Privacy policy
Up Next · last updated 11 October 2026
In short: Up Next keeps your account (an email address and a scrambled password) and your shelf: the films, shows, games and manhwa you add. Your shelf is yours alone unless you add someone to it. There are no ads, no analytics and no trackers; the one cookie it sets only keeps you signed in, it does not use AI, and it never sells or shares your data. You can copy everything out at any time under Settings → Backup, and delete your shelf and account in Settings.
What Up Next stores
- Your account: your email address and your password. The password is stored only as a one-way keyed hash (PBKDF2), so nobody can read it back, including us. Up Next also notes when the account was made and when you last signed in.
- Your shelf: its address (the code in its link), which account owns it, and the accounts its owner has added. A shelf from before accounts also had a passcode, stored only as a one-way keyed hash; once the shelf is claimed into an account the passcode no longer opens it.
- What you add: the shelf's name, header and colour, your collections and the entries in them, what you have ticked off, and cover images. A cover can be a picture found by search, an image address you paste, or a photo you upload. Uploaded photos are shrunk and stored as part of the shelf.
- When it last changed: a version number and time, so every device stays in sync.
Up Next does not ask for your name or any other personal details beyond your email address. Your email is used to sign you in and to let a shelf's owner add you; it is never shown to anyone except the people on a shelf you share, and never used for marketing. Password resets by email are not switched on yet.
Who can see a shelf
Only you, and the people you add under Settings → People on this shelf, can open your shelf. They see each other's email addresses on that list, and can tick, add and reorder, but only you can add or remove people or delete the shelf. Nobody else, including whoever runs Up Next, has a way in through the app. Someone you add can leave at any time.
A shelf from before accounts that has not been claimed yet still opens for anyone with its link and passcode (or, if its passcode was removed, anyone with the link), until someone claims it with the passcode.
Information handled automatically
- Wrong passwords and passcodes: counted per account (by email) and per shelf to stop guessing. The counts expire within an hour.
- IP address: used briefly to stop floods of requests and sign-up abuse. Where it has to be counted for longer than a minute (wrong passwords, for an hour), only a keyed hash of it is stored, never the address itself.
- Passkeys: if you set one up, Up Next stores the device name you give it, a public key, and when it was added and last used. Your fingerprint, face or device PIN never leave your device; Up Next only receives a signed answer that proves the passkey is yours. Remove a device under Settings → Passkeys on your devices and its passkey stops working here. A claimed shelf's passkeys move to the account that claimed it. A one-time "Add a device" link is stored only as a scrambled copy and expires after 15 minutes.
- Sign-in cookie: when you sign in, Up Next sets one cookie so the device stays signed in. It holds your account's id, an expiry date, which passkey signed you in (if one did), and a signature that proves Up Next issued it. It does not contain your password or email, page scripts cannot read it, and it is sent only to Up Next's own server, never to other sites. It lasts up to 400 days and is renewed while you use Up Next. It ends sooner if you sign out, if your password is changed on another device, or if you clear your browser's cookies for the site. (An old shelf opened with its passcode uses a similar cookie of its own until it is claimed.) It is needed for the app to work and is not used for tracking or advertising.
- Your browser's local storage: a couple of display preferences (number pad or keyboard, and whether you have seen the guide). They stay on your device and are never sent anywhere. The passcode is not stored on your device; a copy saved by an older version of the app is used once to sign you in and then deleted. Clearing your browser's site data removes all of this.
- Hosting: Up Next runs on Cloudflare (Workers and a D1 database). Cloudflare processes every request to deliver the site and may keep limited logs under its own privacy policy.
Other services
- Title search: when you type in the Name box, Up Next's server sends only the words you typed to TMDB (films and TV), SteamGridDB (games), or MangaDex, Jikan / MyAnimeList and Kitsu (manhwa and manga). Nothing about you or your shelf is sent with it.
- AniList: on a manhwa shelf, your browser also sends the words you type straight to AniList, because AniList does not answer Up Next's server. AniList sees your IP address the way any website does; nothing about your shelf is sent. See AniList's terms and privacy policy.
- Cover images: covers from TMDB, SteamGridDB, MyAnimeList, AniList and Kitsu, and any image address you paste, are loaded by your browser straight from that site, which sees your IP address the way any website does. MangaDex covers are fetched through Up Next's server instead.
- Fonts: the app loads its fonts from Google Fonts, so your browser contacts Google when the page opens. See Google's privacy policy.
Nothing else receives your data. There are no advertisers, analytics tools or data brokers.
Film and TV data uses the TMDB API but is not endorsed or certified by TMDB.
How long data is kept
Your account and shelf are kept until you delete them. Anything you remove from a shelf is gone from it as soon as it syncs. The database keeps automatic point-in-time backups for a limited time (up to 30 days) before they expire.
Your choices
- Back up your shelf: Settings → Backup shows the whole shelf as text you can copy and keep.
- Remove things: delete any entry or collection at any time.
- Remove someone from your shelf under Settings → People on this shelf; they lose it at once.
- Change your password under Settings. Every other device signed in with the password is signed out at once.
- Sign out under Settings, or from the list of your shelves. This removes the sign-in cookie.
- Delete your shelf and account: Settings → Delete this shelf, with your password. Your shelf, the list of people on it, your passkeys and your account are removed from the database straight away (database backups expire within 30 days).
Children
Up Next is a personal backlog tracker and is not intended for children under 13.
Contact
Questions or requests about your data: message beehp on Discord.
Changes
If this policy changes, the date at the top will change with it.