Privacy Policy

1. Overview and Core Philosophy

At Filmigrate, privacy is our foundational principle. We believe that your cinema tastes and movie diaries belong strictly to you. We do not sell your personal data, we do not track you across third-party websites, and we provide complete 1-click tools to export or delete your data at any time.

2. Information We Collect

• Account Data: When you create an account, we store your email address, display name, and securely salted PBKDF2 hashed password.
• Cinema Library: Your watched movies, watchlist titles, countries of origin, ratings, and challenge lists.
• Session Metadata: Operating system, browser family, and IP address for active device session management (enabling you to remotely log out unrecognized devices).
• Payment Information: When upgrading to Filmigrate Pro, your billing details are processed directly by our Merchant of Record, Lemon Squeezy. We never store or access your credit card number.

3. How Your Data Is Stored & Protected

Filmigrate operates on a high-resilience architecture: your library is cached locally on your device via localStorage for instant offline access and synced to encrypted cloud databases when signed in. All communication uses industry-standard TLS/HTTPS encryption.

4. Data Portability & Immediate Hard Deletion Guarantee (GDPR Article 17)

Under GDPR, CCPA, and global privacy standards, you retain complete, uncompromised control over your data:

• Full JSON Export: Download a complete, machine-readable JSON backup of your entire movie library and country passport at any time.
• Wipe Cloud Data: 1-click option to purge all cloud records while preserving local offline logs.
• Instant Permanent Hard Delete: When you click "Delete Account" in your Account Settings, our server immediately executes an irreversible hard deletion (permanent database purge) of your account credentials, active device tokens, and all movie records.

5. Data Retention & Anonymization Policy (Statutory Accounting)

When you delete your account, all personally identifiable information (PII) including your email address, display name, password credentials, active device tokens, and movie watchlists are immediately and permanently erased from our production databases.

In strict compliance with international commercial law, tax regulations, and statutory accounting requirements (such as chargeback resolution, fraud prevention, and audit standards), financial transactional records within our subscription_events log are stripped of all personal identifiers (anonymized) and retained for 7 years, after which they are permanently pruned.

6. Cookies & Local Storage

Filmigrate uses standard browser localStorage and lightweight session tokens solely to keep you signed in and maintain offline availability. We do not use third-party advertising cookies, trackers, or behavioral profiling tools.

7. Third-Party Services & TMDB API Attribution

Filmigrate queries The Movie Database (TMDB) API to fetch movie metadata, release years, and poster cover artwork. No personal viewing history or identifying user information is shared with TMDB.

This product uses the TMDB API but is not endorsed or certified by TMDB.

8. Data Controller & Official Contact Information

The Data Controller responsible for your personal data under global data protection laws (including GDPR and CCPA) is:

For all privacy rights requests, data erasure confirmations, or billing inquiries, please contact our dedicated support email directly.