Skip to policy content

Legal

FilmShuffle Privacy Policy

Effective date: August 25, 2026
Version: 2026-08-25

This Privacy Policy explains how FilmShuffle LLC (“FilmShuffle,” “we,” “us,” or “our”) collects, uses, discloses, and protects personal information when you use filmshuffle.app, FilmShuffle web applications, and related services that link to this Policy (collectively, the “Service”).

FilmShuffle LLC is the operator of the Service and, where applicable, the controller of personal information described in this Policy.

1. Scope

This Policy applies to visitors, account holders, Film Club participants, people who contact support, people who submit reports or legal requests, and purchasers of any future paid service.

It does not govern third-party websites or services that have their own privacy policies, even when FilmShuffle links to or integrates with them.

2. Age rules

FilmShuffle accounts and community features are for people who are at least 16 years old. We do not request a birth date; account holders confirm that they meet the minimum age.

People under 16 may browse public pages and use a guest ranking demonstration where available, but they may not create an account, publish content, or participate in community features. The Service is not directed to children under 13. If we learn that we collected personal information from a child under 13 in circumstances requiring parental consent and did not obtain it, we will take reasonable steps to delete the information.

A parent or guardian who believes a child provided personal information contrary to this Policy may contact contact@filmshuffle.app.

3. Personal information we collect

The information we collect depends on how you use FilmShuffle.

3.1 Account and authentication information

We may collect:

  • email address;
  • account identifier and authentication-provider identifiers;
  • username and display name;
  • password and authentication data handled by our authentication provider;
  • sign-in, confirmation, password-recovery, session, and security timestamps;
  • whether you used email/password, Google, Microsoft, or another sign-in option we make available; and
  • records showing acceptance of legal terms, policy versions, age confirmation, acceptance method, and timestamp.

We do not receive a readable copy of your password.

3.2 Profile and public information

Depending on the features and settings you use, we may collect and display:

  • username, display name, profile photo, banner image, and biography or other profile fields;
  • Film Personality or similar profile results;
  • aggregate trivia or activity statistics;
  • public reviews, lists, rankings, ratings, Year-in-Film results, or other content you deliberately make public; and
  • public sharing links and the information included in the shared page.

Public profile information and public User Content can be viewed, copied, indexed, captured, or redistributed by other people. Approved profile images may be stored at publicly accessible URLs.

3.3 Film activity and preferences

We collect information you create through FilmShuffle, such as:

  • My Favorite Films order and comparison choices;
  • FilmShuffle ratings and 100 Highest Rated results;
  • watchlist, Everything Seen, skipped, unseen, or suppressed-film states;
  • Film Log entries, watched dates, reviews, spoiler labels, rewatches, companions, notes, and photos;
  • custom lists, Film Sets, Tier lists, board arrangements, and uploaded Tier images;
  • trivia participation and first-attempt results;
  • recommendations, preference settings, display settings, and interaction history; and
  • technical ranking state used to calculate, place, compare, undo, or restore list positions.

3.4 Social and Film Club information

We may collect:

  • friendships, friend requests, blocks, and feed-hiding preferences;
  • comments, replies, reactions, suggestions, votes, and notifications;
  • Film Club membership, roles, invitations, submissions, comments, votes, programs, journeys, and selected films;
  • visibility and comment settings; and
  • reports involving profiles, content, users, or Film Clubs.

FilmShuffle does not currently offer direct messages. If direct messaging is introduced, this Policy will be updated before or when the feature launches as required.

3.5 User uploads and file information

When you use an upload feature, we collect the file and associated information, which may include:

  • profile photos and banners;
  • Film Log photos;
  • custom Tier images;
  • filenames or cleaned display titles;
  • file type, size, dimensions, storage path, upload time, and moderation status; and
  • images, audio, video, documents, or other files if FilmShuffle adds features that accept them.

Current image uploads are generally limited to supported JPEG, PNG, or WebP files and are subject to feature-specific limits. Do not upload highly sensitive information, payment information, government identifiers, barcodes, login credentials, or material you do not have the right to use.

3.6 Imported information

If you import a Letterboxd, IMDb, or other supported export, we collect the information you select from that file. Depending on the source, this may include:

  • source service and file name;
  • film titles, years, TMDB or IMDb identifiers, and source URLs;
  • ratings, watched dates, review text, list names, list order, watchlist items, and viewing history;
  • row numbers, validation issues, matching outcomes, and duplicate status;
  • cryptographic file or request fingerprints used to detect duplicate imports and support undo; and
  • import status, counts, receipts, and records created by the import.

Raw Letterboxd and IMDb import files are processed for the import and are not intended to be retained in FilmShuffle database or file storage after processing. Import receipts and resulting FilmShuffle records may remain until deleted or no longer reasonably needed.

FilmShuffle does not request your Letterboxd or IMDb password for file imports.

