Privacy Policy

Last updated: 16 May 2026 · Data controller: community.movie operations team (contact via Contact).

What we collect

We minimise data to run the Service, including:

• Account identifiers (email, username, authentication events).
• Profile and preferences you choose to provide (bios, avatars, notification choices).
• Content you submit (ideas, comments, Actor Universe metadata, uploads).
• Transactional records (membership tier, billing status tokens from our payment processor—we do not store full card numbers).
• Technical data (device/browser type, approximate region from IP, logs for security and abuse prevention).
• Support communications you send us.

How we use data

• Provide, secure, and improve the Service, including AI-assisted workflows described in our AI Disclosure.
• Moderate content, enforce policies, and detect fraud.
• Send service messages, receipts, and (where permitted) product updates; opt out of marketing as offered in-product.
• Comply with law and respond to lawful requests.

Legal bases (UK / EEA)

We rely on contract (to deliver the Service), legitimate interests (security, analytics proportionate to risk, product improvement), legal obligation, and, where required, consent (e.g. certain cookies or optional communications).

Children's privacy & ICO Children's code posture

The Service is not directed to children under 13. We do not knowingly collect personal data from children under 13. Teens aged 13–15 (or higher age of digital consent in their country) may require verifiable parental permission where local law mandates. Where UK Age Appropriate Design (Children's code) principles apply, we default profiles to high privacy, minimise profiling for non-essential purposes, avoid nudging to weaken privacy controls, and route sensitive moderation decisions to humans.

Data sharing

We share data with infrastructure, authentication, payment, analytics, AI inference, and abuse-prevention vendors under contracts that require protection and limited processing. We may disclose data if required by law or to protect rights, safety, and integrity.

International transfers

If we transfer personal data outside the UK/EEA, we use approved safeguards (such as UK IDTA / EU SCCs with supplementary measures) where required.

Retention

We keep data only as long as necessary for the purposes above, including legal, tax, and dispute windows. Content tied to public challenges may remain in backups for a limited period after deletion.

Your rights

Depending on jurisdiction, you may have rights to access, rectify, erase, restrict, port, or object to processing, and to withdraw consent where processing is consent-based. You may lodge a complaint with your supervisory authority. Exercise rights via Contact; we may verify identity before responding.

Cookies & similar tech

See our Cookie Policy.

Changes

We will post updates here and adjust the "Last updated" date. Material reductions to privacy rights will be communicated as required by law.