Privacy Policy
1. Introduction
Movieo is operated by CODE ALPHA d.o.o., Ulica Dragutina Domjanića 28, 10000 Zagreb, Croatia. This policy explains how we use personal information when you use movieo.me. You can contact us at [email protected] for privacy questions and requests.
2. Information We Collect
2.1 Information You Provide
- Account Information: Email address, username, profile picture, bio, location, and website
- Social Media: When you sign in with Google, we receive your basic profile information (name, email, avatar)
- Content: Movie lists (seenlist, watchlist, blacklist), comments, discussions, and ratings you create
- Premium Features: For premium subscribers, we generate and store a taste profile (favorite genres, directors, AI-generated insights) used to power AI recommendations
2.2 Automatically Collected Information
- Usage Data: Pages visited, features used, time spent on the service
- Technical Data: IP address, browser type, device information, session data
- Cookies: Session cookies for authentication and functionality, and a first-party time-zone preference cookie
3. How We Use Your Information
We use your information to:
- Provide and maintain our service
- Authenticate your account and manage sessions
- Generate personalized movie recommendations using AI
- Send you notifications about your account activity
- Send newsletters and product updates (with your consent)
- Improve our service and develop new features
- Prevent fraud and ensure security
- Comply with legal obligations
4. Legal Basis for Processing (GDPR)
We process your personal data based on:
- Consent: When you sign up and agree to our terms
- Contract Performance: To provide the service you requested
- Legitimate Interest: To improve our service, prevent fraud, and ensure security
- Legal Obligation: To comply with applicable laws
5. Third-Party Services
We share your data with the following third-party services:
5.1 Authentication Providers
- Google OAuth2: For Google sign-in (we use only Google authentication)
5.2 Email Services
- Amazon SES: For transactional emails (account notifications, password recovery)
5.3 Payment Processing
- Stripe: For subscription billing. We never store your payment card details — Stripe is PCI-DSS Level 1 certified and handles all payment data directly. We only store a Stripe customer ID and your subscription status.
5.4 Monitoring & Error Tracking
- Hexdump: Error tracking (production only)
5.5 Storage & Infrastructure
- DigitalOcean Spaces: File storage for images
- AWS S3: Backup storage
5.6 AI Services
- OpenAI / Anthropic: For generating personalized movie recommendations, taste reports, AI roasts, and Movie Night picks. Only structured taste data is sent (lists, ratings, genres) — no comments, discussions, or personally identifying content.
5.7 Content Providers
- TMDB, IMDB, Rotten Tomatoes, Metacritic: For movie information (we only fetch public data)
6. Your Rights (GDPR)
Under GDPR, you have the following rights:
6.1 Right to Access
You can export all your data in JSON format. Export My Data
6.2 Right to Erasure
You can delete your account at any time. Your personal data will be anonymized, but your lists and comments will be preserved (anonymized). Delete My Account
6.3 Right to Rectification
You can update your personal information in your account settings.
6.4 Right to Restrict Processing
You can disable email communications and make your lists private in your settings.
6.5 Right to Data Portability
You can export your data in a machine-readable JSON format.
6.6 Right to Object
You can object to processing by deleting your account or opting out of emails.
6.7 Movie Night For Two
The Movie Night For Two feature lets you find movies you and a partner will both enjoy. When you enter a partner's email, we look up their account if they're a registered Movieo user with sufficient viewing history. We do NOT email or notify the partner. Lookups are rate-limited (5 per hour, 20 per day per user) to prevent abuse and email enumeration. To opt out of being matched as a partner, delete your account or contact us.
7. Data Retention
7.1 Active Accounts
We retain your data as long as your account is active.
7.2 Subscription Cancellation
When you cancel a paid subscription, you keep full access until the end of your billing period. After that, you retain read-only access to all premium features you've already generated — recommendations history, AI Taste Reports, AI Movie Roasts, Movie Night picks, and your Taste Poster. Generation of new content requires an active subscription. Cached AI-generated reports persist for 30 days from generation; Movie Night results persist for 7 days.
