Privacy policy
Without an account, nothing leaves your device. With an account, only your email address, your username and what you publish are stored — and you can erase all of it in one gesture.
Who publishes CinéSwipe
CinéSwipe is published by Florian Thibault, an individual resident in France. It is a personal, free project, with no company behind it.
The app is published at https://princepatch.github.io/cineswipe/ and distributed as an Android application. For any question about this document: florian@thibault.tel.
Under the GDPR, Florian Thibault is the data controller for account data and for content published by members. He is not the controller for what stays on your device: there is no processing then, and nothing to send him.
This English text is a working translation. The French version is the authoritative one.
Two ways to use CinéSwipe
The app can be used entirely without an account: finding films, swiping through them, saving them, adjusting your filters. In that case no personal data is collected, and nothing exists to receive any.
Creating an account is optional, and only serves the community side: publishing lists, commenting, following other members, exchanging messages. From that point, and only from that point, information is stored on a server.
Finally, as long as the app is not connected to its database, the community side runs in a degraded mode: accounts and posts then stay on your device and are visible to no one. The app states this mode in its settings; it never hides it.
What stays on your device, with or without an account
The app stores in your device local storage: the films you kept, the ones already shown to you, your recommendation filters, what the app believes it has understood about your taste, and your language preference.
None of it is sent to anyone, including when you have an account: it is not synchronised between devices. It disappears if you clear the app data or change device.
This storage is strictly necessary for the service you are asking for: without it, the app cannot remember the film you just kept. As such it requires no prior consent, and serves no other purpose.
The exact list of what is stored, and how to erase all of it, is on the "Privacy and data" page.
What an account contains
Creating an account requires an email address, a password and a username. Nothing else is asked: no name, no date of birth, no phone number.
The following is then stored in the database:
- your email address, used to identify you and to reset your password; it is never shown to other members;
- your password, as a cryptographic hash — it is stored in clear nowhere, and the publisher cannot read it;
- your username, which is public by design: it appears under everything you post;
- your display name, your biography and your avatar, if you fill them in — all three optional, all three public;
- your visibility settings: public or private profile, messages open or closed;
- the date the account was created, the number of followers and the number of accounts followed;
- the timestamp of your acceptance of the terms of use and of your minimum-age declaration.
The content you publish
An account exists in order to publish. What you write is stored in the database and becomes visible according to the settings you chose. This covers:
- film lists: their title, their description, their cover, the films in them and the note you attach to each;
- film reposts and the message that goes with them;
- comments and replies to comments;
- likes;
- follows, follow requests and blocks;
- private conversations and the messages exchanged in them;
- the reports you submit, with their reason.
Who sees what
Visibility is not decided by the app running on your phone: it is enforced by the database itself, rule by rule. A modified program therefore cannot make it return what it refuses to return.
Public profile: your username, your avatar, your biography, your public lists, your reposts and your comments are visible to everyone, including without an account.
Private profile: your username and your avatar stay visible — otherwise nobody could ask to follow you — but your posts can only be read by the people whose follow request you accepted.
Blocking: the two accounts stop seeing each other, in both directions. The fact that you blocked someone is never revealed to the blocked person.
Private messages: nobody can write to you until you have opened your messages, and only someone who follows you can do so. Everything else arrives as a request, which you accept or decline. These messages can only be read by the participants in the conversation.
Your email address is visible to no other member, in any of these cases.
Minimum age: 15
Creating an account is restricted to people aged 15 or over. Article 8 of the GDPR sets that age, in France, as the threshold from which a person can consent alone to an online service; below it, the authorisation of a holder of parental responsibility is required.
This declaration is asked for at sign-up and timestamped together with the acceptance of the terms of use. The app does not ask for a date of birth and does not verify age against a document: it collects a declaration, and keeps a record of it.
If you become aware that an account was created by someone under 15, write to florian@thibault.tel: the account and its content will be deleted.
The app is not directed at children and offers them no specific content.
Where this data is, and who processes it
Accounts and published content are stored in a PostgreSQL database provided and hosted by Supabase, Inc., acting as a processor within the meaning of Article 28 of the GDPR. Supabase provides hosting, authentication and technical backups; it does not exploit this data on its own behalf.
The instance is hosted in the European Union. Exchanges between the app and the database use HTTPS.
No other processor is involved in account data. The app itself — its files, its film catalogue — is served by GitHub Pages, which sees no account data pass through.
Supabase data processing agreement
On what legal basis
Account and published content: performance of the service you ask for by creating an account. Without this data there is no identification and no publication possible.
Reports, blocks and moderation: the legitimate interest of the publisher and of the other members in keeping the service usable, and compliance with the obligations that apply to a service hosting third-party content.
Timestamping of consents: compliance with a legal obligation — compliance must be demonstrable, not merely asserted.
Local storage on your device: strictly necessary to the functionality you requested.
For how long
Account data and published content are kept for as long as the account exists. Deleting it erases them immediately.
The host technical backups follow their own rotation, which does not exceed thirty days. After that, nothing remains.
A report is kept for the time needed to examine it, then for one year at most, so that repeated behaviour can be established.
