Privacy Policy
Last updated: July 17, 2026
1. Who we are
Flix★Fans (flix.fans) is operated by Demirius LTD, a company registered in the United Kingdom ("we", "us", "our"). Demirius LTD is the data controller for the personal data described in this policy. You can reach us at
.
This policy covers the flix.fans website. Our browser extension has its own, separate policy: Browser Extension Privacy Policy.
2. Data we collect
Account data
You sign in with a social account (Google, Microsoft or Apple). When you do, we receive and store your name, email address and profile picture from that provider, plus the nickname you can set on Flix★Fans. We never see or store your password for those services.
Content you create
Ratings, reviews, discussion threads and comments, and the titles you add to your list are stored with your account. Reviews, discussions and ratings are public and shown together with your display name and avatar; your list is private to your account.
Payment data
Premium purchases are processed by Stripe. Your card details go directly to Stripe and never touch our servers; we store only whether your account has Premium and when it was purchased.
Email data
We send account emails (for example a welcome email) and notification emails through our email provider, Resend. We keep your notification preferences and honour unsubscribe requests, including the one-click unsubscribe link in every notification email.
Technical data
Like almost every website, our hosting infrastructure keeps short-term server logs (IP address, browser type, requested pages) for security and debugging.
3. What we do not do
- No advertising and no advertising trackers
- No third-party analytics scripts
- No selling or renting of personal data, to anyone, ever
- No automated profiling or automated decision-making
4. Why we process your data (legal bases)
- Performance of a contract: operating your account, showing your content, providing Premium features you purchased.
- Legitimate interests: keeping the service secure, preventing abuse, short-term server logs, and the referral program.
- Consent: optional notification emails, which you can withdraw at any time via the unsubscribe link or your notification settings.
5. Cookies and local storage
We use only strictly necessary, first-party cookies: session cookies that keep you signed in. If you arrive through a referral link, the referral code is kept in your browser's local storage until it is claimed. We set no advertising or analytics cookies, which is why you will not see a cookie banner here.
6. Who we share data with
We share data only with the service providers (processors) needed to run Flix★Fans: Vercel (hosting), Neon (database), Upstash (caching), Stripe (payments), Resend (email), and your chosen sign-in provider (Google, Microsoft or Apple). Each processes data on our behalf under a data processing agreement, or as an independent controller in the case of your sign-in provider. We may also disclose data if the law requires it.
7. International transfers
Some of our providers store data in the United States. Where personal data leaves the UK or EEA, the transfer is protected by recognised safeguards such as the UK Extension to the EU-US Data Privacy Framework or Standard Contractual Clauses with the UK Addendum.
8. How long we keep data
Account data and your content are kept for as long as your account exists. Server logs are short-lived. When you delete your account, your personal data is deleted; payment records are retained only as long as tax and accounting law requires.
9. Your rights
Under UK and EU data protection law you can ask us for access to, correction of, deletion of, or a portable copy of your personal data, ask us to restrict processing, and object to processing based on legitimate interests. You can delete your account yourself from your profile page, which removes your personal data. To exercise any other right, email
. You also have the right to complain to the UK Information Commissioner's Office (ico.org.uk) or your local supervisory authority.
10. Children
Flix★Fans is not directed at children under 13, and we do not knowingly collect personal data from them. If you believe a child has created an account, contact us and we will delete it.
11. Changes to this policy
If we change this policy, we will update this page and the date at the top. For significant changes we will notify signed-in users.
12. Contact
Demirius LTD, United Kingdom. Questions about this policy or your data:
.