Privacy at FilmStash

Who looks after your data

Callum Luxford, trading as FilmStash, operates this service and is responsible for your personal information. Contact support@filmstash.co.uk for privacy questions or requests.

What we use and why

We use your name, email, password hash, settings and saved film activity to provide your account and the features you request. This includes lists, diary entries, rankings, imports and optional social activity. We process these records to provide our service to you. Optional profile details and photos are supplied by you.

We use security logs, abuse reports, moderation records and support correspondence for our legitimate interests in protecting accounts, resolving problems and running a safe community. We may also retain information where required by law. We do not sell your personal information or use it for advertising.

Your sharing choices

New profiles become public after email verification unless you choose private. Existing private profiles stay private. Your email and private library are not published. Diary entries, lists and liked films have separate sharing controls. Shared private collections are available to authorised members; unlisted links are accessible to people who have the link. Public contributions can be viewed and copied by others.

Manage these choices in Settings. Import files and social contributions can include information you choose to provide about films and other members. Cover-text recognition runs on your device.

Services that help us run FilmStash

Cloudflare hosts the site, profile images and recovery records; Neon stores application data; Resend sends account emails; and Zoho hosts our support inbox. These providers process the information needed to operate their services. TMDB supplies film information and images; your browser contacts its image service. External viewing and trailer links lead to other providers.

Our database is hosted in London. Providers may process operational data in other countries under their own processing arrangements; this is not a promise that all data remains in the UK. Contact us for information about the safeguards applicable to your data.

Cookies and device storage

We use a necessary session cookie to keep you signed in for up to 30 days. Signing out clears it. Review drafts and film caches may be stored in your browser until submitted or cleared. Server-side account deletion does not clear storage on your other devices. We do not currently use advertising cookies or third-party behavioural analytics.

Retention and deletion

We keep active account records while your account exists. Some individual content removals use soft deletion. Account deletion removes credentials and library records, removes or anonymises related social contributions, and queues profile-photo removal. Restricted recovery records prevent deleted or private content from returning through a backup.

Expired sessions and account links are eligible for daily cleanup. Verification links expire after 24 hours and password-reset links after 30 minutes. Backup copies and recovery records may remain after an account is deleted; access is restricted and deletion restrictions must be applied before recovery. We retain support, safety and operational records only while needed to resolve the matter, prevent recurring abuse, recover safely or meet legal obligations. Contact us about a particular record or retention request.

Your rights

You can edit your profile, export your records and delete your account through Settings. Depending on the circumstances, you can request access, correction, erasure, restriction or portability, and object to processing based on legitimate interests. Email support to exercise these rights; we may need to confirm your identity.

You can complain to the Information Commissioner’s Office. We do not make automated decisions with legal or similarly significant effects about you. We will update this notice when our use of information changes.