privacy

what we collect

• Account — your Google account id, email, name and avatar, so you can sign in and so a rating belongs to a person.
• Your activity — ratings, section scores, phone-check counts, tags, reviews, watchlist.
• Product analytics — page paths, and events like "rating submitted" or "checkout started", tied to a random session id and your account id. We record the path but never the query string, so what you search for is not stored.
• Payment records — plan, amount, currency and the provider's transaction id. Card details never touch our servers; the payment provider handles them.

what we don't do

• No advertising pixels, no remarketing, no data brokers. We use Google Analytics for product measurement with every advertising signal switched off — ad storage, ad personalisation and Google Signals are denied at load and never granted.
• No selling or sharing of user-level data — ever. It is a published red line and it is enforced in code, not just in this page.
• No display advertising in the product.

aggregate reporting

FlickFeel publishes and licenses aggregate statistics — how an audience's attention moved across a title's four acts, for instance. Those aggregates:

• require a minimum of 25 real raters before a title is reported at all;
• never include an account id, handle, review text, or precise timestamp;
• exclude anyone who has opted out in their profile settings;
• exclude seeded taste profiles entirely.

cookies

One essential cookie (ff_session) keeps you signed in, plus short-lived cookies during the Google sign-in handshake.

Google Analytics sets its own measurement cookies (_ga and friends) to tell repeat visits apart. They are analytics cookies, not advertising ones: ad storage, ad personalisation and Google Signals are denied, so nothing here feeds remarketing. Our other analytics — Cloudflare Web Analytics and our own event pipeline — remain cookieless.

who processes your data

• Cloudflare — hosting, database, and cookieless web analytics.
• Google — sign-in, and Google Analytics for product measurement with advertising signals disabled.
• OpenRouter and the model providers behind it — text sent for AI summaries. We send title and score context, never your email or account id.
• Payment providers — Razorpay (India) and our merchant of record (international).
• Our email provider — receipts and, if you opt in, the newsletter.

your rights

Under India's DPDP Act and the GDPR you can access, correct, export, or delete your data. Export and delete are self-serve from your profile and take effect immediately; there is no support ticket and no retention trick. Deletion removes your account, ratings, and reviews. Aggregate statistics already published cannot be reversed, which is precisely why they never contain anything that identifies you.

retention

Account and rating data are kept until you delete them. Raw analytics events are kept for 24 months. Payment records are kept as long as tax law requires.

children

FlickFeel is not intended for anyone under 13.

questions

Anything at all — see the contact page. Privacy requests are answered within 30 days.