This notice explains how the operator identified above (“we”, “us”) processes personal data when you use Moviebase’s apps, website, accounts, community features and public sharing pages. It also explains your choices and rights. You do not give consent to optional processing simply by reading this notice or using Moviebase.

Before sharing: public profiles, contributions and viewing activity can be seen by other people. An unlisted link is not a private space. Check your profile and activity settings before publishing, and do not include information you would not want others to see.

Information we process

You can use features that do not require an account without creating a Moviebase account. Account and social features need identifiers that associate records with you. Information you choose to publish is separate from internal authentication and security information.

Data categories and how they arise
Category	Examples and source
Account and authentication	Email address, account/provider identifiers, sign-in method, authentication tokens and account timestamps, from you and your sign-in provider. Your email is not a public profile field. Your internal account identifier is not shown on your profile, but it is part of the web address of images you upload.
Profile	Public ID and username; display name, which we prefill with the name from your Google or Apple account and you can change; optional biography, Instagram, X and TikTok handles, avatar and backdrop images; privacy settings and premium status. You do not need to publish your legal name.
Library and viewing	Movies, shows and episodes tracked, viewing dates/progress, ratings, favorites, watchlists, list titles/descriptions/items, visibility choices and derived statistics. These come from your actions and connected synchronization services.
Community	Comments, replies, spoiler flags, attached images or GIF references, dates, likes, follows and other interactions. We also process blocks, reports, report explanations, moderation outcomes and records needed to investigate abuse.
Notifications and preferences	In-app notifications, read status, preferences and, for enabled push delivery, the device delivery identifiers needed to send notifications.
Purchases and referrals	Product, transaction and entitlement identifiers, purchase status and subscription expiry; referral codes, attribution and fraud-prevention records when you use referral features. Payment-card details are handled by the payment provider rather than entered into Moviebase.
Technical and support	IP address, device/app/browser information, requests, error and crash information, usage events and consent choices; your correspondence and attachments when you contact us. Optional analytics and advertising processing is described below.

Optional profile fields and contributions are your choice. Without authentication or the records needed for a requested feature, we cannot provide that feature. Comments, images and viewing choices may reveal personal or sensitive information; avoid publishing your own or another person’s sensitive or confidential information.

What other people can see

Public by default: when you create a Moviebase account and claim a profile username, your profile is public and activity sharing is on by default. While activity sharing is on, your watched history, ratings, favorites and watchlist, including entries added before you claimed a username, are published to your profile, and shared viewing records can make you appear in “Watched by” results. You can make your profile private or turn off activity sharing at any time in Edit profile; account creation is not a promise of a private library.

Visibility and controls
Information	Audience and control
Visible profile	Your public identity, optional profile fields and available social information can appear to other users and through public services. Switching to a private profile restricts public profile access; it does not erase previous contributions.
Viewing activity and “Watched by”	A visible profile with activity sharing enabled can appear among people who watched a title. Activity sharing controls shared viewing information; making the profile private also excludes it from these public watcher results. Turning activity sharing off is not account or history deletion.
Comments and replies	Contributions to public discussions are public. Existing comment text can remain visible after the author makes their profile private, even when the public author details are hidden. Delete a contribution separately if you want it removed. Copies, quotations or information in its text may still identify you.
Public lists	Published lists associated with a visible profile can be discovered and opened by others. Their titles, descriptions and items are shared. Public list discussions also depend on the list and its owner remaining publicly available.
Unlisted lists	Excluded from public list discovery, but accessible to someone with the link while the list and owner remain available, and they can appear in the feeds of people who follow you. Recipients can forward the link. Unlisted lists are not password-protected private lists.
Private or unpublished library records	Keeping a list out of Moviebase’s publishing feature does not publish it to the Moviebase community. Cloud synchronization and a connected Trakt account have separate data flows and settings.
Relationships and statistics	Public profile features can show follows, counts, likes, statistics and a premium badge. Activity sharing is not a switch that makes all social interactions private. Reports and block records are internal safety data rather than public profile fields.

Public content may be accessible without signing in through our public interfaces, shared links or previews. Search engines and other people may discover, store or redistribute it. We cannot recall screenshots or independently stored copies. Changing visibility or deleting data on Moviebase does not itself remove copies held by independent services.

