Privacy Policy
Last updated: August 18, 2026
This Privacy Policy explains how BigList collects and uses personal data when you browse the service, create an account, or use its features. For questions about this policy or your data, contact us at [email protected].
1. Information We Collect
We collect only the information needed to operate and protect the service:
- Account data: your name, email address and Google account identifier when you choose Google Sign-In.
- Content and activity: lists, visibility settings, ratings, reviews, comments, likes and private notes that you create or save.
- Technical data: IP address, browser user agent, session identifiers and security-related logs generated when you use the service.
- Cookie preferences: your choice about optional analytics is stored locally in your browser.
When you sign in with Google, Google provides the account data above through OAuth. We do not receive or store your Google password.
2. How and Why We Use Information
- To create and maintain your account, authenticate you and provide lists, notes and community features.
- To display the content you choose to make public and to respect the visibility of private content.
- To secure the service, prevent abuse, diagnose faults and improve reliability.
- With your consent, to measure aggregated use of the site through Google Analytics and, if introduced, to support advertising.
Where applicable, we process account and service data to perform our agreement with you, process security data for our legitimate interests in keeping BigList safe, and process analytics or advertising data on the basis of your consent.
3. Public and Private Content
Your public lists, ratings, reviews, comments and profile information may be visible to anyone who can access BigList and may be indexed by search engines. Private lists and notes are intended to be visible only to you and authorised service administrators where access is necessary to operate or support the service. Do not include sensitive personal data in public content.
4. Service Providers and External Sources
We use Google for sign-in and, only if you consent, Google Analytics. If we introduce advertising, advertising partners will be allowed to process data only after you opt in to the Advertising category. Our catalogue may display data or media sourced from services such as TMDB, IGDB and Google Books. When your browser loads content from an external provider, that provider may receive technical information such as your IP address and browser details under its own privacy policy.
We do not sell personal data. We may disclose data where required by law or when reasonably necessary to protect the rights, safety and security of BigList, its users or others.
5. Cookies and Similar Technologies
BigList uses essential cookies and local browser storage to provide core functionality. These are necessary for features such as maintaining a secure session and protecting requests against forgery. They cannot be switched off through the banner.
Google Analytics and advertising cookies are optional. Google Analytics is not loaded until you actively allow analytics in the cookie banner. Advertising is not currently active and will only be introduced after you opt in to the Advertising category. You can withdraw or change these choices at any time through .
| Category | Purpose | Storage |
|---|---|---|
| Essential | Session and request security | Laravel session cookies; up to 120 minutes of inactivity by default |
| Preference | Remember your analytics choice | Local browser storage |
| Analytics | Understand aggregate site use | Google Analytics; only after consent |
| Advertising | Show relevant advertising through advertising partners | Not currently active; consent required before use |
6. Retention and Security
We retain personal data for as long as your account is active or as otherwise needed to provide the service, resolve disputes, meet legal obligations and enforce our agreements. We use reasonable technical and organisational measures designed to protect data, but no online service can guarantee absolute security.
7. Your Privacy Rights
Depending on where you live, you may have rights to request access, correction, deletion, restriction of processing, objection, or portability of your personal data. You may also withdraw consent to analytics at any time without affecting processing that occurred before withdrawal.
To exercise a right or request account deletion, email [email protected] from the email address associated with your account. You may also have the right to complain to your local data protection authority.
8. Changes to This Policy
We may update this policy when our practices or the service change. We will publish the revised version here and update the date above. Continued use of BigList after an update is subject to the revised policy.