Privacy

You come here to look up films and play games, not to be studied. So we keep as little about you as we can, we tell you exactly what that is, and you can take it with you or delete it whenever you like.

Version 2026-10-20. If this changes in a way that matters, you'll see a notice when you next visit, before it applies to you.

The short version

• No email address, no phone number, no real name required. A username and a password are all an account needs.
• No tracking. No analytics services, no advertising trackers, no social-media pixels, no third-party scripts at all. Every image and script on every page comes from our own server.
• One cookie, and only to keep you signed in.
• We never write down your IP address. Our servers keep no visitor logs.
• We never sell or rent anything about you, and we never will, to anyone.
• Ads, when they come, will never use your personal data (see Ads and Premium).
• Download everything we hold about you, or delete your account for good, from Your data. No email to send, no waiting.

What we keep, and why

That's all of it. An account still waiting in the Lobby that hasn't visited for 30 days is deleted with everything in it. Failed sign-ins keep no username, since people sometimes type their password into the wrong box.

What we never collect

Email addresses, phone numbers, birthdays, addresses, payment details (there's nothing to pay for), contacts, precise location, your IP address, device fingerprints, or anything from other websites you visit.

Cookies

One: fr_session, a random token that keeps you signed in for 30 days. It can't be read by scripts, isn't sent to any other site, and ends the moment you sign out. Signed-out visitors get no cookie at all. That's why there's no cookie banner: there's nothing to consent to.

Who can see what

• Other members can see your member page: your username and display name, your game records and streaks, Rushmores, Best Ever picks, the cards you choose to show, your points and badges. Pick a display name you're happy for them to see; it doesn't have to be your real name.
• What's new credits the members whose reports led to a fix only if they switch on "Credit me by name". Otherwise it says "found by 3 members".
• The person who runs the site can see everything above, in order to run it: read your feedback, review the discs you add, and keep the games fair. We look at individual accounts only to answer you or fix a problem.
• Signed-out visitors and search engines see none of it. New accounts wait in the Lobby until they're let into the full beta; the Lobby's daily game checks answers and forgets them.

Who else touches your data

We don't sell, rent or trade it. A few services do part of the work, and each gets only what it needs:

• Hostinger rents us the server in Boston, USA that the site and its database run on.
• Anthropic (the company behind Claude) receives the text of an Ask question to work out how to answer it, with nothing about who asked. Ask is limited to admins during the beta. Anthropic's commercial terms say it doesn't train its models on this kind of data.
• Backups: a copy of the database is saved nightly to a private server run by the site's owner, kept two weeks (weekly copies eight weeks), so a mistake or a failure doesn't lose your streaks.

Film data comes from IMDb, TMDb, Wikidata and Wikipedia (Data and sources), but those flow to us: no visitor's information is ever sent to them. Posters and photos are fetched by our server and served from it, so those companies never see who's looking.

If the law requires us to hand something over, we'll give only what's legally required, and tell you unless we're forbidden to.

Your rights, wherever you live

Some laws (Europe's GDPR, California's CCPA and others) give people rights over their data. We give everyone the same rights, whether a law requires it or not:

• See and take it: Your data has a button that downloads everything we hold about you as a file.
• Correct it: change your display name there; for anything else, tell us.
• Delete it: delete your account there. It takes effect at once: your account, your games, picks, pins, collection, feedback and Ask questions are erased, and the game log keeps your moves only without your name, for puzzle statistics. The nightly backups age out within eight weeks.
• Object or ask questions: use Feedback, and a person will answer.

Children

You need to be 13 or older to have an account. If we learn an account belongs to someone younger, we delete it.

Keeping it safe

Every page is served over HTTPS. Passwords are stored only as salted PBKDF2 hashes (310,000 rounds). Session tokens are stored hashed too, so even a copy of our database couldn't be used to sign in as you. The server accepts no password logins, only cryptographic keys, and its firewall is closed to everything but the website and that key-only administrator access. No system is perfect; if something ever goes wrong, we'll tell members promptly and plainly.

Ads and Premium (after the beta)

Running the site costs money (here's what it costs). After the beta, the plan is to keep it free for everyone with ads, and to offer a paid tier with premium features and no ads at all. We're writing the rules down now so they're a promise, not an afterthought:

• Ads will be chosen by the page you're on (a horror film's page might show a horror Blu-ray), never by who you are or what you've done here.
• No ad network's tracking scripts, pixels or cookies. Ads will be served from our own server, like everything else.
• Your activity is never used for advertising, and never shared with advertisers, not even in aggregate about you.
• Paying will never be needed to delete your data or to take it with you.

Changes

If we change this policy in a way that matters, you'll see a notice on your next visit with what changed, and it won't apply to you until you've seen it. We'll never use data we already hold in a new way without asking first.

Questions

Use Feedback from any page (signed in). A person reads every message. See also the Terms and About.