Privacy Policy
How Marquee handles your data.
This is a baseline policy. Replace the bracketed placeholders
([Company], [Jurisdiction], [support@…])
and have legal counsel review it before launch.
Who runs Marquee
Marquee is operated by [Company] (the "operator," "we"). If you
have any questions about this policy or your data, contact
[support@yourdomain.example].
What we collect
- Account: username, display name, password (only ever stored
as a one-way PBKDF2-SHA-256 hash with per-user salt), optional email address,
timestamps for account creation, last login, and last activity.
- Taste data you give us: chosen genres, content-rating limit,
streaming services you subscribe to, rewatch preference, rated movies (loved /
disliked / seen / want-to-see / avoid), and movie nights you log.
- Connections: who you've accepted as a connection or added
to a household, the names/usernames they chose.
- Billing (only if you subscribe): a Stripe customer/subscription
identifier, your subscription status and renewal date. We do not store
your card details — those live with Stripe.
- Service logs: routine technical logs (request paths, status
codes) kept by Cloudflare for short retention windows for debugging and abuse
prevention.
What we don't collect
- No advertising IDs, no third-party trackers, no analytics SDKs.
- No cross-site tracking. The session cookie is HttpOnly and SameSite=Lax.
- No payment-card data on our servers (Stripe handles it).
How we use your data
- To produce movie recommendations for you and the people you're watching with.
- To log watched-together nights and the per-person ratings you submit.
- To send transactional email — verification, password resets, receipts,
payment-failed notices. We do not send marketing email without your explicit opt-in.
- To run your subscription (with Stripe, and, in future, Apple).
Who we share it with
- Stripe — when you subscribe, your account id, email, name, and
subscription state are shared with Stripe to process payments. Stripe's privacy
practices: stripe.com/privacy.
- The Movie Database (TMDB) — we fetch movie metadata, posters,
and streaming availability from TMDB. Your taste data is never sent to TMDB.
- Cloudflare — our hosting, database (D1), and Workers AI
inference run on Cloudflare. Your prompts to the AI (a compact "taste profile"
and a candidate list) are sent to Cloudflare Workers AI for re-ranking;
Cloudflare's terms apply.
- Resend (or our configured email provider) — recipients and
message bodies for transactional email.
We do not sell or rent your data, and we do not share it with third parties beyond
those operationally required to provide the service.
Your rights
- Access / export: you can download a JSON dump of everything
we hold about you from your Account page.
- Delete: you can permanently delete your account in-app
(Account → Delete account). This cancels any active subscription immediately
and cascades the removal across all related data within our database.
- Correct: edit display name, email, preferences, and ratings
directly in the app.
- If you are in the EU/EEA, UK, or California, applicable laws (GDPR, UK GDPR,
CCPA) give you additional rights — exercise them by writing to the support
address above.
Retention
We keep your data as long as your account exists. Account deletion removes it.
Transactional logs are kept for as long as our hosting provider retains them
(typically a few days to weeks).
Security
Passwords are stored only as salted PBKDF2 hashes. Sessions use HttpOnly cookies.
TLS is enforced. Webhooks are HMAC-verified. We follow industry-standard practices,
but no service can guarantee absolute security.
Children
Marquee is intended for users aged 13 or older.
Changes
If we make material changes to this policy we will publish them here and (if you
have a verified email on file) email registered users.
Last updated: [DATE]. Jurisdiction: [Jurisdiction].
← Back to Marquee · Terms