Your data, in plain words

We keep only what we need to sell you the movie and let you watch it. No ads, no tracking, no selling your data.

What we store

• Your name and email, to run your account and send account emails.
• Not your password. We pass it straight to our sign-in provider, Harakumo, which keeps only a salted hash of it.
• The country you signed up from, worked out from your connection (never your exact location), so we know where our viewers are.
• Purchase records: the Stripe checkout reference, amount, currency, date and whether it was refunded.
• Two sign-in cookies: tf_at (proves you’re logged in, for up to 7 days) and tf_rt (renews it, so you stay logged in; it lapses after 60 days without a visit). They are essential, so there is no cookie banner. We use no analytics or advertising cookies.

Who else is involved

• Stripe processes your payment. We never see your card number. Stripe’s own privacy policy applies to the checkout.
• Harakumo runs sign-in. It keeps your name, email and password hash, emails your 6‑digit codes, and sees your IP address and browser type when you sign up or log in, to stop abuse.
• Cloudflare hosts the site, the movie files and the database, and sends our “your movie is ready” email.
• Google Fonts serves the typefaces, so your browser fetches them from Google.

Emails

We only send account emails: the 6‑digit codes to confirm your email or reset your password (sent by Harakumo), and “your movie is ready”. No newsletters unless you ask.

Deleting your data

Delete your account any time from your library (Account → Delete account). That deletes your sign-in account (with the password hash), signs you out everywhere and erases your name. We keep your email with the payment record, no longer tied to an account, because accounting rules require it.

Contact

Questions or requests: reply to your Stripe receipt email.