Blocking is an interaction/safety control, not a guarantee that a person cannot view public information through a logged-out session, a different account or a copy. Moderators may access information necessary to handle reports regardless of its public visibility. To report a privacy concern, contact help@moviebase.app.

You can sign in with Google or Apple; older accounts can also sign in with an email link. Firebase Authentication processes account credentials and identifiers. Your sign-in provider supplies an account identifier, your email address, your name and, for Google, a profile photo; Apple may supply a relay email address. We do not receive your Google or Apple account password. Signing in does not authorize access to your contact list.

Connecting Trakt is separate from creating a Moviebase account. Authorization tokens allow Moviebase to access the Trakt features you connect, including synchronization of supported watched records, ratings and lists. Your actions and synchronization settings can send updates to Trakt as well as import records from it. Disconnecting stops the connection; it does not erase data already held by Trakt or automatically delete your Trakt account. Check Trakt’s own privacy and visibility settings.

Movie information and images come from services such as TMDB, Trakt and streaming-information providers. Requests to external websites or media hosts may disclose your IP address and device/request information to them. Their policies govern their independent processing. Our external social-media pages and support communities are hosted by their respective providers; messages you send us there are also processed to respond to you. Platform operators may separately process interactions and page statistics, including under any applicable joint-controller arrangement.

Why we use information

The following describes our purposes and legal bases under the GDPR. Where a purpose relies on consent, you can refuse or withdraw it without losing unrelated core features. Where we rely on legitimate interests, we balance those interests against your rights.

Purpose and legal basis
Purpose	Data involved	Legal basis
Provide accounts, library synchronization, purchases and requested social features	Account, library, profile, content, interactions and entitlement records	Performance of our contract with you, Article 6(1)(b)
Publish your chosen contributions and deliver requested notifications	Public profile/content, visibility choices and delivery information	Contract, Article 6(1)(b); consent where separately required for a delivery channel
Protect accounts, prevent spam/fraud and moderate abuse	Technical logs, identifiers, reports, content and moderation records	Legitimate interests in a secure and usable service, Article 6(1)(f); legal obligation, Article 6(1)(c), where required
Answer support and rights requests; send essential service notices	Contact/account information and correspondence	Contract for service support; legitimate interests in answering other inquiries; legal obligation for statutory requests
Diagnose faults and maintain reliability	Technical, crash and diagnostic information	Legitimate interests in identifying and repairing faults, subject to consent where device-access rules require it
Optional measurement and advertising personalization	Usage events, advertising/device identifiers, attribution and preferences	Consent where required; any other processing requires its own applicable lawful basis and does not follow from accepting Terms
Send marketing emails about Moviebase	Email address, account ID, subscription or customer status and unsubscribe/objection records	Consent, Article 6(1)(a), where you gave it; otherwise legitimate interests in promoting our own similar services, Article 6(1)(f), within the existing-customer exception of § 7(3) of the German Act against Unfair Competition (UWG)
Meet legal duties and establish or defend claims	Relevant transactions, correspondence, security and account records	Legal obligation, Article 6(1)(c), or legitimate interests in establishing or defending legal claims, Article 6(1)(f)

We do not treat a list of legal bases as permission to use every category for every purpose. A new incompatible purpose requires a separate assessment and information to you before that processing begins.

We use application analytics to understand feature usage and improve Moviebase. This purpose does not remove any consent requirement applicable to the analytics technology or the information it accesses.

We send emails necessary to administer your account, such as confirming an account deletion, answer support requests, address applicable billing matters or communicate security and material service changes. App stores may separately send purchase and billing messages under their own policies. These service communications are separate from marketing.

We also send marketing emails about Moviebase features, offers and subscriptions to the email address of your Moviebase account, using OneSignal. Where you have not given consent, we send them only within the existing-customer exception: we received your address in connection with your use of Moviebase, we promote only our own similar services, you have not objected, and you are told when your address is collected and in every email that you can object at any time without costs other than basic transmission costs.

You can unsubscribe using the link in every marketing email, or withdraw consent or object to direct marketing at any time, free of charge, by contacting help@moviebase.app. We then stop sending you marketing emails. Opting out does not prevent necessary account, billing or security communications.