7.3 Deleted Accounts
When you delete your account:
- Personal data is anonymized immediately
- User-generated content (lists, comments) is preserved but anonymized
- Audit logs are retained for 7 years for compliance
7.4 Backups
Database backups are retained for 30 days. Deleted user data in backups will be purged after backup rotation.
8. Security
We implement appropriate security measures:
- SSL/TLS encryption for all connections
- Database and file storage encryption
- Secure session management with CSRF protection
- OAuth-based authentication (no passwords stored)
- Regular security audits and monitoring
- Access controls and role-based permissions
9. Cookies
9.1 Essential Cookies
We use the following essential cookies:
- _movieome_session: Required for authentication and session management
- CSRF token: Required for security
- tz: Your browser's time-zone name (for example "Europe/Zagreb"), kept for one year to preselect a country in the "Available on" pickers when we cannot tell it otherwise. It contains no identifier and is not shared with anyone.
9.2 Analytics Cookies (Optional)
Google Analytics: The optional Google Analytics script loads only after you explicitly accept analytics cookies. This applies in every region. This privacy page and the data processing disclosure keep that script off, even if you previously accepted. The local “Analytics settings” controls still let you change your choice here; acceptance applies when you visit other Movieo pages. Withdrawing it disables analytics and refreshes the document. Analytics choices and Google advertising choices are separate.
- Purpose: Analyze site usage, improve user experience
- Data Collected: Page views and browser/session information. Loading the script connects your browser to Google's servers.
- Retention: Retention depends on the settings in the connected Google Analytics account.
- Your Control: You can accept or reject analytics cookies and reopen “Analytics settings” at any time
- IP Anonymization: The existing legacy tag requests IP anonymization. This setting alone does not establish compliance with data protection rules.
PostHog: The optional PostHog product analytics script loads only after you explicitly accept analytics cookies. This applies in every region. This privacy page and the data processing disclosure keep that script off, even if you previously accepted. Withdrawing your choice stops collection, removes the PostHog cookies and local storage from your browser, and refreshes the document. It is not used while a Movieo administrator is signed in as you for support.
- Purpose: Understand how Movieo is used and improve the product
- Data Collected: Page views, clicks and other interactions, and browser and device information. When you are signed in, your Movieo account id, so that usage is linked to your account. Loading the script connects your browser to PostHog's servers.
- Storage: PostHog stores ph_* cookies and local storage in your browser
- Hosting: PostHog's EU cloud
- Retention: Retention depends on the settings of the PostHog project.
- Your Control: You can accept or reject analytics cookies and reopen “Analytics settings” at any time. Withdrawing removes the ph_* cookies and storage and stops collection.
9.3 Advertising privacy
Advertising is currently paused. Google's privacy and consent tools are loaded on the homepage and public film pages for signed-out visitors. This privacy page and the data processing disclosure do not load them. Loading the tools elsewhere sends your IP address, browser information and the public page address to Google. It does not send your Movieo account, lists or movie preferences through our integration.
The Google message lets you accept, reject or manage the available purposes and providers. You can reopen it using “Ad privacy settings” when the message service is ready. These choices are separate from the analytics cookie choice described above. Rejecting advertising consent does not prevent you from using Movieo.
Google advertising privacy tools are currently unavailable; advertising requests remain paused.
Google's message stores and manages the advertising consent record. Changing your choice pauses advertising requests immediately; after a withdrawal we refresh the page to discard the previous document's advertising state. This integration does not enable advertisements, Google Tag Manager or remarketing.
10. International Data Transfers
Your data may be transferred to and processed in countries outside your country of residence. We ensure appropriate safeguards are in place for such transfers.
11. Children's Privacy
Our service is not intended for children under 16. We do not knowingly collect personal data from children under 16. If you believe we have collected data from a child, please contact us immediately.
12. Changes to This Policy
We may update this privacy policy from time to time. We will notify you of significant changes by email or through a notice on our website. Your continued use of the service after changes constitutes acceptance of the updated policy.
13. Contact Us
If you have questions about this privacy policy or want to exercise your rights, please contact us:
- Email: [email protected]
- Contact Form: Contact Us
- Settings: