🔒 Data Privacy

Privacy Policy

Last Updated: August 26, 2026 • GDPR & CCPA Compliant

1. Overview and Core Philosophy

At Filmigrate, privacy is our foundational principle. We believe that your cinema tastes and movie diaries belong strictly to you. We do not sell your personal data, we do not track you across third-party websites, and we provide complete 1-click tools to export or delete your data at any time.

2. Information We Collect

Account Data: When you create an account, we store your email address, display name, and securely salted PBKDF2 hashed password.
Cinema Library: Your watched movies, watchlist titles, countries of origin, ratings, and challenge lists.
Session Metadata: Operating system, browser family, and IP address for active device session management (enabling you to remotely log out unrecognized devices).
Payment Information: When upgrading to Filmigrate Pro, your billing details are processed directly by our Merchant of Record, Lemon Squeezy. We never store or access your credit card number.

3. How Your Data Is Stored & Protected

Filmigrate operates on a high-resilience architecture: your library is cached locally on your device via localStorage for instant offline access and synced to encrypted cloud databases when signed in. All communication uses industry-standard TLS/HTTPS encryption.

4. Data Portability & The Right to Be Forgotten

Under GDPR, CCPA, and global privacy standards, you retain complete rights over your information:

Export: Download a full machine-readable JSON backup of your entire library at any time.
Wipe Cloud Data: 1-click option to erase all cloud logs while preserving your local app.
Account Deletion: Permanent deletion of your user account, active sessions, and cloud movie logs from our servers.

5. Data Retention & Anonymization Policy (GDPR / Statutory Accounting)

When you delete your account, all personally identifiable information (PII) including your email address, display name, password credentials, active device tokens, and movie watchlists are immediately and permanently erased from our production databases.

In strict compliance with international commercial law, tax regulations, and statutory accounting requirements (such as chargeback resolution, fraud prevention, and audit standards), financial transactional records within our subscription_events log are stripped of all personal identifiers (anonymized) and retained for 7 years, after which they are permanently pruned.

6. Cookies & Local Storage

Filmigrate uses standard browser localStorage and lightweight session tokens solely to keep you signed in and maintain offline availability. We do not use third-party advertising cookies or trackers.

7. Contact Us

For privacy inquiries, GDPR rights, or data deletion requests, contact our support team at support@filmigrate.app.