Privacy Policy

If you create an account:

• Your email address and sign-in details. Passwords are handled by Firebase Authentication (a Google service); we never see or store your password.
• If you sign in with Google, the basic profile information Google shares (your name, email address and profile photo).
• Your favorite movies and your light/dark theme preference.

If you send feedback: the email address and message you submit through the form on our About page.

Automatically, when you visit:

• Usage and device information collected by Google Analytics, such as pages viewed, searches made on our site, browser and device type, referring site, and approximate location (country/city level, from your IP address).
• Advertising information collected by Google AdSense and its partners through cookies and similar technologies (see section 5).
• Standard server logs kept by our hosting provider (such as IP address, browser and the pages requested), used to deliver the site and protect it from abuse.

Where the law requires it (for example in the EEA, UK and Switzerland), analytics and advertising cookies are only used after you agree in our consent message. We don't collect payment information, precise location, or sensitive personal information.

• To provide your account, favorites and preferences.
• To run, secure and improve the site, and to understand how it's used.
• To show ads, which keep the site free.
• To reply to feedback and messages you send us.
• To comply with the law and enforce our Terms of Service.

If you're in the EEA, UK or Switzerland, our legal bases are: performing our agreement with you (your account), your consent (analytics and advertising cookies), our legitimate interests (keeping the site secure and working), and legal obligations.

We use these service providers, which process information on our behalf or as independent services:

• Google: Firebase (accounts and database), Google Analytics, and Google AdSense. Google Privacy Policy
• Vercel: website hosting. Vercel Privacy Policy
• Formspree: delivers feedback form messages to us. Formspree Privacy Policy

Movie information and images come from TMDB, and streaming availability from JustWatch (via TMDB). We don't send them your personal information.

We don't sell your personal information for money. However, some U.S. state laws treat letting advertising partners use cookies to show personalized ads as a "sale" or "sharing" of personal information. See section 7 for how to opt out. We may also disclose information if required by law or to protect the rights and safety of AfterCreds and its users.

We and our partners use cookies and browser storage to keep you signed in, remember your preferences and consent choices, measure traffic and show ads. Details, and how to control them, are in our Cookie Policy.

Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this website or other websites. Google's use of advertising cookies enables it and its partners to serve ads to you based on your visits to this site and/or other sites on the Internet.

You can opt out of personalized advertising in Google's Ads Settings, and opt out of some third-party vendors' use of cookies for personalized advertising at aboutads.info. Learn how Google uses information from sites that use its services.

• Account information is kept until you delete your account.
• Feedback messages are kept as long as needed to respond and follow up.
• Analytics data is kept according to our Google Analytics retention settings.
• We keep private backups of our database to recover from errors. After you delete your account, your data may remain in these backups, which are not used for anything else. You can ask us to remove it from backups too.

• Delete your account: on your Account page, choose "Delete Account". This removes your account, favorites and preferences.
• Change your consent (EEA, UK, Switzerland): use the "Privacy and cookie settings" link at the bottom of any page.
• Opt out of the "sale" or "sharing" of personal information (U.S. states with privacy laws): use the "Do Not Sell or Share My Personal Information" link shown on the site in those states.
• Access, correct, delete or export your data, or object to processing: email us at aftercreds@gmail.com. We'll respond within the time required by applicable law, and won't treat you differently for exercising your rights.

If you're in the EEA, UK or Switzerland, you can also complain to your local data protection authority.

AfterCreds isn't directed to children under 13 (or under 16 in the EEA and UK), and we don't knowingly collect their personal information. If you believe a child has created an account, contact us and we'll delete it.

We use reputable providers, encrypted connections (HTTPS) and access controls to protect your information, but no method of transmission or storage is completely secure. Our providers may process information in the United States and other countries; where required, they use legally recognized safeguards for these transfers.

We may update this policy. We'll change the "Last updated" date above, and for significant changes we'll provide a more prominent notice.

Email aftercreds@gmail.com with any questions or requests about your privacy.