LobbyRoom is a social app for talking about TV shows and films. This page explains, in plain English, what the app stores about you, why, who else is involved, how long it is kept and what you can ask for. Last updated 14 September 2026.
LobbyRoom is run personally by Aaron Heywood in the United Kingdom. There is no LobbyRoom company. Aaron Heywood is the data controller, which means he decides what is collected and why, and is responsible for it.
For anything on this page, email lobbyroomteam@gmail.com.
Things everyone can see. Your profile (username, display name, bio, Top 4, favourite genres), your posts, reviews, discussions, replies and collections, any images you attach to them, your ratings, who you follow, and your upvotes. Individual ratings are shown on your profile and also feed into community averages.
Things only you and the app can see. Your email address and authentication information; passwords are handled by the authentication system and stored only as one-way hashes, never in readable form. Also: your direct and group messages and any images in them, who is in each conversation and when you last read it, your blocks, your messaging privacy setting, your notifications and your saved discussions.
Fault records. When something breaks, the app records the error message, where it happened, your browser type and which version of the app you were on. It does not record who you are, or the text of your posts, replies or messages.
Running the app and sending you account emails: these are how we deliver what you signed up for, so our ground is performance of our contract with you.
Personalising what you see, safety and security, and keeping the app working: our ground is legitimate interests. Those interests are keeping the app useful and relevant to you, protecting people from abuse and unwanted contact, and keeping the app running correctly. You can object to any of these — see your rights below.
Lovable Cloud hosts the app and stores everything described above on our behalf.
Lovable's email infrastructure receives your email address so account emails can be sent from auth.lobbyroom.app.
TMDB supplies show, film and episode information. Those lookups are made by our server and carry only what is being looked up — a title or your search text — never anything that identifies you. Artwork is different: posters, backdrops and episode stills load straight from TMDB's image servers into your browser, so TMDB sees your IP address, your browser and the page you were on.
LobbyRoom does not currently use advertising trackers or third-party behavioural analytics. We do not sell your information or share it for advertising.
The database, accounts, uploaded images and fault records are stored in Ireland, in the European Union.
We are asking our platform provider to confirm whether any part of their service involves handling or accessing this data from outside the UK or the EEA. Until we have that in writing we are not claiming anything about it, and this page will be updated when we do.
While your account is open we keep your account and content until you delete it or delete your account.
When you delete a post, review, discussion, collection or reply, it goes straight away, along with its replies, its upvotes and the notifications about it. One exception for readability: a reply that already has replies underneath it leaves an empty "removed" placeholder so the conversation still makes sense — its text and image are gone immediately. Attached images are not erased at that exact moment; an automatic sweep removes unused uploads, normally within about an hour.
When you delete your account, everything tied to it goes, including your uploaded images and your messages, which also disappear from the conversations of the people you were talking to.
Fault records are deleted automatically once they are 90 days old.
Deleting means removal from the live service. Daily backups are taken and kept for roughly 14 days, so a copy can survive in a backup for a short period before it ages out.
Only what is strictly necessary: the session that keeps you signed in, and your recent searches, which stay in your own browser. There is no advertising or analytics storage. Clearing your browser's site data removes both.
Your feed and the title suggestions use who you follow, your ratings, your Top 4, the titles you follow and community averages. If you choose favourite genres, they are also used to personalise title discovery — the suggestions you see when you open Search. It only affects the order things appear in. No automated decision is made about you that has a legal or similarly significant effect.
You must be 16 or over to use LobbyRoom. We do not ask for your date of birth. If we learn that an account belongs to someone under 16, we will remove it.
When you finish creating your account (or when we ask you to confirm again), we keep a private record that you confirmed you are 16 or over and agreed to our Terms of Use and Community & Safety Rules: the time, and which version of each policy you saw. We also record when you acknowledge an updated Privacy Policy. This record is needed to show the agreement between us, is visible only to you, and is deleted with your account. Acknowledging this Privacy Policy is not consent; it just confirms you have been told how LobbyRoom works.
Every table has access rules enforced by the database, so people can only reach what they are entitled to. Messages are readable only by the people in that conversation. Uploaded images live in private storage with size limits and are served through the app. Passwords are stored only as one-way hashes, traffic uses HTTPS, and administrative keys stay on the server.
No service can promise perfect security. Messages are not end-to-end encrypted, and whoever administers the app can technically reach stored data.
Under UK data protection law you can ask for a copy of your information, ask us to correct it, ask us to delete it, object to or ask us to restrict how we use it, and ask for a portable copy. Which of these apply depends on the situation and on the legal ground involved, so occasionally we may not be able to do all of what is asked — we will always explain why.
Email lobbyroomteam@gmail.com to exercise any of them. You can also delete your account yourself, at any time, from Settings.
If you are unhappy with how we have handled your information you can complain to the Information Commissioner's Office (ICO) at ico.org.uk.
If what we do changes, this page changes with it, and the date at the top is updated.
See also the Terms of Use and About & Credits.