Privacy

What the club keeps

• Your account: your email address (to log in and send activation and password emails), your username, and your password stored only as a one-way hash, so nobody can read it.
• What you add: nominations, comments, your lists (and who you share them with) and which tapes you’ve marked as seen. Admins’ CrapScores and verdicts.
• Technical bits: a login cookie, short-lived counters that limit how often something can be done (lookups are counted per IP address and cleared within an hour), and the server’s own logs.

What other people see

Your username, your comments, the tapes you nominated, and any list you make public. Your email address is never shown anywhere on the site, not even to admins in the back office. Lists are private unless you make them public. If you share a list, the members you invite can see it too, and on a shared list everyone on it sees who added each tape.

What the club doesn’t do

No ads, no third-party analytics, no selling your data, and no emails beyond the ones you need to use your account. Optional first-party usage measurement is described below.

Your shelf and optional usage measurement

Your guest shelf stores up to 20 public movie IDs on this browser. These picks are not an analytics identifier. They stay here until you remove them or clear browser data. After logging in, you choose whether to import them into your private watchlist.

The club counts visible page views, membership invitations, signup steps, and coarse errors in daily totals, subject to your privacy choices. It does not store analytics visitor IDs, fingerprints, raw IP addresses, emails, search terms, full referrers, or verification links. These counts cannot identify guests returning on another day and may include automation.

Optional member measurement records account-linked activation and first-save milestones, login counts, and days you use the site. Active days are retained for 90 days; aggregate counts for 12 months. Member milestones are kept while you remain active and expire after 90 days without measured activity or a new milestone. Deleting your account also deletes all account-linked measurement. Aggregated totals cannot be linked back to you.

We respect Global Privacy Control and Do Not Track. You can also turn optional measurement off on this browser. Necessary account records still provide signup and verification totals.

Who else handles it

• Hetzner runs the server, in Germany.
• Cloudflare sits in front of the site to keep it fast and protected, so it sees every visit.
• Resend sends the club’s emails, from its EU region.
• TMDB provides the movie details and posters. Posters come through the club’s own server, so TMDB doesn’t see your visit.
• YouTube plays trailers, but only after you press play, and through its no-cookie player.

Cookies

One cookie keeps you logged in; it’s needed for the site to work, so there’s no consent banner. Cloudflare may set a security cookie to tell people from bots. A preference cookie remembers your measurement choice; local storage remembers your shelf and invitation dismissal. Nothing tracks you across other sites.

How long it’s kept

Until you delete your account. Database backups are kept for 14 days and server backups for 7, so after you leave, your data disappears from them within 14 days.

Your choices

• See and change your details on your membership page, and make any list private again from its settings.
• Delete your account at the bottom of your membership page. Your lists and comment text go with it; tapes you nominated that are already on the shelves, and tapes you added to other members’ shared lists, stay without your name.
• For anything else (a copy of your data, a correction, or a public list or comment you think shouldn’t be here), email hello@crapmoviesclub.com.