What is stored on your device stays there until you erase it: the publisher has no way to act on it.
Deleting your account
Deleting the account takes one gesture, from inside the app: Profile tab, then Settings, section "Account and privacy", then "Delete my account". It is immediate and permanent.
It erases, in cascade, the account and everything attached to it: profile, username, biography, avatar, lists created and saved, reposts, comments and replies, likes, follows, follow requests, blocks, private conversations and messages.
Nothing is kept in a form that can be linked back to the deleted account, apart from the technical backups mentioned above.
A public page describes the same procedure, reachable without installing the app, along with an email route at florian@thibault.tel for those who no longer have access to their account.
Reporting, blocking and moderation
Every profile and every comment can be reported, and every member can block another. Reports are stored and reviewed by hand by the publisher.
Content that breaches the terms of use may be removed and the account that published it suspended or deleted. The person concerned is informed, with the reason, and may contest it by writing to the contact address.
The publisher does not monitor content in advance and has no general obligation to do so. He acts on reports.
What is never collected, in any case
Some things are collected neither with an account nor without one:
- No audience measurement, no usage statistics, no cookie set by the app itself.
- No advertising identifier, no device fingerprint, no geolocation.
- No reporting of your gestures: the films you skip and the ones you keep do not leave your device, even with an account.
- No name, no date of birth, no phone number, no payment details.
- No access to your contacts, your photos, your microphone or your camera. The app only requests access to the Internet.
Hosting and technical connections
The app files are hosted by GitHub Pages (GitHub, Inc.). Posters and film information are loaded from TMDB servers and from GitHub. Account data goes through Supabase.
Like any web server, these services see the IP address and the device type asking them for a file: that is unavoidable in order to answer you. They may keep these elements in their technical logs, for their own security. The publisher has access to none of these logs and receives no copy of them.
Trailers: what YouTube receives
Trailers are played by the embedded YouTube player. It is the third party that receives the most from you during your visit.
As soon as a trailer loads, YouTube (Google Ireland Limited and Google LLC) receives your IP address and information about your device, and sets its own cookies or equivalent technologies. If you are signed in to a Google account, playback may be linked to that account.
This processing is Google’s, not CinéSwipe’s. The publisher does not configure it, has no access to it and receives no statistics from it.
To avoid it: do not start a trailer. You can also adjust your preferences from your Google account.
Videos are never downloaded or re-hosted by CinéSwipe: they are played at YouTube, under YouTube’s terms.
Privacy settings of your Google account
Advertising
There is no advertising in the app today.
Advertising may be displayed later, on the "Saved films" page only, never on the swipe screen and never on the home feed. No provider has been chosen: it would therefore be dishonest to announce here what one would collect.
On the day that choice is made, this page will be updated before anything is switched on. It will name the provider and state what it receives. If the arrangement involves trackers that are not strictly necessary, your consent will be sought beforehand, and you will be able to withdraw it as easily as you gave it.
In every case, your saved films and your filters stay on your device: they will not be passed to an advertiser.
Local personalisation, no resale, no profiling
The films you are shown are filtered on your device, from the criteria you set yourself.
The app also observes the way you move through the cards — the direction of the gesture and the time spent on each — in order to show you more of what you watch at length. This preference model is built and kept ON YOUR DEVICE, it is never transmitted, and it contains no film title: only weights per genre, per language and per decade. You can erase it at any time from "Privacy and data".
This personalisation produces no legal effect and no decision concerning you, and serves neither to target you with advertising nor to evaluate you. It only chooses the order in which films are shown to you. There is no automated decision-making within the meaning of Article 22 of the GDPR.
No data is sold, rented, exchanged or shared for commercial purposes.
Your rights
The GDPR gives you a right of access, rectification, erasure, objection, restriction and portability.
For your account data, these rights are exercised directly in the app, without going through anyone:
- Access: your profile and your posts can be consulted at any time from your account.
- Rectification: username, display name, biography and avatar can be changed from the profile; a comment or a list can be corrected or deleted.
- Erasure: "Delete my account" erases the account and all its content, immediately.
- Portability and access to local data: the "Privacy and data" page exports to a file what is stored on your device.
- Objection, restriction, or any other request: write to florian@thibault.tel. You will receive an answer within one month at the latest.
Lodge a complaint with the CNIL
Security
Exchanges use HTTPS. Passwords are only kept as a cryptographic hash. Visibility rules are enforced by the database itself rather than by the app, which makes them independent of the program connecting to it.
No system is infallible. In the event of a data breach presenting a risk to your rights, you will be informed, and the CNIL will be informed within the time limits set by the GDPR.
What is stored on your device remains accessible to anyone using that device and your session.
Changes to this policy
This policy may change, in particular on the day advertising is switched on. The date of the last update is shown at the top of the page, and the online version is the only authoritative one.
A change that concerns you directly will be announced in the app before it takes effect.
CinéSwipe — Florian Thibault — florian@thibault.tel
This product uses TMDB and the TMDB APIs but is not endorsed, certified, or otherwise approved by TMDB.