Privacy Policy

RandomFlix (“we”, “us”, or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, share, and protect your personal information when you use randomflix.ai (the “Service”).

By using the Service, you agree to the collection and use of information in accordance with this policy. This policy should be read alongside our Terms of Service.

Account information (provided by you via Clerk):

• Email address
• Username or display name
• Profile picture URL
• OAuth profile data (if signing in via Google or GitHub)

User-generated content:

• Movie ratings (1–10 scale) and optional review text
• Watchlist, watched, and hidden movie lists
• Custom movie lists (public or private)
• Saved filter presets (named filter configurations)
• Contact form submissions (name, email, subject, message)

Automatically collected information:

• Suggestion history (which movies were shown to you and outcomes such as skipped, watched, or hidden)
• Filter usage patterns (which filter dimensions you use most frequently)
• Taste profile data (computed feature vectors derived from your interactions, used to personalize recommendations)
• Device and browser information (user agent, screen size, operating system)
• IP address
• Pages visited and interactions within the Service
• Referral source and traffic origin

We use the information we collect to:

• Provide, maintain, and improve the Service
• Generate personalized movie recommendations based on your interaction history
• Send weekly movie recommendation emails (which you can opt out of at any time)
• Respond to contact form inquiries
• Monitor and analyze usage patterns to improve the user experience
• Detect and prevent abuse, fraud, and technical issues
• Track errors and performance for service reliability

We use cookies and browser local storage to operate the Service. These are small pieces of data stored on your device.

First-party cookies:

First-party local storage:

Third-party cookies and tracking:Our third-party service providers (listed below) may set their own cookies for authentication, analytics, error tracking, and advertising purposes. These are governed by the respective providers' privacy policies.

You can manage cookies through your browser settings. Disabling cookies may affect certain features of the Service (such as language preference persistence and authentication).

We use the following third-party services that may receive or process your data:

• Clerk— Authentication and user identity management. Clerk processes your email, name, OAuth profile data, and session information. Clerk Privacy Policy
• PostHog— Product analytics. We track page views, feature usage events, and session replays for signed-in users. PostHog receives your Clerk user ID, email, and username for identified analytics. Session replay is enabled at a low sample rate. PostHog Privacy Policy
• Sentry— Error tracking and performance monitoring. Sentry receives error reports, performance traces, and session replays when errors occur. Input fields are masked in replays. Personally identifiable information may be included in error context. Sentry Privacy Policy
• Vercel— Hosting and web analytics. Vercel processes requests to the Service and provides aggregated, anonymous usage analytics. Vercel Privacy Policy
• Google Ads / Google Tag Manager— Advertising conversion tracking and measurement. Google may set cookies for ad measurement and tracking sign-up conversions. Google Privacy Policy
• Resend— Email delivery. Resend processes your email address to deliver weekly recommendation emails and contact form responses. Resend Privacy Policy

The following services are used server-side only and do not receive your personal data: TMDb (movie metadata), OpenAI (movie content embeddings), and Streaming Availability API (streaming data).

We do not sell, rent, or trade your personal information to third parties.

We share your data only with the third-party service providers listed above, solely for the purpose of operating the Service. We may also disclose your information if required by law, legal process, or governmental request, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

We retain your personal data for as long as your account is active or as needed to provide the Service. When you delete your account (via the Account page, managed by Clerk), your personal data is removed from our systems via an automated webhook process.

Anonymized or aggregated data that cannot be used to identify you may be retained indefinitely for analytical purposes.

Guest data stored in browser cookies and local storage persists on your device until you clear it manually or it expires. We do not have access to guest data stored only in your browser.

Depending on your location, you may have the following rights regarding your personal data:

• Access: request a copy of the personal data we hold about you
• Correction: request correction of inaccurate or incomplete data
• Deletion: request deletion of your personal data (you can delete your account at any time)
• Data portability: request your data in a structured, machine-readable format
• Withdraw consent: withdraw consent for data processing where consent is the legal basis
• Opt out of marketing: unsubscribe from weekly emails via the link in each email or in Settings
• Object to processing: object to processing based on legitimate interests

To exercise any of these rights, please contact us. We will respond to your request within 30 days.

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR):

Lawful basis for processing:

• Consent: for marketing emails (weekly recommendations) and analytics tracking. You can withdraw consent at any time.
• Legitimate interest: for operating the Service, personalizing recommendations, error monitoring, and fraud prevention.
• Contract: for providing the Service as described in our Terms of Service.

You have the right to lodge a complaint with your local data protection authority if you believe your rights have been violated. To contact us about GDPR-related matters, please use our contact form.

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

• Right to know: request disclosure of the categories and specific pieces of personal information we collect
• Right to delete: request deletion of your personal information
• Right to opt out of sale: we do not sell your personal information
• Non-discrimination: we will not discriminate against you for exercising your CCPA rights

Categories of personal information collected: identifiers (email, username), internet activity (browsing history, interactions with the Service), and inferences (taste profiles derived from your movie preferences).

To exercise your CCPA rights, please contact us.

The Service is not directed to children under 13 years of age (or 16 in the EEA). We do not knowingly collect personal information from children under these ages. If we become aware that we have collected personal data from a child without parental consent, we will take steps to delete that information promptly. If you believe a child has provided us with personal data, please contact us.

We implement reasonable technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These include:

• Authentication managed by Clerk with industry-standard security practices
• Encrypted connections (HTTPS/TLS) for all data in transit
• Database hosted on Neon with encryption at rest
• Input masking in session replays (Sentry)
• Secure cookies with appropriate flags

No method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee its absolute security.

Your data may be transferred to and processed in the United States, where our hosting infrastructure (Vercel), database (Neon), authentication provider (Clerk), and other service providers are located. If you are located outside the United States, your data will be transferred internationally.

For users in the EEA, UK, or Switzerland, such transfers are conducted in accordance with applicable data protection laws, including reliance on Standard Contractual Clauses or other approved transfer mechanisms where required.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the revised policy on this page with an updated effective date. For significant changes, we may also notify you via email (if you have an account) or through a notice on the Service.

Your continued use of the Service after a revised policy is posted constitutes your acceptance of the changes.

If you have questions or concerns about this Privacy Policy or our data practices, please contact us.