Privacy Policy

1. Overview and Core Philosophy

At Filmigrate, privacy is our foundational principle. We believe that your cinema tastes and movie diaries belong strictly to you. We do not sell your personal data, we do not track you across third-party websites, and we provide complete 1-click tools to export or delete your data at any time.

2. Information We Collect

• Account Data: When you create an account, we store your email address, display name, and securely salted PBKDF2 hashed password.
• Cinema Library: Your watched movies, watchlist titles, countries of origin, ratings, and challenge lists.
• Session Metadata: Operating system, browser family, and IP address for active device session management (enabling you to remotely log out unrecognized devices).
• Payment Information: When upgrading to Filmigrate Pro, your billing details are processed directly by our Merchant of Record, Lemon Squeezy. We never store or access your credit card number.

3. How Your Data Is Stored & Protected

Filmigrate operates on a high-resilience architecture: your library is cached locally on your device via localStorage for instant offline access and synced to encrypted cloud databases when signed in. All communication uses industry-standard TLS/HTTPS encryption.

4. Data Portability & Immediate Hard Deletion Guarantee (GDPR Article 17)

Under GDPR, CCPA, and global privacy standards, you retain complete, uncompromised control over your data:

• Full JSON Export: Download a complete, machine-readable JSON backup of your entire movie library and country passport at any time.
• Wipe Cloud Data: 1-click option to purge all cloud records while preserving local offline logs.
• Instant Permanent Hard Delete: When you click "Delete Account" in your Account Settings, our server immediately executes an irreversible hard deletion (permanent database purge) of your account credentials, active device tokens, and all movie records.

5. Data Retention & Anonymization Policy (Statutory Accounting)

When you delete your account, all personally identifiable information (PII) including your email address, display name, password credentials, active device tokens, and movie watchlists are immediately and permanently erased from our production databases.

In strict compliance with international commercial law, tax regulations, and statutory accounting requirements (such as chargeback resolution, fraud prevention, and audit standards), financial transactional records within our subscription_events log are stripped of all personal identifiers (anonymized) and retained for 7 years, after which they are permanently pruned.

6. Cookies, Local Storage & Product Analytics

Filmigrate is committed to privacy-first transparency. We do not sell your personal data, nor do we partner with third-party ad networks for targeted cross-site advertising. To deliver and continually optimize our world cinema platform, we use limited storage and analytics tools:

• Essential Local Storage & Session Tokens: We use browser localStorage and secure session tokens strictly to keep you authenticated, retain your cinema diary offline, and save your theme preferences.
• Product & Traffic Analytics (Google Analytics): We use Google Analytics (GA4) with IP anonymization to measure aggregated traffic volume, popular country discovery patterns, and feature adoption without tracking you across external websites.
• User Experience & Session Insights (Microsoft Clarity): We partner with Microsoft Clarity to capture how you use and interact with our website through behavioral metrics, heatmaps, and session replay to improve and optimize our product and user experience. Website usage data is captured using first and third-party cookies and other tracking technologies to determine feature adoption and application performance. Additionally, we use this information strictly for site optimization, fraud/security detection, and usability improvements. For more information about how Microsoft collects and uses your data, visit the Microsoft Privacy Statement.

7. Your Privacy Controls & Analytics Opt-Out

Under GDPR, CCPA, and global privacy standards, you maintain full control over your analytics preferences:

• Browser Controls & Do Not Track: We respect standard browser "Do Not Track" (DNT) and Global Privacy Control (GPC) signals.
• Content & Ad Blockers: You may freely use privacy extensions or content blockers; Filmigrate remains 100% operational even when analytics scripts are blocked.
• Google Analytics Opt-Out: You can install the official Google Analytics Opt-out Browser Add-on.
• Microsoft Privacy Dashboard: You can manage or opt out of Microsoft's behavioral data collection via the Microsoft Privacy Dashboard.

8. Third-Party Services & TMDB API Attribution

Filmigrate queries The Movie Database (TMDB) API to fetch movie metadata, release years, and poster cover artwork. No personal viewing history or identifying user information is shared with TMDB.

This product uses the TMDB API but is not endorsed or certified by TMDB.

9. Data Controller & Official Contact Information

The Data Controller responsible for your personal data under global data protection laws (including GDPR and CCPA) is:

For all privacy rights requests, data erasure confirmations, or billing inquiries, please contact our dedicated support email directly.