Privacy Policy

Last updated: August 19, 2026

The Short Version

  • •We collect what we need to run a film-and-TV diary: your email, an optional display name, and the things you log, rate, review, and list.
  • •We don't sell your personal data. Below we list everywhere it can go — naming the services you interact with directly.
  • •You choose what's public. Private accounts share only with followers you approve.
  • •Deleting your account removes your data immediately and permanently, right from Settings.
  • •Questions any time: support@flickfol.io.

The rest of this page is the full detail. Jump to any section:

1. Who We Are

Flickfolio is operated by Flickfolio LLC, registered in Philadelphia, Pennsylvania, United States. We are the "data controller" of the personal data described in this policy — the ones responsible for how it's collected and used.

This policy covers the Flickfolio website at flickfol.io and our iOS and Android apps (together, the "Service"). If anything here is unclear, email us at support@flickfol.io or use our Contact page.

2. Information You Give Us

When you sign up

  • •Your email address and a password (if you sign up with email)
  • •An optional display name — if you skip it, we generate a random one
  • •A username we auto-generate for you (you can change it later)
  • •Your country or region, used for stats — it defaults to the US if you don't pick one
  • •Your confirmation that you're 16 or older and accept our Terms — we record which version of the Terms you accepted and when. We never ask for your date of birth.

Your profile, if you choose to fill it in

  • •A bio (up to 300 characters)
  • •An avatar — an image you upload or a GIF you pick
  • •Appearance preferences: themes, colors, header and background effects, poster filters, and similar settings
  • •Privacy settings: whether your account is private and whether your Watch Later list is public

When you contact us

The contact form collects your name, email, subject, and message so we can reply. It's delivered to our inbox by an email delivery service (section 7).

We do not ask for or knowingly collect any sensitive personal data — no date of birth, precise location, health information, or anything of that kind.

3. Content You Create

Flickfolio is a diary, so most of your data is the content you choose to create:

  • •Diary entries, ratings, and reviews for movies, shows, seasons, episodes, and people — including rewatches, watch dates, and spoiler flags
  • •Comments on reviews (including GIFs) and likes on reviews and comments
  • •Watchlists — their titles, descriptions, cover images, custom ordering, and collaborators you invite
  • •Favorites, your Watch Later queue, and custom poster picks
  • •Who you follow and who follows you, including pending requests on private accounts
  • •People you block and reports you file about content
  • •GIFs you favorite in the GIF picker
  • •Drafts of reviews you haven't posted yet, synced so you can finish them on another device
  • •Notifications you receive and emoji reactions on them

Section 9 explains which of these are visible to other people and which stay private to you.

4. Information Collected Automatically

  • •Signup IP address — used briefly to rate-limit account creation and prevent abuse. It is not stored with your account.
  • •Server logs — our hosting provider keeps standard technical logs — things like IP address, browser type, and requested pages — to run and secure the Service.
  • •Push notification tokens — if you enable push notifications in the app, we store a device token with your account and the platform (iOS or Android) so notifications can reach your device. Tokens are deleted when you sign out.
  • •Bot-check signals — a bot-protection check runs during signup and on the contact form to tell humans from bots.
  • •Analytics — analytics tools measure how the Service is used — but only after you accept cookies on the web, or authorize tracking on iOS (see section 10). If you decline, they never load.

5. Information From Other Sources

  • •Google or Apple sign-in — if you sign in with Google or Apple, we receive your email address from them. We deliberately do not use your real name from these providers as your public display name — you get a generated one unless you choose otherwise.
  • •Letterboxd import — if you import your Letterboxd history, you upload the export file yourself and we turn it into diary entries and lists on your account.
  • •Subscription status — our payment providers (Stripe on the web; RevenueCat with Apple and Google on the apps) tell us your subscription tier and status. We store only provider reference IDs and your tier — never your card number or full payment details.

6. How We Use Your Information (and Our Legal Bases)

Where laws like the GDPR apply, we need a legal basis for each way we use your data. Here's the honest mapping:

  • •To run the Service (contract) — creating and managing your account, showing your diary and lists, powering social features, syncing drafts, processing subscriptions, and delivering push notifications you've enabled.
  • •To keep the Service safe (legitimate interests) — rate limiting, bot detection, scanning imported files for malware, moderating reported content, enforcing suspensions, and preventing fraud and abuse.
  • •To improve the Service (consent) — analytics run only with your consent — the cookie banner on the web, App Tracking Transparency on iOS. The same will apply to advertising if we introduce it (section 8).
  • •To understand searches (contract / legitimate interests) — when you type a natural-language search like "90s heist movies", the query is interpreted by an AI service (Anthropic) to figure out what you're looking for.
  • •To meet legal obligations (legal obligation) — responding to lawful requests and keeping records we're required to keep.

7. Who We Share Your Data With

We do not sell your personal data. These are the places it can go. Services you interact with directly are named; the infrastructure behind the Service is described by role, and every provider is bound by an agreement to process your data only on our instructions:

  • •Our cloud backend — the authentication, database, and file-storage provider that holds your account data and the content you create.
  • •Our hosting provider — serves the website and keeps standard server logs.
  • •TMDB (The Movie Database) — supplies film and TV data. Lookups happen from our servers, so TMDB doesn't see who you are. Privacy policy.
  • •KLIPY — powers the GIF picker. GIF searches go directly from your browser or app to KLIPY, so KLIPY sees your IP address and search terms along with a random per-device ID — we deliberately don't send them your account identity. Privacy policy.
  • •Anthropic — interprets natural-language search queries so smart search works. Only the search text is sent. Privacy policy.
  • •VirusTotal — scans Letterboxd import files for malware before we process them. Files submitted to VirusTotal are shared within its security community, so please only upload your actual Letterboxd export. Privacy notice.
  • •Stripe — processes web subscription payments. Your card details go directly to Stripe; we never see or store them. Privacy policy.
  • •RevenueCat, Apple, and Google — handle in-app subscriptions on iOS and Android and tell us your subscription status. RevenueCat's privacy policy.
  • •Apple and Google's push services — deliver push notifications to your device using the token described in section 4.
  • •A bot-protection service — screens signups and contact-form submissions to tell humans from bots.
  • •An email delivery service — carries contact-form messages to our inbox.
  • •Analytics services — consent-gated usage measurement (see section 10) — they never run unless you opt in.

