Privacy Policy

Personal data we collect

• Account data: email address and password hash.
• Profile data: first name, last name, date of birth, preferred city, favorite cinema locations, and favorite genres.
• Alert data: movie alert email addresses and IMDB IDs, plus genre feed email addresses, selected genres, selected cinema locations, movies already sent in a feed, and delivery timestamps.
• Contact messages: email address and message content when you contact us.
• Security data: email verification, password reset, and email change tokens (hashed) and timestamps.
• Analytics request metadata: when Umami analytics is enabled, the analytics service receives technical request data such as page URL, referrer, browser, device type, language, and IP-derived geolocation information.
• Anonymous search queries: when you search or apply filters on the movie listings page, we log the search terms and filter selections. No identity, IP address, or session is attached — only the query itself and the date it was made.
• Site preferences: language and city (via cookies).

How we use your data

• To create and manage your account.
• To sign you in, protect forms (CSRF), and keep the service secure.
• To send account emails (verification, password reset, and email address change confirmation and notice).
• To send movie showing alerts and weekly genre feed emails you subscribe to.
• To receive, route, and respond to contact form messages.
• To understand aggregate traffic and improve site performance and content.
• To remember your saved cinema and genre preferences in your account.
• To operate and improve the service (e.g., support and troubleshooting).

Legal bases

We process your data to perform our contract with you (providing the account and service) and for our legitimate interests in keeping the service secure and reliable.

Who we share data with

• Service providers that help us run the service (e.g., hosting, email delivery).
• Our self-hosted Umami analytics service, which processes website usage telemetry for our reporting.
• Third parties that deliver content you request in the browser, such as Google Fonts and OpenStreetMap map tiles (they receive your IP address and basic browser information when your device loads those resources).
• Authorities if required by law.

How long we keep data

• Account data is kept until you delete your account (deletion is permanent and immediate).
• Contact messages are kept only as long as needed to respond, troubleshoot, or maintain reasonable support records.
• Umami analytics data is kept in our analytics database until we delete it or rotate analytics records as part of our operational maintenance.
• Anonymous search queries are kept indefinitely for aggregate analysis and may be pruned as part of operational maintenance.
• Verification, reset, and email change token records are kept for security and audit purposes and expire automatically; used tokens are marked as used.
• Movie alerts are kept until sent, removed, or your account is deleted. Genre feeds are kept until removed or your account is deleted.
• Cookies are stored on your device for their listed duration or until you delete them.

Your rights

Depending on your location and applicable law, you may have the following rights:

• Access: request a copy of your personal data.
• Rectification: correct inaccurate data.
• Deletion: delete your account and personal data.
• Restriction: limit how we process your data in certain cases.
• Objection: object to processing based on legitimate interests.
• Complaint: lodge a complaint with your local data protection authority.

Security

We use reasonable technical and organizational measures to protect your data (for example, we store passwords as hashes, not in plain text).

Cookies

For details about the cookies we use, see our Cookie Policy.