Your account: your email address and name. Passwords are handled by Google’s Firebase sign-in service; we never see them. If you sign in with Google, we get your name and email from Google.

Your date of birth, which you give when you sign up. It can’t be changed afterwards except by us, on request.

What you log: the films you’ve watched and when, your ratings and thoughts, how you watched (and, for cinema trips, where you saw it, the screen and what you paid, if you add them), your watchlist (with any notes you add to it), the films you own and the ones you want to buy (your shelf and shopping list, and on what format) and your favourite films.

Groups you start or join, the films added to them, and your stars in any movie-night votes.

Songs you suggest for a film, along with your name, so we can review them.

Whether your profile is public or private.

To run Cut for you: saving what you log and showing it back to you and to the people you share it with.

Your date of birth: Cut is for 13 and over, so we use it to keep younger children out, and to switch on a content filter for under-18s. We have a duty to protect children using Cut, and a legitimate interest in doing so.

Your email: for signing in, resetting your password and confirming a change of email. We don’t send marketing.

Song suggestions: to check them before they appear, and to deal with misuse.

Only you: your date of birth, email address, watchlist and shelf.

Anyone, if your profile is public (the default): your name, favourite films and the films you’ve logged. Make it private in Settings or Edit profile and Cut stops showing them to anyone else.

Members of a group: the group, the films in it, and its votes. While a vote is open they see who has voted but not how; once it closes, the group can see how everyone’s stars were spent.

Everyone: approved song suggestions, without your name.

Us: we can see account data when we need to, to keep Cut running, review song suggestions, correct a date of birth or help with a request.

Google Firebase stores Cut’s data, runs sign-in and hosts the website. Google processes it for us under its data protection terms.

The Movie Database (TMDB) supplies film details and posters, and JustWatch (through TMDB) supplies where-to-watch information. Your device fetches these directly, so TMDB sees your IP address, but nothing about your account.

Apple’s iTunes service supplies soundtrack listings. Your device asks for them directly, so Apple sees your IP address, but nothing about your account.

OpenStreetMap finds cinemas near you, but only if you tap Nearby when logging a cinema trip. Your browser or phone asks your permission first (on phones, Cut can only use it while the app is open), and your location is rounded to roughly the nearest 500 metres before it’s sent. OpenStreetMap sees that rough location and your IP address, but nothing about your account. Cut doesn’t store your location; only the cinema name you choose is saved.

Trailers come from YouTube. On the website they play in YouTube’s privacy-enhanced player, which only loads when you tap Trailer; the apps open YouTube. YouTube sees your IP address, but nothing about your Cut account, and Google’s privacy policy applies to what you watch there.

Jellyfin, if you connect your own Jellyfin server in Settings. Cut talks to your server straight from your device: your server address and Jellyfin sign-in stay on that device and are never sent to us. The films you’ve played (and when) are saved to your Cut account as watched, and the films on your server go on your shelf. Unless you turn it off, Cut also keeps a playlist of your watchlist on your server. Cut also shows the films you’re part-way through, and when you ask it to, starts a film on one of your Jellyfin players; it reads which players are open to do that. Disconnecting stops this; what’s already logged stays until you remove it.

Apple Music and Spotify links only open those services if you tap them. Their privacy policies apply from then on.

get a copy of your data: Settings › Download a copy gives you your films; email us for everything else

correct it: in Edit profile, or email us to correct your date of birth

delete it: Settings › Danger zone

object to how we use it, or ask us to restrict it