When you contact us or submit a report, we may collect:

  • your name, email address, account identifier, subject, message, and category;
  • the relevant page URL or content location;
  • report reason, details, and snapshots of reported content;
  • correspondence and case status;
  • moderation decisions, evidence, review requests, outcomes, and internal notes;
  • copyright notices and counter-notices;
  • intimate-image removal requests, signatures, contact details, and status information; and
  • information reasonably necessary to verify identity, authority, a legal request, or a claimed right.

Do not send passwords, full payment-card information, government identification, suspected child sexual abuse material, or copies of nonconsensual intimate images through general support. Use the specified reporting process and identify the content by URL, post, account, or other location information.

3.8 Technical and usage information

FilmShuffle and its service providers may automatically process:

  • date and time, requested page, route, action, and response status;
  • session and authentication information;
  • approximate network information, IP address, browser or device information, and request logs maintained by hosting, content-delivery, authentication, or security providers;
  • sanitized error classifications, occurrence counts, and technical fingerprints;
  • rate-limit identifiers and abuse-prevention counters; and
  • interaction events needed to operate rankings, feeds, imports, notifications, and other features.

FilmShuffle’s application may read an IP address transiently for security, rate limiting, or support abuse prevention and store a keyed or hashed identifier rather than the raw address. Infrastructure providers may separately maintain ordinary network logs under their own retention practices.

FilmShuffle does not currently use persistent device fingerprinting, precise geolocation, camera access, or microphone access through the web application.

3.9 Communications and marketing preferences

We collect communications you send us and your preferences concerning newsletters, promotional email, and transactional notifications. Marketing consent is separate from acceptance of the Terms.

3.10 Future payment information

If FilmShuffle offers Premium or another paid service, payments may be processed by Stripe or another identified payment processor. The processor will collect payment-card and billing information under its own privacy policy. FilmShuffle may receive limited information such as customer and subscription identifiers, billing status, plan, renewal date, payment outcome, country, tax status, and the type or last digits of a payment method. FilmShuffle does not need to receive your complete payment-card number.

4. Browser storage and cookies

FilmShuffle currently uses browser storage primarily for authentication, security, preferences, and user-requested functionality. The exact names or durations may change as security and features evolve.

4.1 Authentication and security cookies

These may include:

  • Supabase authentication cookies, including cookies matching sb-<project-reference>-auth-token, which maintain a signed-in session;
  • a short-lived email-confirmation cookie;
  • a short-lived password-recovery cookie; and
  • short-lived reauthentication cookies used to protect account deletion.

These cookies are used to provide requested account functionality and protect accounts. They may be marked Secure, HttpOnly, and SameSite where appropriate.

4.2 Local storage

FilmShuffle may use local storage for:

  • a guest ranking demonstration, including selected films, order, comparisons, and update time, generally retained for up to seven days;
  • list display preferences;
  • dismissed import prompts; and
  • dismissed product tours or feature prompts.

Local storage remains in your browser until it expires, you clear it, the browser removes it, or FilmShuffle code replaces or deletes it.

4.3 Session storage

FilmShuffle may use session storage for temporary rating or skip progress. Session storage usually lasts until the browser tab or session ends.

4.4 No current advertising or third-party analytics cookies

FilmShuffle does not currently use advertising cookies, cross-site behavioral advertising, or a third-party audience analytics tracker. If we introduce nonessential tracking, advertising, or similar technologies, we will update this Policy and provide notice or choices required by applicable law before or when the practice begins.

Browser settings can clear or block storage, but doing so may sign you out, reset the guest demo, or prevent features from working correctly.

5. How we use personal information

We use personal information to:

  1. create, authenticate, secure, and administer accounts;
  2. provide rankings, ratings, logs, lists, profiles, imports, social features, Clubs, sharing, and other requested functionality;
  3. personalize displays, recommendations, feeds, and feature settings;
  4. publish content to the audience selected by the user;
  5. process uploads and generate technical display versions;
  6. moderate names, images, and community content using automated and human review;
  7. detect, prevent, investigate, and respond to spam, fraud, abuse, security incidents, policy violations, and illegal activity;
  8. receive and resolve support requests, reports, appeals, copyright notices, intimate-image requests, and legal requests;
  9. communicate about authentication, security, community activity, moderation, legal changes, support, and future billing;
  10. send marketing communications consistent with your preferences and applicable law;
  11. operate, maintain, debug, test, analyze, and improve the Service;
  12. create aggregate or de-identified information for product, safety, and operational analysis;
  13. process payments, taxes, subscriptions, cancellations, and disputes if paid services launch;
  14. enforce the Terms, Community Guidelines, and other policies; and
  15. comply with law and protect the rights, safety, and property of FilmShuffle, users, and others.

