storage.

Data Processed: Email address, encrypted passwords, authentication tokens, user reviews, ratings, groups, and logs.

Place of Processing: Singapore / Globally – Privacy Policy

Google OAuth (Google Ireland Limited)

Purpose: Single Sign-On (SSO) login capabilities.

Data Processed: Name, email address, avatar image URL, profile identifiers.

Place of Processing: Ireland – Privacy Policy

4. Methods & Place of Processing

Processing Methods. The Owner processes the Data of Users in a proper manner and takes appropriate security measures (encryption, secure databases) to prevent unauthorized access, disclosure, modification, or unauthorized destruction of the Data.

Place of Processing. The Data is processed at the Owner’s operating offices and in any other places where the parties involved in the processing are located. Depending on the User’s location, data transfers may involve transferring the User’s Data to a country other than their own.

5. GDPR & European Consumer Rights

If you are located in the European Union, EEA, or United Kingdom, you hold the following rights under the GDPR:

  • Access & Portability: Request a copy of all personal data we hold about you in a structured, machine-readable format.
  • Rectification: Request corrections to any inaccurate or incomplete personal data.
  • Erasure (“Right to be Forgotten”): Request that we permanently delete your profile, ratings, reviews, and memberships.
  • Restriction of Processing: Ask us to suspend the processing of your data.
  • Withdraw Consent: Revoke your consent to our processing activities at any time.

You also have the right to lodge a complaint with your local Data Protection Authority.

6. Account Deletion & Data Erasure (Compliance)

We respect your right to control your personal data. We offer both automated and manual methods to permanently delete your account and all associated ratings, reviews, and group memberships:

  • Within the Web Application: Log in, navigate to My Profile → Edit Profile → click “Delete Account”. This triggers an immediate, permanent cascading delete.
  • Manual Requests (No Login Required): If you cannot access your account, have uninstalled the app, or want to make a request directly, send an email to legal@rhater.com or andrea.surdo13@gmail.com. We will process and confirm your deletion request within 30 days.

7. Cookies & Tracking

rHater uses cookies and similar trackers to authenticate sessions, remember preferences, and analyze app performance. You can control cookie preferences directly through your browser settings, or by clicking the “Your Privacy Choices” link in our global footer.

8. Additional Legal Details

For more details on Iubenda legal links, privacy guidelines, and preferences, you can view the official hosted policy records at: