1. Who we are
ViewerChoiceCinema is an independently operated project based in the Netherlands. For privacy questions or requests, contact updates@viewerchoicecinema.com.
2. Information we may process
Launch and email subscriptions
If you join the launch list or another email list, we may process your email address, subscription date, unsubscribe status and technical identifiers needed to manage the subscription securely.
Accounts and profiles
For ViewerChoiceCinema accounts we process an account identifier, verified email address, unique display name, unique username, avatar or profile picture, favorite genres, biography, account creation and update timestamps, and other settings needed to operate the account. We also store when and which version of the Terms of Service was accepted. If you enable two-factor authentication, Supabase Auth processes the authentication-factor information required to provide that security feature.
Community activity
We may process movie or series requests, reasons submitted with those requests, votes, moderation records and other activity associated with an account or anti-abuse identifier.
Support and communications
If you contact us, we may process the information you include in that message. If you support ViewerChoiceCinema through Tipeee, we may receive supporter information that Tipeee makes available to creators, such as a supporter name or username, email address, support amount, reward selection or support status.
Technical information
Our hosting, database and security providers may process technical logs such as IP address, browser or device information, request timestamps and security events. For duplicate-vote prevention, ViewerChoiceCinema processes the network IP address during a vote request and transforms it server-side into a one-way derived identifier. For sign-in, verification, password-reset and related abuse prevention, the network address may also be processed transiently to derive one-way rate-limit identifiers. ViewerChoiceCinema does not store the readable network address as the vote identity or as the value of its application-level authentication rate-limit key.
3. Why we use personal data
- to provide accounts, profiles, voting, requests and other community features;
- to verify accounts and manage account security;
- to operate the launch list and send emails you asked to receive;
- to prevent spam, duplicate voting, fraud and abuse;
- to provide support, moderate content and resolve problems;
- to understand whether the service is working correctly and keep it secure;
- to administer voluntary support and rewards where applicable;
- to comply with legal obligations and protect legal rights.
4. Legal bases under the GDPR
Depending on the feature, we may rely on your consent, the steps needed to provide a service you requested, legitimate interests in operating and securing ViewerChoiceCinema, or a legal obligation. Duplicate-vote and security controls are used for the legitimate interest of maintaining fair community rankings and protecting the service from abuse. For direct marketing emails, we use consent or another lawful basis where applicable, and you can unsubscribe at any time.
6. Tipeee and payment information
ViewerChoiceCinema does not directly process your full card number, bank account credentials or other payment credentials when you support us through Tipeee. Those payment details are processed by Tipeee and its payment providers under their own terms and privacy notices.
ViewerChoiceCinema may receive limited supporter information from Tipeee for administration, communication or reward fulfilment. Do not make a support payment if you do not agree with Tipeee's own privacy and payment practices.
7. Voting protection, browser storage, profile images and logs
ViewerChoiceCinema may keep a random browser identifier in local storage for compatibility with earlier anonymous voting. When you later sign in, an earlier anonymous vote from that browser may be linked to your account so it is not counted a second time.
For current duplicate-vote prevention, the server derives a one-way identifier from the network IP address used for the vote. The raw address is not written into the vote record. The derived identifier is used to enforce one counted vote per title per network or IP identity. Because multiple people can share one public IP address, this protection can sometimes treat a shared household, school, workplace or mobile network as one voting network.
Authentication session information is kept in browser session storage so a signed-in session can survive ordinary page reloads in the same browser tab. ViewerChoiceCinema also stores a last-activity timestamp so an active account can be signed out after approximately one hour without activity. Closing the browser tab may end the browser-persisted session sooner.
If you upload a profile picture, the image is stored in ViewerChoiceCinema's managed Supabase Storage. You may crop, zoom and reposition the image before it is saved. The currently configured source-image limit is 10 MB and the site may create an optimised version for profile display.
Infrastructure providers may also keep ordinary request, security and reliability logs under their own retention and security practices.
8. How long we keep data
We keep personal data only for as long as reasonably needed for the purpose it was collected for, including:
- email subscription data while you remain subscribed and, where needed, limited records after unsubscribing to respect your opt-out;
- profile and account data while your account is active;
- community activity and anti-abuse identifiers for as long as needed to operate fair voting and requests or until they are deleted, anonymised or no longer necessary;
- support, moderation, security or transaction-related records where reasonably needed for administration, fraud prevention, disputes or legal obligations;
- temporary backup copies until normal backup-retention cycles expire.
9. Account deletion and removal requests
If you delete your ViewerChoiceCinema account, we treat that as permanent account deletion, not a reversible deactivation.
When account deletion is completed, ViewerChoiceCinema removes the authentication account, profile, stored profile picture, identifiable account-linked votes, account-linked requests and profile preferences from the active service. If the same verified account email is also present in our ViewerChoiceCinema launch subscriber list, that subscriber record is removed as part of the account deletion process.
Title metadata and aggregate community totals may remain after your personal link to them has been removed. Totals may be recalculated after deletion so the service remains internally consistent without retaining your account identity.
Deletion is not always instantaneous or absolute outside the active service. Limited information may remain where retention is required by law, needed to establish or defend legal claims, necessary for fraud or security investigations, or temporarily contained in protected backups until those backups expire. We will not use such retained information for ordinary profile or marketing purposes.
You can use the permanent deletion control inside your verified profile. You may also contact updates@viewerchoicecinema.com for a privacy request. We may ask you to verify that you control the account or email address before acting on a manual request.
10. Users under 16
If you are under 16, you must have permission from a parent or legal guardian before creating or using an account or otherwise providing personal information to ViewerChoiceCinema. Registration asks users to confirm this requirement. If we learn that personal data was collected from a child without required permission, we will take reasonable steps to remove it.
If you are under 18, you should not make financial support payments connected to ViewerChoiceCinema without permission from a parent or legal guardian.
11. Your GDPR rights
Depending on the circumstances, you may have the right to:
- ask what personal data we hold about you;
- receive a copy of your personal data;
- correct inaccurate or incomplete data;
- request deletion of your personal data;
- restrict certain processing;
- object to certain processing, including direct marketing;
- withdraw consent where processing is based on consent;
- receive certain data in a portable format;
- complain to a competent data protection authority, including the Dutch Autoriteit Persoonsgegevens where applicable.
We aim to respond to valid privacy requests without undue delay and within the time required by applicable law. We may need to verify your identity before acting on a request.
12. International data transfers
Some service providers may process data outside the Netherlands or European Economic Area. Where required, the relevant provider or ViewerChoiceCinema should rely on an appropriate legal transfer mechanism or safeguard under applicable data-protection law.
13. Security
We use reasonable technical and organisational measures appropriate to an independent online project, including authenticated access controls, row-level database policies, verified email accounts, restricted server functions, application-level rate limiting, optional authenticator-app two-factor authentication, browser security headers and managed infrastructure. No online service can guarantee perfect security, so please avoid sending highly sensitive information that ViewerChoiceCinema does not need.
14. Changes to this policy
ViewerChoiceCinema will evolve. We may update this Privacy Policy when features, providers or legal requirements change. The latest version will be published on this page with an updated date.
15. Contact
For privacy questions, access requests, corrections or permanent deletion requests, contact updates@viewerchoicecinema.com.
Also read our Terms of Service.