Pickpile · Last updated: 20 July 2026
Pickpile turns films and series you find on TikTok and Instagram into a personal watchlist, and lets you share what you watch with friends. This policy explains what data the app handles.
The core app works with no account at all. Your watchlist (saved titles, your watched/skipped status, your selected streaming services and region) is stored locally on your device. If you never sign in, it stays there.
Signing in is optional and only needed for the social features (friends, reviews, match night). We use Sign in with Apple, and our backend is hosted on Supabase (EU region), which acts as our data processor. When you have an account we store:
Your reviews and comments are visible only to you and to friends you have accepted. Pickpile has no public feed.
Public profile page. You can choose to give your profile a page on the open web, at pickpile.app/u/your-handle. This is off for every account until you turn it on, in Settings under Privacy. While it is on, anyone on the internet can read that page without the app and without an account, and search engines can find and index it. The page shows your display name, handle, bio, the month you joined, and whichever of your shelves your per-section settings allow: your favorites, what you are currently watching, collections you have published as a link, and your reviews. The strip across the top of the page shows the posters of the titles you last marked watched. Collections set to "friends" never appear on it, and your watchlist is only listed where you marked an entry public. Turning the switch off takes the page down within ten minutes; search engines may keep a cached copy for longer, which is outside our control. Blocking someone does not hide the page from them, because a page on the open web cannot know who is reading it.
Settings → Delete account removes your account and everything attached to it (profile, synced watchlist, reviews, comments, likes, friendships, notification tokens, connected Instagram accounts) from our servers immediately. The local copy on your device is removed with the app.
When you share a TikTok/Instagram link into Pickpile, that link (and the public caption it points to) is sent to third-party services solely to recognise the film and fetch its details:
These requests contain the shared link and caption text — not your identity.
You can send a reel as a direct message to our Instagram account @pickpile.app, or tag @pickpile.app in a comment under one, and Pickpile adds the film to your watchlist. Instagram is a service of Meta Platforms, and Meta passes us the following when you do:
We only receive messages sent to @pickpile.app and comments that tag it. We get nothing else from your Instagram account.
We use this solely to recognise the film. The caption, and the video when the caption is not enough, go to Google Gemini, and the title goes to TMDb, as described above. If you have connected your Instagram account in the app (Settings → Instagram), the film is added to your watchlist and we send you a notification and a reply on Instagram. If you have not, we answer once with a code that connects your account.
The copy of the video is deleted after 7 days. If you never connect an account, what you sent us is deleted after 30 days. If you have connected one, it is deleted with your account, and you can disconnect at any time under Settings → Instagram. How Meta handles your data is described in Instagram's privacy policy.
Pickpile shows ads via Google AdMob. To do this, AdMob may access your device's advertising identifier and similar data to serve and measure ads. On first launch the app asks for your permission via Apple's App Tracking Transparency prompt; if you decline, ads are served without that identifier. See Google's policy for how AdMob handles data.
If you agree to it, Pickpile records product analytics through PostHog, hosted in the European Union. We ask once inside the app and you can change your mind at any time under Settings → Privacy. Until you agree, nothing is collected and nothing is stored locally waiting to be sent.
What is recorded: which screens you open, how long you stay on them, and which actions you take (for example saving a film, rating one, or starting a match night). Events are linked to your account so we can tell one person's session from another's.
If you agree, the app also records your screen while you use it, and sends a report when it crashes. In those recordings everything you type and every message in your chats is blacked out before the recording leaves your device. Films and posters on screen are not blacked out, so a recording shows the same library you were looking at. Recordings are deleted after 30 days.
What is never recorded: your search terms, the text of your reviews, or your messages. Neither as data nor in the recordings. This data is not sold, not shared with advertisers, and not combined with the advertising identifier described above.
Crash diagnostics also go to Apple through MetricKit.
This website measures its audience with PostHog, hosted in the European Union, and asks you first. Nothing is measured and nothing is stored in your browser until you answer the banner.
If you choose Okay, PostHog sets one first-party cookie so repeat visits are recognised as the same visit, and it may record how pages are used on this website, which is how a broken page gets noticed. Those recordings are deleted after 30 days. Everything you type into a form on this site is blacked out before a recording leaves your browser.
If you choose Only count visits, this website behaves the way it always has: no cookies, nothing stored in your browser, and no screen recording. Visits are counted using a one-way hash of your IP address, browser and the day's date, computed on PostHog's servers in the EU using a random value that is discarded at the end of each day. The hash cannot be turned back into an IP address, and tomorrow's hash for the same visitor is a different one.
Either way, nothing on this website is linked to your Pickpile account, and the choice is yours to change by clearing this site's cookies and storage.
Pickpile is not directed at children under 13.
You can access, export or delete your data by contacting us, or delete everything yourself from Settings → Delete account. If you are in the EU/UK you also have the right to object to processing and to lodge a complaint with your data protection authority.
We may update this policy; the "last updated" date above reflects the latest version.
Questions about privacy, or a data request? Use the Pickpile contact form — it reaches us directly and we reply to every message.
Note: this is a plain-language policy that reflects the app's actual data flows. Review it for your jurisdiction before relying on it.
This page is available in nine languages. The English version is the authoritative one; a translation is provided for convenience.