Privacy Policy

Last updated: 29 June 2026

1. Who we are

TheReviewMonk operates thereviewmonk.com (the “Service”). Contact us at thereviewmonk@gmail.com.

2. What we collect and why

Account data

When you sign in, we collect your email address and, if you use Google, the profile information Google shares (name, photo). We use this to identify your account and personalise your experience. We store a hashed (not raw) version of your IP address alongside ratings and reviews for spam and abuse prevention.

Content you submit

Ratings, written reviews, lists, and watchlist entries you create. These are stored to power your profile and contribute to our aggregate scores.

Consent records

When you accept our Terms of Service and this Privacy Policy, we log which version you accepted and when. This is a legal requirement for operating a platform that hosts user content under Indian intermediary rules.

Usage data and analytics

We use privacy-preserving analytics that do not set cookies or collect personally identifiable information. We may collect aggregate page-view data to understand which features are used.

Third-party sign-in

If you sign in with Google, we receive only the data Google provides (email, name, profile photo). We do not receive your Google password.

3. How we use your data

To operate your account and provide the Service.
To compute aggregate scores and display your public activity (if enabled).
To send transactional emails — magic-link sign-in and account notices only. We do not send marketing email.
To detect and prevent spam, abuse, and review manipulation.
To comply with legal obligations (grievance handling, DPDP Act, etc.).

4. Who we share it with

We do not sell your data. We share it only with:

Resend — transactional email delivery (magic-link sign-in).
Vercel — hosting and compute infrastructure.
Neon — database hosting (Postgres, region: US East).
Cloudflare — CDN, image hosting, and bot protection (Turnstile).
Google — if you use Google sign-in.
Law enforcement or courts — if required by a valid legal order.

5. Your rights

Under the Digital Personal Data Protection Act (DPDP Act) and applicable law, you have the right to access, correct, and erase your personal data. To exercise these rights, email thereviewmonk@gmail.com or contact our Grievance Officer (see Content & Takedown Policy).

You can also delete your account and all associated data directly from the sign-in page on your first visit after our relaunch.

6. Data retention

We retain your account data and content for as long as your account is active. If you delete your account, we erase or anonymise your personal data promptly. We may retain anonymised aggregate data (e.g. score contributions) indefinitely. Moderation records are retained for legal compliance and audit purposes.

7. Cookies

We use an essential session cookie (set by Auth.js) to keep you signed in. We do not use advertising or tracking cookies. Our analytics are cookieless.

8. Children

The Service is not directed at anyone under 18. We do not knowingly collect data from minors. If you believe a minor has created an account, contact us and we will delete it.

9. Changes

We will update this policy when our practices change and post the new version here with a revised “Last updated” date. Significant changes will prompt you to re-accept before your next write action.

10. Contact

Privacy questions: thereviewmonk@gmail.com. For content or takedown complaints, see our Content & Takedown Policy.