If you just read
There are no third-party trackers, advertising pixels or social media scripts on Fi1m. We measure traffic with a first-party analytics service that records the page, the referrer, the country and the type of device, without cookies and without anything that identifies you. Our servers keep standard access logs, including IP addresses, for 30 days for security, and then delete them.
Trailers are hosted on YouTube. Nothing is loaded from YouTube until you press play; when you do, YouTube's privacy-enhanced player is used and YouTube's own privacy policy applies from that point.
Links to rent or buy a film may include a referral code so the retailer knows you came from us. The retailer does not tell us who you are.
If you have an account
We hold what you give us when you sign up: your name, email address and password (stored hashed; we cannot read it), or the identifier from Google or Apple if you sign in that way. We hold what you do on the site as a member: the titles in your collections, your star ratings and written reviews, your Discover questions and the answers, the streaming services you told us you have, your preferences and region, and if you're a paying member, your subscription status. Payment details are held by our payment provider, not by us.
We use this to run your account, to show your Watchlist and collections, to publish reviews you choose to publish, to put your services first when we say where something is streaming, to shape Discover's answers to your taste if you've left that on, and to send you the weekly if you asked for it. That is the lawful basis: performance of our contract with you, and your consent for the email and for taste memory, both of which you can withdraw in Account.
Public collections and published reviews are, by definition, public, under your display name. Everything else is private to you.
Discover
Questions you ask Discover, and its answers, are stored with your account so that a conversation can continue and so you can find it again. Questions are sent to the AI model providers listed below to be answered; they are sent with no account information, and under contracts that prohibit the providers from retaining them beyond processing or using them for training. Anonymous questions from readers without an account are stored without any identifier, for up to 90 days, so we can see what people ask and improve the answers. We may publish popular questions, anonymised and edited, as "Asked and answered" pages. We do not publish anything that could identify the asker.
You can clear your Discover history at any time from Account; it is deleted, not hidden.
The weekly is sent only to people who asked for it, and every issue has a one-click unsubscribe. We record whether an issue was opened and which links were clicked, in aggregate, to decide what to write about; we do not build a per-person profile from it. Account emails (sign-in links, receipts, corrections to something we sent you) are sent regardless, because they are part of running your account.
Cookies and storage
We set one cookie, to keep you signed in. It is strictly necessary, so it needs no banner, and you won't see one. Your dark/light preference is stored in your browser's local storage, not sent to us. Nothing else.
Who processes it
We use a small number of suppliers, under contracts that hold them to this policy. Data is stored in the United Kingdom; where a supplier processes outside the UK, it is under the UK's International Data Transfer Agreement or the UK Addendum to the EU standard contractual clauses.
| Supplier | What for | Where |
|---|---|---|
| Microsoft Azure | Hosting, database, file storage | UK South |
| Cloudflare | Content delivery, security | Global edge; UK data at rest |
| Anthropic | Writing reviews and Discover answers | USA, zero-retention terms |
| Microsoft Azure OpenAI | Checking drafts, Discover | UK South |
| Stripe | Membership payments | EU / USA |
| Postmark | Sending email | USA |
| Plausible | Traffic measurement, no cookies | EU |
We do not sell personal data, and we don't share it with anyone for their own marketing. If Fi1m Ltd is ever sold, your data would go with the site, under this policy or one no weaker, and you'd be told first.
How long we keep it
- Your account, and what's in it: for as long as you have the account. Delete it and everything goes within 30 days, including published reviews; backups clear within 90.
- Anonymous Discover questions: 90 days.
- Server logs: 30 days.
- Email records: while you're subscribed, then 30 days.
- Payment records: six years, because HMRC asks us to.
Your rights
Under the UK GDPR you can ask to see what we hold about you, have it corrected, have it deleted, have it sent to you in a portable form, object to how we're using it, or withdraw a consent. You can do most of this yourself: Account lets you download your data, change anything, clear your Discover history and delete your account. For anything else, or if you'd rather a person did it, write to privacy@film.one and we'll respond within a month.
If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office at ico.org.uk. We'd rather you told us first, but you don't have to.
Changes
If we change this policy in a way that matters, we'll email account holders before it takes effect and note the change on the corrections page. Tidying the wording doesn't count; changing what we collect or who we share it with does.