Privacy Policy
Popcorn Club is designed to do without as much personal data as possible: the app doesn't ask for a name, an email address, or a password to be used. This page details exactly what is collected, why, and how you can take back control.
1. Data controller
Popcorn Club is published by Maxime Damery. For any question about your data, you can write to maxsimd0@gmail.com.
2. The data we collect
On this site
The app installs directly from the site: downloading it requires no data at all. If you ask to be notified of the Android release, we only record your email address, the date of your request, and its origin (the site). Nothing else: no name, no advertising profile.
The site uses Firebase Analytics (Google) to measure aggregated traffic: pages viewed, clicks on install buttons. This tool is only enabled after you agree in the banner shown on your first visit; until you accept, nothing is sent to Google. You can change your mind at any time below.
In the iOS app
Access to the app relies on anonymous authentication: a random technical identifier is assigned to you, with no email or password. This identifier isn't linked to your civil identity. Associated with this identifier are:
- The username you choose, and your device's region (used to serve you the right movie at the right time).
- A notification token, if you accept notifications, to alert you when the evening's movie is revealed and when someone reacts to your messages.
- Your contributions: ratings, reviews, and reactions posted in the discussion thread, and the likes you give. This content is visible to other members, associated with your username.
- Your viewing activity: movies marked as watched, favorites, personal lists, and your votes to steer the lineup.
- A Letterboxd import, only if you trigger it yourself: the CSV file you provide is read to extract titles, years, and ratings, which are then attached to your profile.
Technical data
The app uses Firebase Analytics (aggregated usage statistics) and Firebase Crashlytics (crash reports, containing the device model, iOS version, and the app's technical state at the time of the incident). These tools help us fix bugs and understand which features are used. The site uses the same tool, Firebase Analytics, under the same conditions and subject to your consent (see above).
3. Why we collect it
| Data | Purpose | Legal basis |
|---|---|---|
| Email (Android alert) | Notify you of the Android release | Your consent |
| Username, region, contributions | Run the service and the life of the Club | Performance of the service |
| Notification token | Alert you of tonight's screening | Your consent (iOS settings) |
| Analytics (site and app) and crash reports | Fix bugs, measure traffic, improve the product | Your consent |
4. Who has access to it
We neither sell nor rent your data. It is processed by a small number of technical providers:
- Google (Firebase) — database hosting, anonymous authentication, notification delivery, statistics, and crash reports.
- Apple — app distribution and delivery of notifications to your iPhone.
- The Movie Database (TMDB) — source of movie entries. These requests are made by our servers: your device never contacts TMDB directly, and no data about you is passed to it.
This site loads its fonts from Google Fonts, which sends your IP address to Google when the page loads.
Because some of these providers are based in the United States, your data may be transferred outside the European Union, under the safeguards required by the GDPR (standard contractual clauses, EU-US Data Privacy Framework).
5. How long we keep it
- Email (Android alert): until you unsubscribe, or at most three years after the last contact.
- Profile and contributions: as long as your account is active. When it is deleted, your profile, history, and lists are erased.
- Crash reports: kept for the durations applied by Firebase Crashlytics (90 days by default).
6. Your rights
Under the GDPR, you have the right to access, rectify, erase, restrict, object to, and port your data. You can also withdraw your consent at any time.
For this site's analytics specifically: .
To exercise your rights, write to maxsimd0@gmail.com. Since authentication is anonymous, please mention your username in your request so we can find your profile.
You can turn off notifications at any time in your iPhone settings. To remove your address from the Android alert list, write to maxsimd0@gmail.com: it will be deleted immediately.
If you believe your rights aren't being respected, you can file a complaint with the CNIL, the French data protection authority.
7. Security
Exchanges between the app, the site, and our servers are encrypted (HTTPS). Access to data is restricted by database-level security rules: a member can only modify their own profile and their own content.
8. Minors
Popcorn Club is not intended for children under 15. We do not knowingly collect data about them; if you notice that an account was created by someone under 15, contact us so we can delete it.
9. Changes
This policy may evolve along with the app. In case of a significant change, we will inform you in the app or by email. The last-updated date appears at the top of this page.