Privacy Policy
This policy explains what personal data I collect, why I collect it, and what you can do about it. It covers the website saranewman.dev and the mobile applications JKAnime — Watch Anime, Reelo — Movie Discovery and GemDrop — Free Diamonds for Free Fire (together, the "Services").
The short version. The website sets no cookies and runs no analytics. The apps collect the minimum needed to work — and JKAnime and Reelo keep your taste data on your own device. GemDrop needs more, because rewards and fraud prevention require it. Nothing is ever sold.
1. Who is responsible
The data controller is Sara Newman, trading as Newman Labs, a sole proprietorship registered in Massachusetts, United States. Postal address available on request. Email: privacy@saranewman.dev.
2. Data collected by the website
saranewman.dev is a static site. It sets no cookies, embeds no advertising or analytics scripts, and loads no third-party fonts or trackers.
- Server logs. My hosting provider records the usual request metadata — IP address, timestamp, requested path, user agent — for security and abuse prevention. Logs are deleted after 14 days and are not used to profile visitors.
- Local storage. One key,
sn-theme, remembers whether you chose the light or dark theme. It stays in your browser, is never transmitted, and you can clear it at any time through your browser settings. - Contact form. The form on the home page does not submit to a server. It validates your input in the browser and then opens your own email client with a pre-filled draft. If you choose to send it, I receive your name, email address and message the same way I would receive any email.
3. Data collected by the apps
3.1 JKAnime — Watch Anime
- Stored on your device: your library, watch progress, episode notes and notification preferences.
- Optional iCloud sync: if you enable it, that same data is stored in your private CloudKit container. It lives in your Apple account — I cannot read it.
- Crash diagnostics: only if you opt in when first launching the app. Reports contain a stack trace, device model and OS version. No identifiers, no watch history.
- Pro subscription: handled entirely by Apple or Google. I receive an anonymous transaction receipt, never your payment details.
3.2 Reelo — Movie Discovery
- Taste profile: your ratings and the resulting recommendation model stay on-device. This is the core of my thesis work and it is deliberate: your watch history never reaches my servers.
- Catalog requests: title metadata, artwork and streaming availability are fetched from The Movie Database (TMDB). These requests carry your IP address to TMDB and are governed by TMDB's privacy policy.
- Group mode: when you share a session, only the anonymous list of title IDs you selected is uploaded, held for the duration of the session and deleted within 24 hours.
3.3 GemDrop — Free Diamonds for Free Fire
GemDrop needs more data than the other two apps, because rewards can be abused. It collects:
| Data | Why |
|---|---|
| Email address or Google/Apple sign-in identifier | To create your account and protect your balance |
| Free Fire player ID (numeric, public) | To deliver diamond top-ups. I never ask for your password or account credentials. |
| Points balance and reward history | To run the rewards ledger and handle disputes |
| Device model, OS version, coarse country, install signals | Fraud prevention — detecting emulators, multi-accounting and bot traffic |
| Offer-wall completion events | To credit points; provided by our partner offer providers |
GemDrop shows advertising and sponsored offers. Advertising partners may use a mobile advertising identifier (IDFA / Android Advertising ID) if — and only if — you grant permission through the system prompt. Decline it and the app still works; ads simply become non-personalised.
Not affiliated with Garena. GemDrop is an independent rewards app. It is not endorsed by, sponsored by or affiliated with Garena Online Pte. Ltd., Free Fire or any of their trademarks. Rewards are funded by advertiser budgets and delivered through an authorised reseller.
4. Legal bases for processing
Where the GDPR applies, I rely on:
- Contract — to run your account, deliver rewards and provide app functionality.
- Legitimate interests — security, fraud prevention and keeping the Services working.
- Consent — for crash diagnostics, personalised advertising and any marketing email. You can withdraw consent at any time in the app's settings.
- Legal obligation — where tax or law-enforcement requirements apply.
5. Who I share data with
I do not sell personal data, and I do not share it for cross-context behavioural advertising outside the advertising identifier described above. Data is shared only with processors that help run the Services:
- Google Firebase — authentication, database and cloud functions (GemDrop).
- Apple CloudKit — optional private sync (JKAnime).
- TMDB — film and series metadata (Reelo).
- Offer-wall and ad partners — reward attribution (GemDrop). Each is listed in the app's settings screen with a link to its own policy.
- Hosting provider — static website delivery and server logs.
- Authorities — only where legally required, and only the minimum necessary.
6. How long data is kept
- Website server logs: 14 days.
- Emails you send me: up to 24 months, then deleted.
- GemDrop account data: for as long as your account is open, plus 90 days after deletion for fraud and chargeback records.
- Reelo group sessions: 24 hours.
- On-device data: until you delete the app or clear its data.
7. Your rights
Depending on where you live, you may have the right to access, correct, delete, export or restrict the processing of your personal data, to object to processing, and to withdraw consent. California residents additionally have the rights described in the CCPA/CPRA, including the right not to be discriminated against for exercising them.
To exercise any of these, email privacy@saranewman.dev. I reply within 30 days. GemDrop users can also delete their account entirely from Settings → Account → Delete account, which removes the ledger and profile automatically. If you believe I've handled your data badly, you may complain to your local data protection authority.
8. Children
The Services are not directed to children under 13 (or under 16 in the EEA/UK). GemDrop is rated 12+ and includes a neutral age gate at sign-up. If you believe a child has provided personal data, contact me and I will delete the account and its data promptly.
9. Security
All traffic uses TLS 1.3. Account passwords are never stored by me — authentication is delegated to Firebase, Apple or Google. Access to production data is limited to me, protected by hardware-key two-factor authentication. No system is perfect; if a breach affects your data, I will notify affected users and the relevant authority without undue delay.
10. International transfers
The Services are operated from the United States. If you use them from outside the US, your data will be transferred there. Where required, transfers from the EEA and UK rely on the European Commission's Standard Contractual Clauses, which my processors have signed.
11. Changes to this policy
If this policy changes materially, I will update the date at the top, and — for the apps — show an in-app notice before the change takes effect. Continued use after that date means you accept the updated policy.
12. Contact
Sara Newman — Newman Labs
Cambridge, Massachusetts, United States
privacy@saranewman.dev