Terms and Privacy

What the service is

You log what you have watched and rank short triads by how much you personally liked each film; a model of your taste is built and used for your profile only. Recommendations are suggestions: no content or feature is withheld by an automated decision, and you can always dismiss a suggestion.

No stars, no likes: ranking is the only question. What you have not watched never counts against a film.

Your account

• The service is for adults at this stage, and you confirm at sign-up that you are 18 or older. Children’s accounts need a separate consent and protection design that is not built yet.
• You are responsible for keeping your password private. Passwords are stored hashed; we cannot read them.
• Your account is separate from your taste profile: the profile carries a pseudonymous id, and the model and event tables never reference your identity.

Consents

At registration you accept the Terms of Use, acknowledge that you have read the Privacy Notice, and confirm that you are 18 or older. This acknowledgement is not consent to an optional processing purpose.

Creating an account and saving the list and viewing history you request operate service features. Before you start the recommendation experience, we ask separately for your consent to your personal taste model. Shared-model contribution and product analytics are separate choices: analytics can be chosen optionally at registration or in privacy settings, and shared contribution stays off until enabled in privacy settings, and each can be withdrawn without changing the other.

Acceptable use

• Do not use the service to collect other users’ data or to attempt to break the isolation between accounts or profiles.
• Do not put into the service content you have no right to.
• We may suspend an account that abuses the service or threatens its users’ security.

Film data

Film information, images and scores come from external sources under their published terms, with the attribution shown where they appear; the development notice and data statement gives the detail. An image is shown only when the rights registry allows it; otherwise the slot stays empty.

What we do not promise

Recommendations are fallible estimates, shown with a verbal confidence level rather than a number. We do not guarantee that any film is available on any platform; availability is shown separately and never ranks your taste.

Ending your account

From your profile, you can download a JSON copy of your data after confirming your password, or wipe your taste profile while keeping your account. You can also request account deletion after confirming your password; the request pauses processing for your profiles, sets an execution date after a safety period, and can be cancelled until that date. Deletion cannot be undone after it runs.

Changes to these terms

If we change the terms materially, we ask for your agreement to the new text before you continue, and the last-updated date stays visible at the top of this page.

What we collect and why

• Email and hashed password: for the account, sign-in and security.
• Interface language, market and platforms: for display and availability only, never for taste.
• What you marked as watched or not watched, and your list: to build triads, recommendations and the availability value.
• Ranking rounds and their replacements: to train your own taste model.
• Recommendations shown to you and what came of them: to close the loop and evaluate quality; aggregated after 24 months.
• Consents and privacy requests: a compliance record that stays, reduced to a trace without personal data after deletion.
• Audit log and server logs: for security and abuse prevention; server logs are kept for 30 days.

What we neither collect nor infer

No precise location, no device fingerprints or tracking cookies, no third-party advertising identifiers, no biometric or health data. And we never infer religion, politics, sexual orientation or health from what you watch or how you rank; this is a hard ban enforced in the explanation rules, the trait vocabulary and review.

Consents

• Registration acknowledgement: acceptance of the terms, acknowledgement that you read this notice, and confirmation that you are 18 or older; stored with the text version and time, and does not grant consent to optional processing.
• Account, list and viewing history: we process what you ask us to save to operate those features and keep secondary use separate.
• Your personal taste model: off until you consent before starting the recommendation experience; used for your profile only and withdrawable in privacy settings.
• Shared-model contribution: optional and off until you enable it in privacy settings; withdrawal stops use of your profile for this purpose without changing your personal-model choice.
• Product analytics: optional and off until you choose it at registration or in privacy settings. We measure onboarding, ranking, opening recommendations and watching, plus UTM campaign tags at registration without click identifiers. Retained for 24 months and erased on withdrawal; our own systems only, no third party and no advertising.
• Import processing: asked when you import a list; the raw file is deleted after parsing.

