Privacy policy
Last updated November 9, 2026
ShowMyShelf (the website at showmyshelf.com and the ShowMyShelf apps) is run by Invisi Studio ("we"). This page explains what we collect, why, who can see it, and how to delete it. Questions: support@showmyshelf.com.
The short version
- We keep what it takes to run your account and your room, and nothing more.
- No ads, no analytics, no tracking cookies. We don't sell or share your personal information.
- Your email address is never shown to other people.
- You choose who can see your room, and you can delete your account and everything in it at any time.
What we collect
- Your account: your email address, your name, and a profile picture if Google or Discord provides one.
- Your password, if you set one: only a one-way hash of it, which can check a password but can't be turned back into it.
- How you sign in: which ways you use (email, Google, Discord) and the account ID Google or Discord gives us.
- Your room: its handle, title, about line and who can see it, your shelves, the titles on them and any notes you write.
- Sign-in records: to keep you signed in we store a hash of your session, which lasts up to 180 days. Emailed sign-in codes are stored as hashes and expire after 10 minutes. To stop people guessing codes and passwords, we keep recent sign-in attempts with a hashed form of the network address they came from, and delete them after a day.
Signing in with Google or Discord
If you sign in with Google or Discord, they tell us your name, your email address (if they have confirmed it), your profile picture and your account ID with them. We don't get your password, contacts, messages, servers or anything else. If the email address matches an account you already have here, you're signed into that account.
Cookies and the app
The website uses two cookies, both needed to sign in, and no others:
sms_sessionkeeps you signed in, for up to 180 days or until you sign out.sms_oauthlasts 10 minutes while you sign in with Google or Discord, to make sure the sign-in that comes back is yours.
The app keeps your session in your device's secure storage (the iOS Keychain or Android Keystore).
How we use it
Only to run ShowMyShelf: to sign you in, show and save your room, and email you sign-in codes when you ask for one. We don't send marketing email, we don't show ads, and we don't sell your personal information or share it for advertising.
Who can see your room
In your room settings you choose who can see it:
- Only me: nobody else.
- Anyone with the link: people you give the link to. It isn't listed anywhere.
- Everyone: anyone who visits its address.
People who can see your room see its title, about line, handle, shelves, titles and notes, and your name and profile picture. They never see your email address. When two rooms are compared, each person sees only what the other's settings allow.
Services we rely on
- Cloudflare hosts the website and app server, stores the data and sends our sign-in emails.
- Google and Discord, if you choose to sign in with them.
- The Movie Database (TMDB) provides film and TV titles. When you search, our server sends your search words to TMDB, without anything that identifies you.
- Poster images load straight from where they are hosted, such as TMDB and YouTube. As with any image on the web, those sites can see your network address when your browser or app loads one.
Our data is stored on Cloudflare's network and may be processed in the United States and other countries.
How long we keep it, and deleting it
We keep your account and room until you delete them. You can delete your account at any time from your account page: that removes your account, room, shelves, notes and sessions straight away. Copies can remain in our database backups for up to 30 days before they are gone for good.
Your choices and rights
You can see and change your room and notes at any time, and delete your account as above. To get a copy of your data, or for anything you can't do yourself, email support@showmyshelf.com. If you live in California, you have the right to know what personal information we have about you, to have it corrected or deleted, and not to be treated differently for using these rights. We don't sell or share personal information as California law defines those terms.
Children
ShowMyShelf is not for children under 13, and we don't knowingly collect information from them. If you believe a child under 13 has an account, email us and we will delete it.
Security
Everything travels over encrypted connections (HTTPS). Passwords, sessions and sign-in codes are stored only as hashes.
Changes
If we change this policy we will update the date at the top. If a change matters, such as collecting something new, we will tell you before it takes effect.