Privacy Policy

Filmpop Ltd, registered office 89 Witney Street, Burford, OX18 4RX, is the data controller for the personal data described here. Contact: hello@filmpop.co.

• Account details: your email address and a hashed (never plain-text) version of your password.
• Purchase records: which film, the price and currency, and when you bought it — kept permanently so the price breakdown you saw at checkout stays on record.
• Technical data: your IP address, used briefly to prevent abuse (like brute-forcing a password) and discarded once the relevant time window passes; and error/debugging data if something goes wrong, collected automatically by our error-monitoring tool.
• A session cookie: a single, essential cookie that keeps you logged in. It's not used for tracking or advertising, and we don't use any third-party analytics or ad cookies.

We don't collect payment card details — Stripe handles that directly, and we never see or store your card number.

• To create and run your account, and let you rent and watch films.
• To send you account emails (verifying your address, resetting your password) — never marketing.
• To calculate and show you the tax and fee breakdown on each purchase.
• To prevent fraud and abuse (rate-limiting login/signup attempts).
• To find and fix bugs when something breaks.

We use a small number of service providers to run Filmpop, each acting on our instructions:

• Stripe — payment processing
• Mux — video hosting and playback
• Resend — sending account emails
• Neon — database hosting
• Vercel — application hosting
• Sentry — error monitoring

Some of these providers may process data outside the UK, including in the US. Where that happens, they maintain their own safeguards (such as standard contractual clauses) to protect your data.

We don't sell your data, and we don't share it with anyone for their own marketing purposes.

• Account and purchase data: kept while your account is active, and for a period afterwards where we need to for accounting, tax, or legal reasons.
• Rate-limiting records: short-lived, and automatically expire.

If you'd like your account deleted, contact us at hello@filmpop.co and we'll do so, subject to what we're legally required to retain (e.g. purchase/tax records).

Under UK data protection law, you can ask us to:

• Give you a copy of your data
• Correct inaccurate data
• Delete your data (subject to point 5 above)
• Restrict or object to certain processing
• Receive your data in a portable format

To do any of this, contact us at hello@filmpop.co. If you're not satisfied with our response, you can complain to the UK Information Commissioner's Office (ico.org.uk).

Filmpop isn't directed at children, and accounts are only for people old enough to enter into a contract in their own country (see our Terms of Service).

We may update this policy from time to time. We'll update the date above when we do.