Privacy

Before you create an account

If you use Cinema클럽 without signing up, your Queue picks, Verdicts, watch history, "not for me" feedback, and starter taste picks are stored in your browser's local storage rather than in an account database.

When you use a recommendation feature like Tonight or Wander, that local taste information may be sent to our servers and processed briefly to generate your results, but it isn't saved as account data unless you later create an account. If you never create an account, clearing your browser storage removes it completely.

When you create an account

Cinema클럽 accounts are for people aged 18 or older. We don't ask for your date of birth or check any ID: when you create an account, you confirm that you are at least 18.

Creating an account is handled by Supabase, our authentication provider. We store your email address, your display name, your member ID, the avatar you choose, and when your account was created. If you choose to add a gender identity, it is kept separately and is private: only you can see it.

If you had guest activity sitting in your browser at that point (Queue, Verdicts, watch history, "not for me" feedback, starter picks), it gets copied into your new account once, then cleared from local storage.

While you're signed in, your browser keeps your session in a cookie, and keeps a few small working items in its local storage, such as recently shown picks, the country you chose for Where to Watch, and short lived caches, so the app stays quick and doesn't repeat itself. Clearing your browser storage removes them.

Account emails

Apart from replies to messages you send us, we email you only about your account: the link that confirms your address, and a password reset link when you ask for one. These emails are delivered by Resend, our email provider, which receives your email address and the message in order to deliver it. We don't send marketing email.

When you contact us

If you send us a message from the Contact page, we receive your email address, your name if you give it, and your subject and message, and we use them only to reply to you. The message reaches us as an email delivered by Resend.

The browser check

To keep automated sign ups and email abuse out, the forms for creating an account, signing in, resending a confirmation, resetting a password and deleting an account run a quick browser check from Cloudflare Turnstile. It looks at technical signals from your browser and connection, such as your IP address, only to tell people from automated scripts, and it doesn't read what you type into the form.

Verdicts (your ratings)

Every Verdict you leave, down to the half star, is stored against your account and used to work out what to recommend to you next. Who else can see your Verdicts depends on your profile setting, described below. There isn't a way yet to make an individual Verdict private while others can see the rest.

Watch history

What you mark as watched, and when, is stored against your account. It feeds your recommendations. Who can see it follows the same rules as your Verdicts.

Viewing Activity

Your Viewing Activity is made from your watch history: for each day of the year, how many different titles you watched. On your own Me page it also names those titles.

Other signed in members see only the daily counts, never the titles, and only if your Viewing activity setting on the Me page allows them. It starts at your approved followers and your Circle; you can widen it to Everyone, narrow it, or turn it off, and your profile privacy always sets the widest audience. Visitors who are not signed in never see it.

Public and private profiles

You choose Public or Private for your profile from the Me page. New accounts start as Public.

Public. Any signed in member can see your name, member ID and avatar, your 10 most recent Verdicts and the 10 titles you watched most recently, and can follow you right away. Your followers and your Circle see all of your Verdicts and watch history.

Private. Any signed in member can still see your name, member ID and avatar, but no Verdicts and no watch history. Following you needs your approval. Members you approve as followers, and your Circle, see all of your Verdicts and watch history.

Your Queue, gender, starter picks and Not for me choices are private on both settings. Only you can see them.

When you switch from Public to Private, every current follower loses access until you approve them again, and you are shown what will happen before you confirm. When you switch from Private to Public, waiting follow requests are accepted.

Following and your Circle

Following a public profile happens at once. Following a private profile sends a request that the member can approve or decline. A follower sees that member's full Verdicts and watch history, and a request that is still waiting shows nothing.

Circle is a connection both members agree to. Circle members see each other's full Verdicts and watch history, whether a profile is public or private.

Following and Circle are separate. You can follow someone without being in their Circle, and you can be in someone's Circle without following them.

Removing followers and blocking

Removing a follower ends their access straight away. On a public profile they can follow again. On a private profile they would have to ask again and you would decide.

Blocking removes any follow or Circle connection between you and that account, stops it from following you or sending you Circle requests, and hides your Verdicts and watch history from it. Your name, member ID and avatar stay visible to it. Blocking applies to that one account. It is not told, and you can unblock it at any time. Unblocking does not bring back any connection.

Your Queue

Titles you save to your Queue are private. Only you can see your Queue.

Your starter taste picks

The handful of titles you pick when you first join, to teach us your taste, are stored against your account and used only to shape your own recommendations. They're private.

"Not for me"

When you tell us a recommendation isn't for you, that exact title is stored as a private signal against your account and excluded from your future recommendations for good.

If you reject enough different titles that happen to share the same genre, theme, style, creator, or language, that pattern can also nudge your recommendations away from it slightly, but only after repeated, independent rejections, and the effect is capped. A single "not for me" is never read as disliking an entire genre. None of this is shown to anyone else.

How we build your recommendations

Your Verdicts, watch history, Queue, starter picks, and "not for me" feedback, together with the movie and show data described below, are what our recommendation engine reads to decide what to put in front of you.

All of that matching happens on our own servers. We don't sell this data, share it with advertisers, or use it to train any public AI model.

Sharing and friend links

A few features generate a link you can send to someone else: adding a friend by QR code or link, and sharing a specific recommendation outside the app.

These links are private and hard to guess. A friend link shows nothing about you to someone who is not signed in. Once they sign in, they see your display name, member ID and avatar, and they can ask to follow you or add you to their Circle, under the rules above. A recommendation link can be opened without an account: it shows the title being recommended, and your name only if you chose to include it.

The Movie Database (TMDB)

All of our movie and show data, titles, posters, cast, overviews, genres, comes from The Movie Database (TMDB). Where to Watch availability is supplied by JustWatch, for the country you choose. Looking up that data doesn't involve sending TMDB anything about you personally. This product uses the TMDB API but is not endorsed or certified by TMDB.

Infrastructure and technical logs

Cinema클럽 runs on Supabase (our database and authentication provider) and Netlify (our hosting provider), with Resend for account emails and Cloudflare Turnstile for the browser check described above. Operating, securing, and troubleshooting the service means these providers may process basic technical information, such as your IP address, browser and device information, request timestamps, authentication and security logs, and error logs. This is standard infrastructure logging, separate from the taste data described above.

What's public versus private, at a glance

Visible to every signed in member, on Public and Private profiles: your display name, member ID, avatar and the year you joined.

Decided by your profile setting, following and Circle, as described above: your Verdicts and watch history.

Decided by your Viewing activity setting: how many titles you watched each day, never which ones.

Private, visible only to you, on both settings: your Queue, your gender, your starter taste picks, and anything marked "not for me."

Deleting your data

You can delete individual Verdicts, watch history entries, and Queue items yourself, at any time, from the Me page.

You can also delete your whole account yourself from your profile on the Me page. It removes your profile and member ID, your Verdicts, watch history and Queue, your taste choices and feedback, your follows, blocks, Circle friends and requests, your share links, and your sign in.

To ask a privacy question or make a request about your data, send us a message from our Contact page.