FilmJinx privacy
What FilmJinx stores
- Your profile display name.
- A salted and peppered hash of your PIN. Never the PIN itself.
- Your film ratings and your "never again" list.
- A log of movie nights: who took part and what matched.
- Your watched and good-pick answers, plus a small queue of picks you have not answered yet.
What it does not store
No email address. No phone number. No payment details. No advertising trackers. No third-party analytics.
A private invitation key stays only in the current browser tab while you sign in, create a profile or continue as a guest. It is removed when you join or abandon the invitation and is not saved in long-term browser storage.
Optional sound joining
Sound joining uses the microphone only after you tap Listen to join and your browser allows access. Audio is processed on your device and is not saved or uploaded. The microphone stops when an invitation is read, you cancel or leave the screen, or the time limit ends.
The invitation read from the sound is sent to FilmJinx to join that night. It is not saved in browser storage or kept for a retry. The sound carries the same invitation as the QR code or link. Someone who records it may use that invitation while it remains valid.
Guests
A guest has no profile. A guest's name is kept only as part of the night's session and expires with it, within 24 hours. The rating and movie-night logs keep a random guest id afterwards, never the name.
Where it lives
One server in Sydney, on Fly.io. The server's disk has short-lived snapshots, kept for around five days, for recovery.
Your connection reaches that server through Cloudflare, which sits in front of the site to protect it from abuse. Cloudflare handles the connection first, so it can see your IP address and the requests your browser makes.
How long
A movie night's session data expires after 24 hours. The log of movie nights is kept longer, to measure whether FilmJinx is working; deleting your profile removes your identity from it. Your profile and its history stay until you delete them. Sign-in tokens expire after 90 days unused.
Watched and good-pick answers are used only as combined product evidence, not to show one person's answers to another person. The unanswered queue holds at most three picks.
Deleting your profile
Open the menu, choose Your memory, then Delete my profile. This removes your profile, unanswered-pick queue and linked answer history, and scrubs your identity from past logs. If a movie night you joined is still running, your name is removed from it too; the night itself keeps working until it expires, within 24 hours. Copies in the recovery snapshots clear within about five days.
Film data
Film titles, posters and details come from TMDB. Posters and images load in your browser directly from TMDB's servers. This product uses the TMDB API but is not endorsed or certified by TMDB.
Contact
Questions: [email protected]