Moderation, translations and automated tools

Safety processing includes reports, technical abuse controls, automated checks where enabled, and human review. Authorized people handling a report may inspect the relevant contribution, account context and evidence. Information is shared with the affected person only as needed to explain or review a decision or as legally required; we do not promise absolute anonymity for reporters.

We use OpenAI’s moderation service to screen comments, display names, biographies, list names and descriptions, and uploaded images. The text, or the image as you uploaded it (before we remove image metadata), is sent to OpenAI for that check. Automated results can prevent a submission; screening is not a guarantee that all harmful content will be detected. GIF search uses KLIPY and its content filtering; we send KLIPY only your search terms and language. GIFs are loaded directly from KLIPY, so KLIPY receives the IP address and device information of anyone viewing them.

Where a user requests a translation, the text and language information are processed by an AI model running on Cloudflare. Cached translations are deleted 180 days after they were last requested. Translations may contain errors. These features process content for safety or translation; they do not grant us ownership of your writing.

No AI training on comments: we do not use your comments to train AI models or authorize our service providers to use them for that purpose. Moderation and requested translation process content to deliver those features; they are not permission to train models on your comments.

If a submission is rejected or content/account access is restricted, you can request a review using Report content or request a review. Automated screening only decides whether an individual submission is accepted. We do not restrict or suspend accounts based solely on automated processing; a person makes those decisions. This notice does not waive any right you have to challenge a decision or obtain human intervention under applicable law.

Service providers and other recipients

We do not share user data with commercial partners for their own unrelated marketing. This is distinct from using service providers to run Moviebase and from the advertising and measurement processing described below.

We use providers for the functions below. The services involved depend on the platform, feature and your choices. A provider may process information on our instructions for one function and act independently for another, such as operating its own sign-in or payment service.

Google/Firebase and Google Cloud: authentication, synchronized storage, backend hosting, referral processing, diagnostics/Crashlytics, performance monitoring, in-app messaging and app analytics.
Cloudflare and Neon: delivery and protection of websites/APIs, social data caching, image storage and processing, and translations (Cloudflare); our social database, hosted in the United States (Neon PostgreSQL).
RevenueCat, Apple and Google Play: subscription/entitlement administration, purchase records and store billing. RevenueCat receives your account ID and email, campaign information and, unless you limit ad tracking on your device, device advertising identifiers. Stores process payment details under their own policies.
OneSignal: sending account and marketing emails. When you are signed in, we register your email address and account ID with OneSignal.
OpenAI and KLIPY: moderation and GIF features as described above.
Advertising and measurement providers: Google AdMob and supported mediation partners, including Meta Audience Network, for advertising in the Android app; Google Analytics, Google Ads and Microsoft Clarity for configured website measurement. Actual processing depends on enabled integrations and choices described below.
Communication services: email and community/support providers process correspondence you send through their services.

We may disclose relevant information to authorities when legally required, or to advisers and other recipients where necessary to address legal claims or serious safety issues. A business transfer may involve necessary data subject to applicable protections and notice requirements; it is not permission to sell your information for unrelated purposes.

Provider information: Google, Cloudflare, Neon, RevenueCat, Apple, OpenAI, OneSignal, Meta, and Microsoft. Provider notices supplement rather than replace our responsibility to explain our processing.

Website tracking and in-app advertising

The website uses browser storage to remember cookie choices and technical information to deliver and protect pages. Configured Google Analytics and Google Ads integrations process page/activity events and campaign attribution. Store download links carry campaign information used to understand referrals from the website. Where Microsoft Clarity is enabled, it provides interaction analysis such as heatmaps and session recordings.

Use the Cookie settings control in the footer or below this notice to change optional website analytics and advertising choices. In regions where the website requests opt-in, optional storage is set to denied before a choice. Google Consent Mode can nevertheless load tags and send cookieless requests before consent; denied storage does not mean no information leaves the device. Elsewhere the website may initialize optional categories as enabled until you change your choices. Your browser can also restrict storage.

In-app advertising can process advertising identifiers, device/request information and interactions for ad delivery, fraud prevention and measurement. Personalization depends on applicable consent and device controls. Non-personalized ads may still require technical processing. App consent and device advertising settings are separate from this website’s cookie settings. In-app ads are currently shown only in the Android app.

