Cinema Log (“we,” “us,” or “the service”) is a personal cinema-journaling app at thecinemalog.com. This page explains what data we collect, why we collect it, and what rights you have over it. We’ve written it in plain language; if anything is unclear, email legal@thecinemalog.com.
What we collect
Account information
- Email address (required to sign in).
- Password: never stored in plain text; we use Supabase Auth, which stores a one-way hash.
- Optional profile details you choose to add: display name, username, bio, city/state/country, profile photo, favorite theaters, and social links.
Content you create
- Movies you log (title, date, theatre, showtime, ticket count).
- Per-film state you set: star rating, favorite/heart, notes, custom poster overrides, “Best Of” picks.
- Follow relationships between you and other users.
- Reminders you set for upcoming film releases.
Technical data
- Standard server logs (IP address, browser type, pages visited) collected by our hosting provider for security and debugging. Not used for analytics or marketing.
- Authentication cookies set by Supabase Auth so you stay signed in across visits. These are strictly necessary to provide the service.
We do notcollect: payment information, precise location data, contacts, your browsing on other sites, or any data via third-party advertising or analytics scripts. We don’t run ads.
How we use it
- To run the service: store and display your logs, render your profile, sync your data across devices.
- To enable social features: show your activity to people who follow you (subject to your privacy toggles in Settings).
- To send transactional emails (e.g. password reset, release reminders you’ve opted into).
- To investigate abuse, errors, or security issues.
We do not sell your data. We do not share your data with advertisers or data brokers. We don’t use your data to train AI models.
Third parties we share data with
Cinema Log uses a small number of service providers to operate:
- Supabase (database, authentication, file storage): stores your account and your logged data. Subject to Supabase’s privacy policy.
- Vercel (web hosting): serves the pages you see. Collects standard server logs. Subject to Vercel’s privacy policy.
- The Movie Database (TMDB): film metadata, posters, and backdrops are fetched from TMDB. We send TMDB the film identifiers you interact with but no personal data. This product uses the TMDB API but is not endorsed or certified by TMDB.
- OMDb: Rotten Tomatoes / Metacritic / IMDb rating pills are fetched from OMDb. Same as TMDB: film identifiers only, no personal data.
Cookies
Cinema Log uses only strictly necessarycookies, the authentication cookies set by Supabase so you stay signed in. We don’t run third-party analytics, marketing, or advertising cookies. Because all our cookies are essential to operate the service, no consent banner is required under GDPR or comparable laws.
The app also uses your browser’s localStorage / sessionStoragefor non-tracking purposes: caching film posters, remembering your nav preferences, and tracking whether you’ve already seen the first-log celebration animation. None of this leaves your device.
Your rights
If you live in California (CCPA/CPRA), the EU (GDPR), or another jurisdiction with similar laws, you have the right to:
- Access your data: log in and visit your library / profile to see everything we hold about you. Email us if you want a machine-readable export.
- Correct your data: edit it directly in Settings, or email us if you can’t.
- Delete your account: open Settings → Account and choose “Delete account.” A 30-day grace period applies during which you can cancel; after that, your data is permanently removed from our database.
- Object or restrict certain uses: email us with the specifics.
- Not be discriminated against for exercising any of these rights.
We don’t sell or share personal information as those terms are defined under California law, so there is nothing to opt out of in that regard.
Data retention
We keep your account data as long as your account is active. Deleted-account data is purged within 30 days of the final delete. Server logs are retained per Vercel’s standard retention. Notifications older than 90 days are automatically purged from the app inbox.
Children
Cinema Log is not directed to children under 13 (or the equivalent minimum age in your jurisdiction). If you believe a child has created an account, email us and we’ll delete it.
International users
Cinema Log is operated from the United States and your data is stored on servers in the United States. If you access the service from outside the US, you consent to the transfer of your data to the US for processing.
Changes to this policy
We’ll update the “Effective” date at the top whenever this policy changes. For material changes we’ll show a notice in the app before the new version takes effect.
Contact
Privacy questions, data-access requests, or anything else, email legal@thecinemalog.com.