privacy policy

your account: your email address, your name and a username, and which sign-in method you used (apple, google or email). email accounts also have a password, which is stored hashed by the sign-in service and never seen by the developer.

your content: the lists you make and the titles in them, your ratings and notes, and a profile photo if you add one.

that's everything. there's no usage data, location, contacts, advertising identifier or device fingerprinting.

only to run the app: to sign you in, to sync your lists and ratings between your devices, and to show your profile. it isn't used for advertising, profiling or anything else.

on your device, in the app's local database, so it works offline.

on servers run on amazon web services in the united states: your account in amazon cognito, your lists and ratings in amazon dynamodb and your profile photo in amazon s3. requests go over https and need your sign-in token, and your lists and ratings can only be read with your account.

sign in with apple or google: if you use one, that company confirms who you are and shares your name and email with the app. their own privacy policies apply.

amazon web services hosts the servers above and processes the data only to provide that hosting.

movie, show and person details come from the movie database (tmdb), with scores from omdb and streaming availability from justwatch via tmdb. the app asks flick's own server, which asks them; your account isn't sent along, only what you searched for or opened.

posters, backdrops and photos load straight from tmdb's image servers, so tmdb sees your device's ip address when you view them, as any website would.

flick contains no analytics, advertising, crash reporting or tracking code, and doesn't use cookies.

for as long as you have an account. deleting a list or rating marks it deleted so your other devices remove it too; everything goes when the account is deleted.

email flick@gusfl.us from the address on your account and ask for it to be deleted. your account, lists, ratings and profile photo are removed, usually within a few days. deleting the app removes the copy on that device.

flick.gusfl.us is a static website. it sets no cookies and runs no analytics. like any website, the hosting provider (amazon web services) may keep standard request logs.

flick isn't directed to children under 13.

if this policy changes, the new version will be posted on this page with a new date at the top.

questions about this policy: flick@gusfl.us