Do not assume that a refusal removes information already lawfully processed or stops necessary security processing. For questions about a particular event, provider or privacy choice, contact us. No statement here authorizes tracking that applicable law requires us to disable until consent.

Retention, deletion and backups

Account, library and community records are kept to provide the features you use until you remove them or request account deletion, subject to the exceptions below. Optional device storage follows your choices and the relevant browser/device controls. Support correspondence is retained to resolve the request and related follow-up or claims. Security, moderation and technical records are retained only for a justified operational or legal purpose.

Account deletion removes the account and associated data through our deletion processes. These cover account/profile records, synchronized library data and user contributions, including media and social relationships. Deleting a comment also deletes the replies to it, and deleting your account also deletes comments others posted on your lists. Deleting a single contribution, hiding a profile or signing out does not delete your whole account. See Delete your Moviebase account for instructions and exceptions.

Deletion can involve several systems and may take time to complete. Residual data can remain in backups and caches until replaced or purged, or in records needed to complete a deletion safely. Limited identifier reservations, fraud-prevention records, legal records and moderation evidence may remain where justified. We determine their retention by the specific purpose, applicable legal periods and the need to handle actual claims, rather than keeping all content indefinitely. For example, a released username stays reserved for 30 days to prevent impersonation, and cached translations are deleted 180 days after last use. Retained records are not a basis for continuing ordinary publication of deleted content.

Independent recipients can retain their own copies, and payment providers may need to retain transaction records. Moviebase deletion does not cancel a store subscription or delete a Trakt, Google or Apple account. If you need confirmation of the scope of a deletion or believe data remains incorrectly, contact us.

International processing and security

Providers process information in countries outside Germany and the EEA, including the United States, where our social database is hosted. For these transfers we rely on an adequacy decision of the European Commission, including the EU-US Data Privacy Framework for certified recipients, or on the Commission’s standard contractual clauses. You can contact us for information about the safeguard for a particular recipient and how to obtain a copy. We do not rely on your acceptance of this notice as permission for transfers.

We use access controls and technical protections appropriate to the service, including protected network connections. No system is immune to every security risk. Keep sign-in credentials and account access secure and report suspected unauthorized use promptly. This statement does not limit our legal security or breach-notification duties.

Your rights and how to contact us

Subject to applicable law, you can request access and a copy of your personal data, correction, erasure, restriction and portability. Where processing relies on consent, you can withdraw it without affecting the lawfulness of earlier processing. These rights have conditions and exceptions, which we will explain if relevant to your request.

Right to object: you can object at any time, on grounds relating to your particular situation, to processing based on our legitimate interests. You can object to direct marketing at any time without giving reasons; we then stop using your data for that purpose.

Email help@moviebase.app with the request and enough account information to locate your data. We may ask for proportionate verification to protect against unauthorized access or deletion. Do not send passwords, sign-in codes or unnecessary identity documents. An in-app library export or backup is not necessarily a complete personal-data access response.

For GDPR requests, we respond without undue delay and normally within one month of receipt. Where a permitted extension is necessary, we explain the reason within that first month. You can complain to a supervisory authority, including the Berlin Commissioner for Data Protection and Freedom of Information, or the authority where you live or work. You do not have to contact us first.

United States and other regions: we do not sell personal information for money. Ads in the Android app may use your device’s advertising ID for personalized advertising, which some US state privacy laws treat as “sharing” or “targeted advertising”. You can opt out by deleting or resetting the advertising ID in your device settings, or by contacting us. Depending on where you live, you can also ask to know, access, correct or delete your information, including through an authorized agent where permitted. We will not discriminate against you for exercising these rights.

Age eligibility

Moviebase’s Terms restrict use to people aged 18 or older. We do not knowingly offer accounts or community participation to children. If you believe an underage person has provided personal data, contact us so we can investigate and take appropriate action. Please do not send additional information about a child beyond what is necessary to identify the concern.

Changes to this notice

We update this notice when our services or processing change. The published version will identify its revision date. We provide additional notice of significant changes where appropriate or required and obtain consent where required before new optional processing begins. A privacy-notice update is not itself a request for consent.

Privacy Policy