Privacy Policy
Last updated: October 10, 2026
Haukley ("Haukley", "we", "us") runs the haukley.com website and the Haukley apps for Roku, Amazon Fire TV, Google TV / Android TV, Apple TV, LG and Samsung smart TVs, and iPhone (together, the "Service"). This policy explains what we collect, why, and the choices you have. Haukley is free and is meant to be supported by ads. The TV and iPhone apps need no account; watching on haukley.com needs a free account.
What we collect
| Information | Why | Where it lives |
|---|---|---|
| Your email address, if you join the launch list on haukley.com | To send you one launch announcement (and filmmaker updates if you signed up as a filmmaker) | Our database (Supabase), in the United States |
| Film submissions: your name, email, the film's details, the screener link and password you share, and a one-way hash of your IP address (to limit spam) | To review your film and reply to you about distribution | Our database (Supabase), in the United States. The IP hash sits in a daily counter that is deleted after two days |
| Your account on haukley.com/watch: your email address and password (the password is stored only as a one-way hash by our authentication provider). If you choose "Continue with Google" when it is offered, Google shares your name, email address and a link to your profile picture instead of a password | To sign you in | Our database (Supabase), in the United States |
| Viewer profiles on haukley.com/watch: each profile's name, which of our built-in avatar pictures it uses, and whether it is a Kids profile | "Who's watching?", and limiting a Kids profile to family titles | Our database (Supabase), linked to your account and visible only to you |
| Watch progress and "My List" on haukley.com/watch, per profile | Continue Watching and resuming where you left off, on any browser you sign in to | Our database (Supabase), linked to your account and visible only to you |
| Profiles, watch progress and "My List" in the TV and iPhone apps | Continue Watching and resuming where you left off | Stored only on your device; not sent to us |
| Ad events: which title an ad played in, the app platform, the ad's ID, a random per-viewing session ID, and a timestamp | To pay filmmakers their share of ad revenue for each title | Our database (Supabase). These events contain no name, email or device identifier |
| A one-way hash of your IP address, counted per hour when an app reports ad events | To stop anyone flooding the ad counts | Our database (Supabase), kept separately from the ad events and deleted after two days |
| Local weather on Haukley Weather: your IP address, used once to estimate your city. If you choose, a ZIP code, a city you pick, or your device's location (only when you tap "Use my exact location", rounded to about a kilometre) | To show the forecast for your area | Not stored and not logged. The IP address is looked up in memory and discarded; we don't record these requests. Your ZIP code or city choice is saved only on your device (browser or app storage). City-level location from your IP comes from DB-IP's IP-to-city data (db-ip.com, CC BY 4.0); forecasts come from the U.S. National Weather Service |
| Information collected by ad partners, if and when ads are shown (see below) | To show ads, measure them and prevent fraud | Held by the ad partner under its own policy |
| Standard web server logs (IP address, browser, pages requested) | Security and keeping the site running | Our web server; kept for a limited time |
Stored in your browser
When you sign in on haukley.com/watch, your browser keeps your login (a session token) in its local storage so you stay signed in; signing out or deleting your account removes it. The profile you picked is remembered in session storage for that browser tab only. We don't set any advertising or analytics cookies of our own.
Service providers
- Supabase hosts our database and sign-in, in the United States (supabase.com/privacy).
- DigitalOcean hosts haukley.com and stores the video files, and its content delivery network serves the videos (digitalocean.com/legal/privacy-policy).
- Cloudflare carries the traffic between you and Supabase and delivers the video files, so it sees your IP address in transit (cloudflare.com/privacypolicy).
- Google Fonts supplies the typefaces on haukley.com, so your browser requests them from Google, which sees your IP address (policies.google.com/privacy).
- Google also provides "Continue with Google" sign-in, only if you choose it.
Advertising
Haukley plans to show ads, and the apps and website are built to play them, but no ads are being shown yet: today every ad request goes to a placeholder of ours that returns no ad. The ad technology is already built in: Google's Interactive Media Ads SDK on the web, iPhone, Apple TV, Fire TV, Google TV, LG and Samsung TVs, and the Roku Advertising Framework on Roku. Even with no ads playing, these can contact Google or Roku when a video starts (for example, the website and the LG and Samsung apps load Google's SDK from Google's servers). When ads start, these partners may collect device information such as an advertising identifier, IP address, and ad-interaction data to deliver and measure ads, and we will update this policy. Their use of that information is governed by their own privacy policies:
- Google: How Google uses information from sites or apps that use its services
- Roku: Roku Privacy Policy
You can limit ad personalization in your device settings — for example "Limit ad tracking" on Roku, "Opt out of interest-based ads" on Fire TV and Android, and the Tracking setting on iPhone and Apple TV.
What we don't do
- We don't sell your personal information or share your email address with advertisers.
- We don't collect payment information, and the TV and iPhone apps don't require an account.
- We don't knowingly collect personal information from children under 13. A Kids profile is a filter set up by the account holder, not an account for a child. If you believe a child has given us personal information, email privacy@haukley.com and we'll delete it.
How long we keep it
Launch-list emails are kept until you unsubscribe or ask us to delete them. Film submissions are kept while we review them and, for films we don't carry, deleted within 12 months. Ad events are kept as long as needed to calculate and audit filmmaker payments; the hashed-IP counters are deleted after two days. Account data, profiles and web watch progress are kept until you delete your account, which you can do anytime from the account menu on haukley.com/watch; deletion erases them immediately. In the TV and iPhone apps, profiles and watch progress stay on your device until you delete the app or clear its data.
Your rights
Wherever you live, you can ask us to access, correct or delete the information we hold about you, and you can unsubscribe from any email we send. Email privacy@haukley.com; we'll answer within 30 days and won't treat you differently for asking.
- California (CCPA/CPRA): you have the right to know, access, correct and delete your personal information, and to opt out of its sale or sharing. We don't sell personal information or share it for cross-context behavioral advertising.
- EEA and UK (GDPR / UK GDPR): we use your account data to provide the service you signed up for (performance of a contract), and launch-list emails with your consent, which you can withdraw anytime. You also have the rights to data portability, to restrict or object to processing, and to complain to your local data-protection authority. Our providers store data in the United States.
Security
We use HTTPS everywhere. The public apps and website can only add records (launch-list sign-ups, film submissions, ad events) and can never read them back; your account's profiles, watch progress and list are readable only by you while you're signed in; and we limit who can access stored data.
Changes
If we change this policy, we'll update the date above, and for material changes we'll give notice on haukley.com.
Contact
Questions about privacy: privacy@haukley.com.