Privacy Policy

Last updated: July 18, 2026

1. Who we are

Flix★Fans (flix.fans) is operated by Demirius LTD, a company registered in the United Kingdom ("we", "us", "our"). Demirius LTD is the data controller for the personal data described in this policy. You can reach us at .

This policy covers the flix.fans website. Our browser extension has its own, separate policy: Browser Extension Privacy Policy.

2. Data we collect

Account data

You sign in with a social account (Google, Microsoft or Apple). When you do, we receive and store your name, email address and profile picture from that provider, plus the nickname you can set on Flix★Fans. We never see or store your password for those services.

Content you create

Ratings, reviews, discussion threads and comments, and the titles you add to your list are stored with your account. Reviews, discussions and ratings are public and shown together with your display name and avatar; your list is private to your account.

Payment data

Premium purchases are processed by Stripe. Your card details go directly to Stripe and never touch our servers; we store only whether your account has Premium and when it was purchased.

Email data

We send account emails (for example a welcome email) and notification emails through our email provider, Resend. We keep your notification preferences and honour unsubscribe requests, including the one-click unsubscribe link in every notification email.

Technical data

Like almost every website, our hosting infrastructure keeps short-term server logs (IP address, browser type, requested pages) for security and debugging.

3. What we do not do

• No advertising and no advertising trackers
• No selling or renting of personal data, to anyone, ever
• No automated profiling or automated decision-making

4. Why we process your data (legal bases)

• Performance of a contract: operating your account, showing your content, providing Premium features you purchased.
• Legitimate interests: keeping the service secure, preventing abuse, short-term server logs, and the referral program.
• Consent: optional notification emails and Google Analytics cookies. You can withdraw either at any time - emails via the unsubscribe link or your notification settings, analytics via the "Cookie settings" link in the footer.

5. Cookies and local storage

Essential cookies. These first-party cookies are required for the site to work, so they do not need consent:

• Session cookies (better-auth.*) keep you signed in for up to 7 days. They are set when you sign in, together with short-lived cookies used to complete social sign-in securely.
• flix_consent remembers your cookie choice for 180 days.

Analytics cookies. With your consent - and only then - we set Google Analytics cookies (_ga and _ga_*, kept for up to 2 years) to understand how the site is used. If you decline, they are never set. You can change your choice at any time via the "Cookie settings" link in the footer; declining also removes existing analytics cookies.

If you arrive through a referral link, the referral code is kept in your browser's local storage until it is claimed.

6. Who we share data with

We share data only with the service providers (processors) needed to run Flix★Fans: Vercel (hosting), Neon (database), Upstash (caching), Stripe (payments), Resend (email), Google (analytics, only with your consent), and your chosen sign-in provider (Google, Microsoft or Apple). Each processes data on our behalf under a data processing agreement, or as an independent controller in the case of your sign-in provider. We may also disclose data if the law requires it.

7. International transfers

Some of our providers store data in the United States. Where personal data leaves the UK or EEA, the transfer is protected by recognised safeguards such as the UK Extension to the EU-US Data Privacy Framework or Standard Contractual Clauses with the UK Addendum.

8. How long we keep data

Account data and your content are kept for as long as your account exists. Server logs are short-lived. When you delete your account, your personal data - profile, sign-in details, notifications and settings - is deleted. Your ratings, reviews, discussions, comments and votes remain on the service in anonymised form, permanently disassociated from you and shown as "Deleted user"; delete them first, or contact us, if you want them removed too. Payment records are retained only as long as tax and accounting law requires.

9. Your rights

Under UK and EU data protection law you can ask us for access to, correction of, deletion of, or a portable copy of your personal data, ask us to restrict processing, and object to processing based on legitimate interests. You can delete your account yourself from your profile page, which removes your personal data as described in section 8. To exercise any other right, email . You also have the right to complain to the UK Information Commissioner's Office (ico.org.uk) or your local supervisory authority.

10. Children

Flix★Fans is not directed at children under 13, and we do not knowingly collect personal data from them. If you believe a child has created an account, contact us and we will delete it.

11. Changes to this policy

If we change this policy, we will update this page and the date at the top. For significant changes we will notify signed-in users.

12. Contact

Demirius LTD, United Kingdom. Questions about this policy or your data: .