Community privacy

Trakt stays private.

ShowNext Lab is a public project journal with a small participation layer. Reading is anonymous. Saving feedback uses either guest access or Sign in with ChatGPT; owner tools still require an authorized ChatGPT identity.

The boundary

Two products, separate data

The future native app and this development site do not share identity or storage.

ShowNext native app

Private viewing data

Trakt remains authoritative for watched history, progress, collection, lists, and ratings. The native development build now proves a bounded set of ShowNext-only preferences can use private iCloud records. That system remains separate from this site.

ShowNext Lab

Development feedback

OpenAI Sites hosts the pages and Sites-managed storage keeps participant identity, one current ballot per round, and option-specific comments. Community records do not enter Gitea.

When you participate

What is private and what becomes public

Private identity: Guest access stores the unverified email and display name you enter. Sign in with ChatGPT supplies its trusted email and optional name. Either path uses one private participant record so you can keep one current ballot.
Guest session: The shared development access code is checked but not stored with your record. A random, private browser session is stored as a one-way hash and expires after 30 days.
Public attribution: Approved comments use a privacy-safe public alias. Your email and full name are never part of public results.
Public contribution: Your option-specific note, feedback type, alias, and contribution date may be visible to other readers. Vote totals are aggregate.

Never connected: No community identity, vote, or comment is linked to Trakt history, watchlists, provider accounts, or iCloud overlays.
Repository boundary: Gitea is private source backup and history. It does not host the site and does not contain participant records.
AI summaries: A future Codex summary may group public feedback themes. It is a derived readout with a cutoff and sample size—not the canonical vote count and not an automatic decision.

Controls

A deliberately small first version

You can change your current ballot while its round is open.
Guest emails are deliberately unverified. Guest access is a low-friction development gate, not a promise of verified identity.
One option-specific note per person can be updated instead of creating a popularity-ranked thread.
Comments are plain text with length and content boundaries.
Export and account-deletion behavior must be added before this is described as a broad public community product.

Open my contributions Review the active question