Your rights

• Wipe the taste profile: available now from your profile; deletes rounds, the model and derived recommendations, and keeps the account and the viewing history you saved.
• Withdraw the optional consents: available now from your profile.
• Access and export: available now from your profile; after confirming your password, you can download a portable JSON copy of your account, profiles and privacy requests.
• Deletion: available now from your profile after confirming your password. The request pauses processing for your profiles and sets an execution date after a safety period; you can cancel until that date, and deletion cannot be undone after it runs.
• Correction: source data through the request form in your profile; taste corrections through a new ranking round, since originals are never edited in place.
• Objecting to automated decisions: recommendations are suggestions, and nothing is withheld from you by an automated decision. Any other objection to processing goes through the request form in your profile.

Who else processes data

We use a language-model provider to describe films and rephrase explanations; only film evidence is sent: no user ids, emails, rankings, preferences, watch history or profile text.

Film data and availability providers receive content data, not personal data, with one exception we state plainly: film posters are fetched by your browser straight from TMDB (image.tmdb.org) and never pass through our servers, so TMDB sees your IP address and your browser type, as any site you open does. It is not told who you are: a poster URL carries no identifier of yours, and the image is requested with no-referrer, so no page address goes with it. In the few places the same image is painted as a CSS backdrop, the browser’s own default sends our domain name and never the page path.

We did not put an image proxy on our own domain because that would make us the ones redistributing TMDB’s images, a licensing question that is not settled. We will revisit it when it is.

Hosting is Railway (servers and database in EU West) behind Cloudflare, with encrypted backups in a private European bucket.

Security

Encryption in transit and at rest, object-level authorization on every profile route, rate limits, an audit trail for every administrative action, and isolation of the model service from identity.

Retention

Account and taste data stay until deletion or a wipe. Recommendations shown, their outcomes and analytics events: 24 months, then counted and deleted by a daily sweep. After 12 months an audit entry loses anything that could point to a person. Server logs: 30 days. Consents and privacy requests stay as a compliance record without personal data after deletion; a request’s text and reply address are cleared 30 days after it is closed.

Contact

Privacy and rights requests go through the request form in your profile (access, correction, erasure, objection, content rights); a person replies within seven business days through your account. Without an account, use the request form on the sources and rights page, with an address for the reply. The team’s privacy owner answers them.

Status of the service

• The service is entirely free and earns no revenue of any kind: no subscription, no advertising, no commission on any watch link.
• No revenue model has been adopted. That is studied after a period of real operation, and the cost of every required license is part of that study before any decision.
• What is being built is built to production standard, and this page stays up throughout development and the free period that follows, until a revenue model is adopted and put into effect.

How we use external data

• Every external value keeps the name of its source and the attribution that source requires, and the attribution is shown where the value appears.
• Use is limited to developing and running the free service: showing the information to the user with its attribution, matching titles, and deriving abstract descriptive features about works.
• We do not sell external data, redistribute it in bulk, or export it to anyone. A user data export contains that user’s own data only.
• We do not collect data by scraping any website; we take it from the interfaces and files each source provides under its published terms.
• When we show a score or rating we name its source and date and never merge it with another source into a single number.

Our commitment

We undertake not to trade in, or profit from, any external data, image, media or score, directly or indirectly, before obtaining the required permissions and licenses from its rights holders, in compliance with the applicable copyright and intellectual-property laws and with each source’s published terms.

When a revenue model is adopted, the required licenses for each source are completed before any revenue starts, or whatever cannot be licensed is removed from the service. No revenue starts on data whose commercial use has not been licensed.

This page is a disclosure of our good faith and the limits of our use. It applies together with each source’s terms, not in their place.

What this page does not cover

Your personal data, your consents and your rights over them are governed by the Privacy Notice and the Terms of Use, not by this page.

Sources and attribution

The sources whose data may appear in the service now, each source’s terms as we understand them from its published text, and the attribution we display. For any specific value, the internal rights registry naming its source is the authority.

For rights holders

If you hold rights in information, an image or media that appears in the service and do not want it shown, or you believe its attribution is incomplete, send your request from the form below with a link to the page where it appears. We remove the material or correct its attribution within seven business days, and do not show it again without your permission.

Requests about your own personal data (access, correction, erasure, objection) go through the same form; with an account, through your profile.