Privacy policy

You can browse, search and read everything without an account. Vumble stores nothing about you when you do. There are no advertising or analytics trackers on the site, and our fonts are served by us rather than a font service.

• Your email address, so we can send you a sign-in link and recognize you when you come back. It is never shown to anyone.
• A handle made from the part of your email before the “@” (for example “sam-lee”). It is public: it appears next to anything you publish.
• The age bands you watch with, such as “3–4 years”, if you choose any. They are bands on your account, never a child’s name, birthday or profile, and they only change which scores you see first.
• Your star ratings of titles, and the optional age band you watched each one with. Only averages and counts are shown publicly, never who rated what.
• Reviews you write. These are public under your handle.
• Your library: the titles you save and the folders you sort them into, including any folder you mark as approved for an age.
• Your settings: the streaming services your household has and the household rules you choose (such as “no ads”), and whether you have seen the first-time setup.

Your library, age bands, services and household rules are private to your account. They are not shown to other people.

Critic applicants also give us their professional credential, a short bio, a link to their practice or publication, any conflicts of interest, and the evidence and writing samples we use to verify them. The credential, bio, link and conflicts are shown publicly once a critic is verified, along with their reviews. The evidence and writing samples are seen only by the editors who decide applications.

Vumble does not have child accounts. Children do not sign in, and we do not collect children’s names, birthdays, photos or any other information about a child. We do not record what anyone watches.

Watch mode, the screen a parent can hand to a child, remembers its timer and bedtime in your own browser only. It sends nothing back to us.

If you continue with Google or Facebook, that service tells us your email address, your name and your profile picture. We use only the email address. We do not use your name or picture: your handle still comes from your email, and your name is never shown next to anything you do. We ask for nothing else — no contacts, friends, posts, Gmail or Drive.

Supabase, which runs our sign-in, keeps the details the service sent alongside your account record. They are deleted with your account.

When you sign in we set cookies that keep you signed in. If you turn on household rules, a cookie also records which ones are on — for example “no ads” — so the home page and browse can list the right titles straight away; it holds nothing else, and it is removed when you sign out or turn the rules off. We set no other cookies. Watch mode keeps its timer settings in your browser’s local storage.

• Supabase hosts our database and runs sign-in, including sending the sign-in emails.
• Netlify hosts the website.
• Google and Facebook, only if you choose to sign in with them.
• YouTube, Vimeo and PBS host the videos. Vumble does not host any media. When you play a preview or a video, your browser connects directly to the service that hosts it, and that service’s own privacy policy applies. YouTube videos are played through YouTube’s privacy-enhanced (youtube-nocookie.com) player. Links to watch elsewhere take you to that service.

Supabase and Netlify keep their own request logs, which include IP addresses. We do not sell your information or share it with advertisers.

You can ask for your account and its data to be deleted from Settings. A person carries out each request. What is deleted, and how.

When what we store changes, this page changes with it, and the date at the top says when.