Privacy policy
This policy describes what Sarita collects, why, and what you can do about it. It is written to describe what the software actually does rather than to cover every eventuality.
Who we are
Sarita is a film and television recommendation site. For data protection purposes the data controller is WikiTribune, Ltd., which operates Sarita, of WikiTribune, Ltd., Mailbox 018, 272 Kensington High Street, London, W8 6ND, United Kingdom. Questions about this policy, or any request described below, can be sent to admin@sarita.ai.
What we collect
We hold three kinds of information, and no more than these.
Your account
- Email address — required to create an account and to sign in.
- Display name and handle — optional, and chosen by you. Your handle is how other people find and add you, so it is visible to anyone who knows it.
- Authentication is handled by Amazon Cognito. If you sign in with Google, we receive your email address and name from that provider. We never receive your password for any service, including ours — Cognito holds it, and we cannot read it.
What you do here
- Titles you mark as watched, like, or add to a watchlist, and the ratings you give.
- Your friends, follows, and anyone you have blocked.
- Whether you found a particular recommendation good or bad.
Before you have an account
You can rate and save titles without signing up. Those actions are stored in your browser only — they are not sent to us and we cannot see them. If you later create an account, they are copied into it. If you clear your browser, they are gone, and we have no copy.
Invitations, including to people without an account
Someone using Sarita can invite a particular person to choose films and television with them, by email or by sharing a link. If somebody gives us your email address that way, we hold it to deliver that one invitation and to honour what you decide about it.
- We send one message. There is no reminder, ever.
- The address is deleted once the invitation is accepted, declined or expires, and within 30 days in any case.
- It is never used for marketing, never added to a list, never used to build a profile of you, and never used to train models.
- Without making an account you can decline the invitation, stop invitation emails to your address for good, or report a problem — every invitation says how.
The full detail, including the lawful basis and where the address came from, is in how we handle invitations.
What we do not collect
- No location data, no contacts, no device fingerprinting.
- No payment details of any kind — Sarita takes no payments.
- We do not sell your data.
Advertising and analytics
Today there is neither. No advertising network, no analytics, and no third-party script that tracks you across sites.
We had an ad network briefly and removed it: it redirected a reader to a site we would never have chosen, without them clicking anything. If we introduce advertising or analytics in future we will update this page first, and anything that sets a cookie or loads a third-party script will ask you before it does.
Cookies and browser storage
- A sign-in cookie, set when you sign in. It is
HttpOnly, so no script on the page can read it, and it exists solely to keep you signed in. It expires after 120 days. - Browser storage, holding a marker that you have signed in before, and anything you rated or saved before creating an account. It never holds a password or a sign-in token.
Neither of those is an advertising or analytics cookie, and no third party sets a cookie here — which is why you are not asked to accept anything: the sign-in cookie is what makes signing in work, and there is nothing else to consent to.
Who else sees it
Other people see only what your visibility setting allows:
- Private — only you.
- Friends only — people whose friend request you accepted. This is the default for a new account.
- Everyone — any signed-in visitor.
You can also override that on an individual title, so one rating can be private on an otherwise public profile.
We use these service providers, and no others that receive your personal data:
- Amazon Web Services — hosting, databases, and sign-in (Cognito). Data is stored in the United States.
- Google — only if you choose to sign in with them.
Sarita also uses TMDb and TVMaze for film and television information, a large language model to write the recommendation text, and TypeSafe to judge what each programme is like — how dark it is, how fast it moves, which kind of comedy or crime story it is. None of them receives anything about you: those are facts and judgements about films, fetched and written before you arrive.
When Sarita puts new programmes in an order that suits you, it does that in your browser. Your ratings and watchlist are compared against those judgements on your own machine. The ordering is never sent back to us, and no request we make reveals which titles you have marked — we score the programmes, never the people.
Your rights
You can exercise the first two yourself, immediately, from your settings:
- Get a copy of your data — a complete JSON export, downloaded on the spot.
- Delete your account — this removes your ratings, watch history, votes, friend and follow connections and your sign-in itself. It is immediate and cannot be undone.
- Correct your data — your display name and visibility can be changed at any time.
- Object, restrict, or complain — write to admin@sarita.ai. If you are in the UK or the EU you may also complain to your national data protection authority; in the UK that is the Information Commissioner's Office.
Our lawful basis is performing the service you asked for — you cannot have a collection without us storing it — and, for keeping the service secure and working, our legitimate interests.
How long we keep it
Your account and its contents are kept until you delete them. Deletion takes effect immediately; ordinary backups may retain a copy for a short period before ageing out.
Children and young people
You must be 13 or older to have an account. Below that we do not knowingly collect anything — if you believe a younger child has created an account, write to admin@sarita.ai and we will remove it.
We do not ask your age, and we do not try to work it out. No birth date, no age check, no guessing from how you behave. We would rather hold less about you than build a profile in order to categorise you — but it has a consequence worth being plain about, rather than leaving you to discover it.
Because nothing here knows how old you are, nothing here adapts to it. Recommendations are not filtered by age, and a fifteen-year-old and a fifty-year-old see the same suggestions. Where we know how a film or programme was rated in your country, we show that rating on its page so you can judge for yourself. For a lot of television nobody publishes one, and we say so rather than leaving a blank that might look like approval.
Changes
If this policy changes materially we will say so on this page and update the date at the top. Sarita is a new service under active development, so expect this page to gain detail rather than lose it.