Privacy Policy
Last updated: 26 June 2026 · CineClub is a free, non-commercial hobby project.
This page explains what information CineClub handles and why. If anything here is unclear, or you want your data removed, contact hello@thecineclub.co.uk.
Who runs CineClub
CineClub is operated by an individual, [YOUR NAME OR HANDLE] ("we"). We are the data controller for the information described below. Contact: hello@thecineclub.co.uk.
What we collect
- A name you choose. A display name you type in (a real name isn't required), plus a random per-browser member ID so the app remembers you.
- Your film-club activity. Clubs you create or join, films you add, spin results, whether you've marked a film watched, your half-star ratings, your written reviews, and discussion comments.
- Optional streaming preferences. The streaming services you tick, used only to show who in your club can watch a given film.
- Sign-in identifiers. An anonymous account ID (from Firebase) so the app can keep your club private. If you choose "Save your account", your email address, used only to send you a one-time sign-in link.
- Stored only in your browser (not on our servers). Your name, your last club code, and your theme/sound preferences live in your browser's local storage.
We do not collect your real name (unless you type it), payment details, or precise location, and we do not use advertising or third-party analytics/tracking.
Why we process it (lawful basis)
To provide the app you asked to use — running your film club (performance of the service), and our legitimate interest in operating and securing the app against abuse. Where you give an email for account recovery, we rely on your consent.
Where your data is stored
- Google Firebase (Cloud Firestore + Firebase Authentication) stores your club data on Google's infrastructure; Google acts as our processor. See Google's Privacy Policy.
- The site is hosted on GitHub Pages, which may log requests (e.g. your IP address) to serve the page.
Third-party services your browser contacts
- Google Firebase / Google Cloud — database and anonymous sign-in.
- Google reCAPTCHA (via Firebase App Check) — verifies requests come from the real app and blocks abuse. reCAPTCHA collects device and usage information under Google's Privacy Policy and Terms.
- The Movie Database (TMDB) — film posters, details, and "where to watch" data (which uses JustWatch). Your browser requests these directly, so TMDB receives your IP address. This product uses the TMDB API but is not endorsed or certified by TMDB.
- Google Fonts and jsDelivr (a CDN) — load fonts and a small visual effect; they may receive your IP address.
We do not sell your data or share it for advertising.
Cookies and local storage
CineClub itself uses no tracking cookies — it stores a few preferences and your identity in your browser's local storage. The third parties above (e.g. Google reCAPTCHA) may set their own cookies. Clearing your browser storage removes the local data.
Keeping and deleting your data
- Leaving a club removes you from its member list. Resetting a club erases that club's films, ratings, reviews and comments for everyone.
- Because a club is shared, content you posted (such as a review) may stay visible to that club until the club is reset.
- To request deletion of your data or your account, email hello@thecineclub.co.uk and we'll remove it where we can.
Children
CineClub isn't directed at children under 13. Please don't use it if you're under that age.
Your rights
Depending on where you live (for example under UK/EU GDPR), you may have the right to access, correct, delete, or restrict use of your data, or to object to processing. Email hello@thecineclub.co.uk to exercise these.
Changes
We may update this policy; if we do, we'll change the "last updated" date above.