Privacy Policy
Last updated 28 September 2026
A working draft, written from what the site actually does. The operator’s legal name and address still have to go in below, and it should be read by somebody qualified before filmised takes money outside a test.
Who holds your data
The controller is [legal name], [address]. Write to support@filmised.com about anything on this page and a person will answer.
What we hold, and why
Your account — email address, username, display name, and anything you choose to add: a picture, a cover, a bio, where you are, your pronouns. We need it to have an account at all, so the basis is the contract between us.
What you watch — ratings, reviews, watch dates, lists, favourites, watchlist, which episodes you have seen, the people you follow and the friends you keep. That is the service; it is also the contract.
Messages — what you send other members, and whether it has been read. We do not read them except where we have to act on a report.
Payments — if you subscribe, Stripe handles the payment and we keep only the subscription: which plan, which period, whether it is active. Your card never reaches us.
Pictures you upload — kept with the score from the automatic check that runs in your browser, so a moderator can look at anything questionable. That is our legitimate interest in not hosting what nobody wants hosted.
Reports — what you report and why, so moderators can act on it.
We do not run advertising, we do not profile you for anybody else, and we do not sell anything about you to anyone.
Who else touches it
Supabase hosts the database and handles signing in. Cloudflare serves the site, and tells us which country a request came from so prices can be shown in the right currency — not who you are. Stripe takes payments and is the controller of what it needs for that. TMDB provides the catalogue: we ask them about films, never about you. If you sign in with Google, Google confirms it is you.
What other members see
Your profile, reviews, ratings, lists and Top 5 are public by default — the point of the site is that people read them. Turning on a private account in Settings hides your watch history, diary, watch time and Top 5 from everybody except friends and approved followers, and that is enforced in the database rather than by the page declining to draw it. Reviews stay public either way, because a rating is already counted into a film’s public average; a private account counts towards “watched by 412 people” without being named.
Cookies, and what little there is
A cookie keeps you signed in. Your theme, text size, whether motion is reduced and which country you picked for streaming are kept in your own browser and never sent anywhere. There is no analytics, no advertising and no third-party tracking on this site, which is why there is no consent banner: none of it needs consent.
How long we keep it
While the account exists. Delete it from Settings and the account and everything attached to it goes with it — reviews, ratings, lists, messages, uploads. Backups roll off within thirty days. What we have to keep for tax on a payment stays for as long as the law says, and nothing else.
Your rights
You can ask for a copy of what we hold, correct it, delete it, object to what we do with it, or ask us to hold it still while a complaint is settled. Most of it is in the site already: edit your profile, export or delete your account from Settings. For anything else write to [support email] and we will answer within a month. If we get it wrong you can complain to the Croatian data protection authority (AZOP) or to the one where you live.
Where it lives
Our database and files are in the EU. Stripe and Cloudflare operate worldwide and move data outside it under the European Commission’s standard contractual clauses.
Children
filmised is not for under-16s and we do not knowingly keep an account for one. Tell us if one exists and it goes.
Changes
A new version appears here with a new date, and if a change matters we will say so by email rather than leaving you to notice.