FilmShuffle does not currently use private User Content to train a general-purpose artificial-intelligence model. We will not begin using private User Content for that materially different purpose without updating our disclosures and obtaining any consent required by law.

6. Automated moderation and decision support

Profile names and profile images may be reviewed by automated moderation tools and human moderators before publication. Proposed content may be screened locally or sent to an external moderation provider, such as OpenAI, when that integration is enabled.

Automated systems may also help identify spam, unsafe content, security events, or manipulation. FilmShuffle does not promise that automated systems will identify every violation or avoid every mistake. Moderation actions may be reviewed by a person where our process provides for review.

Where data-protection law requires a legal basis, FilmShuffle relies on one or more of the following:

  • Contract: processing necessary to provide the Service you requested and administer your account.
  • Legitimate interests: operating, securing, improving, and protecting FilmShuffle; preventing abuse; supporting users; and understanding service performance, balanced against your rights.
  • Consent: optional marketing, certain browser technologies, or other processing where we ask for consent. You may withdraw consent prospectively.
  • Legal obligation: processing needed to comply with law, lawful requests, tax, accounting, safety, consumer-protection, or rights-enforcement duties.
  • Vital or substantial public interests: limited processing reasonably necessary to address an apparent emergency, exploitation, or serious threat where recognized by applicable law.

8. How we disclose personal information

8.1 According to your visibility and sharing choices

We disclose profile and User Content to other people according to the visibility option or sharing link you choose. Public content may be available to anyone. Friends content may be available to accepted friends. Private content is not intentionally published to other users.

8.2 Service providers

We disclose information to vendors that help host, authenticate, store, deliver, secure, moderate, support, email, analyze, or operate FilmShuffle. Depending on enabled features, providers may include:

  • Supabase for authentication, database, and file storage;
  • hosting, edge-network, deployment, and operational providers;
  • TMDB for film data and images;
  • Google or Microsoft when you choose their sign-in services;
  • OpenAI or another provider when automated moderation is enabled;
  • email-delivery providers;
  • Stripe or another payment processor if paid services launch; and
  • professional advisers or vendors supporting legal, accounting, security, or compliance work.

Providers may process information only for authorized purposes under their agreements and applicable law. Their own services may also be governed by their privacy notices.

8.3 Other users and Club administrators

Other users may receive information needed for friendships, comments, reactions, Clubs, suggestions, votes, reports, and other community interactions. Club hosts may have tools to manage membership and Club content but do not receive unrestricted access to private account information.

We may preserve or disclose information when we reasonably believe it is necessary to:

  • comply with law, regulation, legal process, or a valid government request;
  • protect a person from death, serious injury, exploitation, or other substantial harm;
  • detect, investigate, or prevent fraud, abuse, security incidents, or illegal activity;
  • enforce our agreements and policies;
  • respond to copyright, privacy, intimate-image, or other rights claims; or
  • protect FilmShuffle, users, or the public.

Copyright counter-notices may be forwarded to the person who submitted the original notice, as described in the Copyright and DMCA Policy. Apparent online child sexual exploitation may be reported to the National Center for Missing & Exploited Children and law enforcement as required or permitted by law.

8.5 Business transactions

Information may be disclosed in connection with a merger, financing, acquisition, reorganization, bankruptcy, sale of assets, or transfer of the Service. A recipient must honor applicable legal obligations and the privacy commitments that continue to apply.

We may disclose information when you direct us to, use a feature that requires the disclosure, or give consent.

8.7 Aggregate and de-identified information

We may disclose information that is reasonably aggregated or de-identified so it does not identify you. We will not attempt to re-identify it except for security, quality control, or as permitted by law.

9. Sale, targeted advertising, and tracking choices

FilmShuffle does not currently sell personal information and does not currently share personal information for cross-context behavioral or targeted advertising as those terms are defined by applicable U.S. state privacy laws. FilmShuffle does not currently operate an advertising network or use a third-party audience analytics tracker.

Because those practices are not currently used, a browser-based opt-out preference signal such as Global Privacy Control does not presently change advertising or sale activity on FilmShuffle. If FilmShuffle begins a practice that is legally treated as a sale, targeted advertising, or sharing for cross-context behavioral advertising, we will update this Policy and provide required opt-out methods before or when the practice begins.

10. Data retention

We retain personal information for as long as reasonably necessary for the purposes described in this Policy, including providing the Service, maintaining account and content history, supporting user-directed sharing, meeting legal obligations, resolving disputes, preventing abuse, and enforcing agreements.

Retention depends on the type of information:

  • account and User Content generally remain until you delete them or your account;
  • public share links may remain until revoked or the underlying content is deleted;
  • import receipts, ranking history, and technical state may remain while needed to support undo, integrity, duplicate detection, and product operation;
  • support, reports, moderation, security, and legal records may remain after account or content deletion when reasonably necessary for safety, compliance, disputes, or enforcement;
  • legal-acceptance records may be retained to document agreement;
  • payment and tax records may be retained for legally required periods if paid services launch;
  • temporary security and rate-limit records may expire on shorter schedules; and
  • backup copies may remain until overwritten, rotated, or deleted through normal backup processes.

Deletion from active systems may not remove information immediately from every backup or provider log. We may de-identify or detach retained records from your account when the identity is no longer needed. We may retain information longer when required by law, subject to a preservation request, or reasonably needed to address fraud, safety, or legal claims.

11. Account export and deletion

11.1 Export

FilmShuffle provides a downloadable core account export that may include account and profile information, Favorites, ratings, Film Logs, reviews, watchlist, custom lists, Film Sets, imported ratings or history, trivia information, public-review sharing records, and referenced movie metadata.

The automated export is not necessarily a complete copy of every record FilmShuffle processes. It may not include uploaded files, social relationships, comments, reactions, Clubs, Tier data, detailed ranking state, legal acceptances, safety reports, support records, moderation records, provider logs, or operational records. You may contact us to request access rights provided by applicable law.

11.2 Account deletion

You may delete your account through account settings after confirmation and reauthentication. Deletion is immediate and generally irreversible once completed. It is intended to remove your account, owned content, and user-prefixed uploaded files from active systems.

Some information may remain temporarily in backups or be retained or de-identified for legal, security, fraud-prevention, support, reporting, moderation, billing, dispute, or compliance purposes. Content independently created or retained by another user may remain. Deleting an account will cancel future renewal of any Premium subscription and may immediately end paid access, as described in the Terms.

12. Your privacy rights

Depending on where you live and whether a law applies to FilmShuffle, you may have rights to:

  • confirm whether we process your personal information;
  • access or receive a copy of personal information;
  • correct inaccurate personal information;
  • delete personal information;
  • obtain portable information in a usable format;
  • object to or restrict certain processing;
  • withdraw consent for future processing;
  • opt out of marketing;
  • opt out of a sale, targeted advertising, or certain profiling if FilmShuffle begins those practices;
  • appeal our denial of a privacy request; and
  • complain to a privacy or data-protection authority.

Submit a request to contact@filmshuffle.app with the subject “Privacy Request.” Describe the right you wish to exercise and identify the account or information involved. We may ask for information reasonably necessary to verify your identity, authority, and jurisdiction. An authorized agent may submit a request where permitted by law, but we may require proof of authority and direct verification with the individual.

We will not discriminate against you for exercising a privacy right. Rights are subject to exceptions, and we may deny or limit a request where permitted by law. If we deny a request, you may appeal by replying or emailing contact@filmshuffle.app with the subject “Privacy Appeal.”

You can unsubscribe from marketing by using the link in the message. We may still send necessary transactional, security, legal, or account communications.

13. International processing

FilmShuffle is based in the United States. Personal information may be processed in the United States and other countries where FilmShuffle or its providers operate. Those countries may have different privacy laws than your country.

Where required, FilmShuffle will use an available lawful mechanism or contractual protection for international transfers. The Service may not be offered in every jurisdiction, and FilmShuffle may restrict features or registration while establishing required local compliance arrangements.

If the European Economic Area or United Kingdom data-protection laws apply to our processing, you may have the rights described above and may complain to the supervisory authority in your country. FilmShuffle will identify any legally required local representative in this Policy before intentionally offering the Service in a manner that requires such a representative.

14. Security

FilmShuffle uses administrative, technical, and organizational measures designed to protect information, including access controls, encrypted network transport, security headers, private file storage for certain uploads, reauthentication for sensitive account actions, moderation controls, and abuse-prevention measures.

No system can guarantee absolute security. You are responsible for using a strong unique password, protecting your email account and devices, signing out of shared devices, and promptly reporting suspected compromise.

Third-party services may collect information directly from you or receive information needed to perform an integration. Their privacy policies govern their independent processing. FilmShuffle is not responsible for a third party’s privacy or security practices.

TMDB poster and profile images may load from TMDB infrastructure, which receives ordinary request information such as IP address and browser headers. Google or Microsoft receives information when you select their sign-in option. Payment providers receive billing information if paid services launch.

16. Changes to this Policy

We may update this Policy to reflect changes in the Service, law, technology, or our practices. We will post the updated version and change the effective date. We will provide additional notice or obtain consent where required for a material change.

We will not rely on a general statement about future features to begin a materially different use of previously collected personal information without providing notice and any choice required by law.

17. Contact us

FilmShuffle LLC
160 South 150 East
Valparaiso, IN 46383
United States

Email: contact@filmshuffle.app
Phone: (219) 255-8072

For privacy requests, use the subject “Privacy Request.”
For a privacy appeal, use the subject “Privacy Appeal.”