Privacy Policy

Account information. When you sign in through Google or ChatGPT, or explicitly connect Microsoft, Cinefile receives identifiers needed to create and secure your account, such as your email address, display name, provider, and provider account identifier.

Profile and social information. You may add a profile photo, biography, location, public profile name, sharing preferences, friend connections, and notification activity.

Archive content. We store the ticket images, PDFs, passes, receipt emails, or text you choose to import, along with extracted and edited details such as movie, theater, location, showtime, format, auditorium, row, seat, notes, memories, companions, ratings, and privacy settings.

Technical information. Essential session cookies and ordinary request, device, browser, IP-address, diagnostic, and security information may be processed automatically by Cinefile and its infrastructure providers.

We use information to create and authenticate accounts; import, identify, organize, display, export, restore, and protect ticket archives; provide profiles, friend connections, achievements, reminders, sharing, and support; detect duplicate or unsafe imports; maintain security and prevent abuse; troubleshoot and improve Cinefile; communicate service changes; and comply with legal obligations.

Cinefile does not sell personal information and does not use your archive for third-party advertising.

When you ask Cinefile to identify a ticket, the selected image, PDF, or text is sent to OpenAI's API to extract screening details. Cinefile requests that the API not store the response for application state, but OpenAI may temporarily retain API data for safety and abuse monitoring under its business data controls. OpenAI states that API data is not used to train its models by default unless the customer opts in.

Automated extraction can be wrong. Cinefile gives you a review step and does not intentionally extract payment details, confirmation codes, or barcode contents.

We share information only as needed with service providers that help operate Cinefile, including hosting and storage providers; Google and OpenAI for sign-in; Microsoft for an account connection you initiate; OpenAI for ticket analysis; Resend for receipt-email importing; TMDB, Wikidata, and Rotten Tomatoes for movie search, metadata, artwork, and direct movie links; and Google Fonts for administrator-selected typography. Browser font requests disclose ordinary network information such as IP address and user agent to Google. Server-side movie-provider requests can include movie titles or identifiers from the archive item being enriched. Those providers process information under their own terms and privacy commitments.

We may also disclose information when required by law, to protect Cinefile or others, during a business reorganization, or with your direction or consent. We do not share private archive content with other Cinefile members unless you choose a sharing feature that calls for it.

Accounts and original uploads begin private. If you publish a profile, accept a friend request, feature a ticket, or create a shared-stub link, the information identified in that control becomes available to the selected audience. Anyone with a public or unlisted link may copy or redistribute what they can see.

Original ticket files, account email, private notes, and hidden seat or location details are not intentionally included in public profiles. You can turn off a public profile, change ticket visibility, remove a friend, or revoke a share link, but copies already made by others may remain outside Cinefile.

You can edit your account profile and ticket details, control public-profile and per-ticket visibility, manage identity-provider connections, remove a profile photo, manage friend connections, and export archive data and eligible originals from Data & Safety. Deleted tickets remain in Trash for 30 days unless you permanently delete them sooner.

To request access, correction, or deletion that is not available in the service, email brian@cinefile.one with the subject Privacy Request. We may need to verify that the request comes from the account owner.

We keep account and archive information while your account is active or as needed to provide the service. Ticket records moved to Trash are scheduled for automatic deletion after 30 days. Provisional imports may be deleted when canceled or expired.

After a deletion request, limited information may remain temporarily in backups, security records, or service-provider systems, or longer when reasonably needed for fraud prevention, dispute resolution, legal compliance, or enforcing agreements.

Cinefile uses essential cookies and similar storage to keep you signed in, remember display preferences, and protect account flows. When configured typography uses Google Fonts, Cinefile automatically requests the selected stylesheet and font files from Google; this can expose ordinary network information such as your IP address, user agent, and requested font families. Cinefile does not currently use third-party advertising cookies or knowingly allow third parties to track your activity across unrelated sites for targeted advertising.

Third-party sites and identity providers may also receive information when you follow their links or use their services. Because Cinefile does not sell personal information, browser opt-out signals such as Global Privacy Control do not change a sale or targeted-advertising setting on Cinefile.

Cinefile uses administrative, technical, and organizational safeguards intended to protect personal information, including authenticated access to private originals and restricted team tools. No internet service can guarantee absolute security. Protect your sign-in accounts, use secure devices, and tell us promptly if you believe your Cinefile account has been compromised.

Cinefile is a general-audience service and is not directed to children under 13. Children under 13 may not create an account. If you believe a child under 13 has provided personal information, contact us so we can investigate and delete it as appropriate.

Depending on where you live, you may have rights to request access, correction, deletion, portability, or information about how personal information is used and disclosed. Cinefile does not sell covered information. Nevada consumers may still submit a verified no-sale request through the contact address below.

Submit a request to brian@cinefile.one with the subject Privacy Request and identify the account involved. We will respond as required by applicable law and will not discriminate against you for exercising a privacy right.

We may update this policy as Cinefile changes. The effective date above will be revised, and material changes may also be announced on the site or through an in-service notice before or when they take effect. Your continued use after an update is subject to the revised policy where permitted by law.

For privacy questions or requests, email brian@cinefile.one with the subject Privacy Request.

Cinefile cinefile.one