Beyond these processors, we share personal data only:

  • •When the law requires it — for example a valid legal request from law enforcement
  • •To protect the rights, safety, or property of our users, the public, or Flickfolio
  • •As part of a merger, acquisition, or sale of assets — in which case this policy continues to apply to your data
  • •With your consent

8. Advertising

Flickfolio doesn't show ads today, but we may introduce them in the future — most likely through a mainstream ad network, and most likely only for free accounts. If and when ads launch:

  • •Ad-related cookies and identifiers will only be used with your consent where the law requires it, through the same cookie controls described in section 10
  • •Under some US state laws (like California's CPRA), showing personalized ads can count as "sharing" data with ad partners. If we launch personalized ads, we will provide the required "Do Not Sell or Share" opt-out at the same time
  • •We will update this policy and let you know before any of this goes live

9. Public Information & Who Can See What

Public by default

Flickfolio is a social diary, so unless your account is private, your profile — username, display name, avatar, bio, country, subscription-tier badge, follower counts, diary, ratings, reviews, favorites, and public lists — is visible to other members, to signed-out visitors, and to search engines. Reviews and comments you post on title pages and in the community activity feed are public too.

Private accounts

If you switch your account to private, your watching activity is visible only to followers you approve, your profile is excluded from our sitemap, and sharing features are limited to people you mutually follow. Your username, display name, avatar, and follower counts remain findable in search so people can send you a follow request.

What our team can see

When content is reported, our moderators see the reported content along with the profiles of the reporter and the author, so they can act on it — this applies to private accounts too. Administrators can also see aggregate usage statistics and a list of subscribers for billing support. Search queries that return no results are logged to improve search, without any link to your account.

10. Cookies & Local Storage

Strictly necessary (no consent needed)

Signing in sets authentication cookies that keep your session alive. The Service can't work without them, so they're set regardless of your cookie choice.

Analytics (your choice)

On the web, analytics tools load only after you press Accept on the cookie banner. Decline, and they never load — no tracking scripts run. You can change your mind any time with the "Cookie preferences" link in the footer. In the iOS app, the same choice is made through Apple's App Tracking Transparency prompt instead.

Local storage on your device

Like most apps, we keep small preferences on your device rather than on our servers: your cookie choice, theme, one-time tips you've dismissed, local copies of review drafts, your GIF favorites cache, and the random per-device ID used for the GIF picker (section 7). These stay on your device.

11. Data Retention & Deletion

  • •We keep your data for as long as your account exists
  • •Deleting your account (Settings → Delete Account) removes your account and content immediately and permanently — there is no recovery window, so export anything you want to keep first
  • •Copies may persist briefly in encrypted backups until those backups age out
  • •We may retain limited records where we have a legal reason to — for example moderation records tied to enforcement, or payment records our providers must keep for tax and accounting law

You can also clear parts of your data without deleting your account — Settings includes a tool for wiping imported watch history. Full deletion steps are on the account deletion page.

12. Security

  • •Data is encrypted in transit and at rest
  • •Database access is restricted with row-level security, so each account can only read what it's allowed to
  • •Billing and admin fields are locked down to server-side systems
  • •We monitor for abuse and rate-limit sensitive actions

No online service can promise perfect security, and we won't pretend otherwise. If we learn of a breach affecting your personal data, we will notify you and the relevant authorities as required by law. Please keep your password secret and tell us right away if you suspect someone else has used your account.

13. International Data Transfers

Our servers are in the United States, so if you use Flickfolio from elsewhere, your data is transferred to and processed in the US. For users in the EEA, the UK, and other regions with data-transfer rules, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (and the UK addendum) built into our agreements with the providers in section 7.

14. Your Rights

Everyone

  • •See and correct your data — your profile, diary, reviews, and lists are all editable in the app
  • •Delete your account and data instantly from Settings
  • •Get a copy of your data — email support@flickfol.io and we'll send you an export of the data linked to your account

If you're in the EEA or UK

  • •You additionally have the rights to object to or restrict processing, to data portability, and to withdraw consent at any time (withdrawing doesn't affect what was done while consent stood)
  • •You can complain to your local data-protection authority, though we'd appreciate the chance to sort it out first

If you're in California or another US state with a privacy law

  • •You have the rights to know, correct, and delete the personal information we hold about you
  • •You have the right to opt out of the sale or sharing of personal information — we don't sell it, and we don't currently share it for advertising (see section 8)
  • •We will never discriminate against you for exercising any privacy right

To exercise any of these rights, email support@flickfol.io or use the Contact page. We respond to all requests within the time limits set by applicable law.

15. Children

Flickfolio is for people aged 16 and over, and we don't knowingly collect personal data from anyone younger. Signup requires confirming you're at least 16. If you believe someone under 16 has an account, email support@flickfol.io and we'll delete it and its data.

16. Changes to This Policy

We'll update this policy as the Service and the law evolve — the date at the top always tells you the current version. For material changes we'll give you notice in the app or by email before they take effect. Continued use after that means you accept the updated policy.

17. Contact Us

Flickfolio LLC, Philadelphia, Pennsylvania, United States. Email support@flickfol.io or use our Contact page for anything about this policy or your data.