NextFilm is a live product under active development, and this Privacy Policy is a working document that will change as the Service evolves. By using NextFilm you accept that risk. We think it is a small one: we hold no passwords, no payment details, and very little data about you at all.
Privacy Policy
Last updated: October 4, 2026
1. Who we are
A sole proprietor trading as "NextFilm", Contact: [email protected].
For EEA and UK Users, we are the data controller for the personal data described below.
2. Who this applies to
NextFilm is for adults aged 18 or over. We do not knowingly collect data from anyone under 18. If you believe a minor has an Account, contact [email protected] and we will delete it.
3. What we collect
3.1
Identity data — your name and email address, received from Google or Facebook when you sign in. Authentication is handled by WorkOS. We never see or store your password.
3.2
Content you create — tier rankings, content-category tags, and written reviews. These are visible to other Users.
3.3
Product analytics — basic information about how NextFilm is used, such as pages viewed and features used, together with limited technical data (approximate region, device and browser type).
3.4
Support correspondence — anything you send us by email.
3.5
Tonight answers — when you use Tonight, on your own or in a Movie Night, the answers you give for that night: the moods you choose, anything you type in its "anything else" box, how you react to films you have rated, and which Movie Night you joined. These are used to pick films for that night and are never shown to other Users.
What we do not collect: payment card details (Stripe handles these end to end and they never reach our servers), passwords, browsing activity outside NextFilm, precise location, or advertising identifiers. We run no third-party ad trackers.
4. Why we use it, and on what basis
| Purpose | Legal basis (GDPR / UK GDPR) |
|---|---|
| Create and secure your Account | Performance of a contract |
| Provide the Service and show your rankings and reviews | Performance of a contract |
| Generate recommendations | Performance of a contract |
| Pick films for tonight, alone or in a Movie Night | Performance of a contract |
| Process payments (via Stripe) | Performance of a contract |
| Product analytics and improvement | Legitimate interests — improving the Service |
| Moderation, abuse prevention, security | Legitimate interests / legal obligation |
| Legal compliance and defence of claims | Legal obligation / legitimate interests |
Users outside the EEA/UK: the same purposes apply; the legal-basis column is included for GDPR and UK GDPR compliance.
5. Cookies
We use strictly necessary cookies only, to keep you signed in. We do not use advertising, marketing, or cross-site tracking cookies, and therefore do not display a consent banner for them. You can block cookies in your browser, but you will not be able to stay signed in.
6. Who we share it with
We do not sell personal data and do not share it for advertising. We share limited data with service providers acting on our behalf:
| WorkOS | authentication |
| Voyage AI (MongoDB) | turning text into embeddings, including the answers you give Tonight |
| Stripe | payment processing (independent controller) |
| Cloudflare | infrastructure (dns, email, etc) |
| DigitalOcean | infrastructure (hosting, compute) |
We may also disclose data where required by law, to enforce our Terms, or to protect the rights and safety of Users.
Your reviews, rankings, and tags are shared with other Users by design — that is the point of the Service.
In a Movie Night, the other members see your username and whether you have finished answering. What you answered is never shown to them, or to anyone but you.
7. Where data is held, and transfers
Data is stored in the United States. If you are in the EEA or UK, your data will be transferred outside your region. We rely on the EU Standard Contractual Clauses and the UK International Data Transfer Addendum (or the UK Addendum to the SCCs) with our providers, together with supplementary measures where needed. You may request a copy of the relevant safeguards at [email protected].
8. How long we keep it
| Account data | while your Account exists. Deleting your Account from your profile erases it immediately — there is no retention window and we keep no archived copy |
| User Content | as above. Your ratings are also removed from the community averages they contributed to, as part of the same deletion |
| Tonight answers | about seven days after the night ends — a Movie Night ends twelve hours after it starts, a solo session twelve hours after its picks — and then deleted automatically. Deleting your Account erases them immediately |
| Records needed for tax or legal reasons | as long as the law requires. Payment records held by our payment provider are kept for this reason and are not erased with your Account |
9. Security
We apply reasonable technical and organisational measures, including encryption in transit, access controls, and reliance on specialist providers for authentication and payments so that we hold as little sensitive data as possible. No system is perfectly secure, and we cannot guarantee absolute security.
10. Your rights
10.1
Everyone. You can delete your Account yourself, at any time, from your profile. It is erased immediately and permanently — your ratings, your taste profile, your lists and your sign-in — and it cannot be undone or recovered. You may also ask us to access or correct your data, or to delete it on your behalf, by writing to [email protected]; we will respond within 30 days.
10.2
EEA and UK Users. You have the rights of access, rectification, erasure, restriction of processing, data portability, and objection (including objection to processing based on legitimate interests). Where processing is based on consent, you may withdraw it at any time without affecting prior processing. You may complain to your national supervisory authority — in the UK, the Information Commissioner's Office (ico.org.uk).
10.3
Canadian Users. You have rights of access and correction under PIPEDA, and, in Quebec, additional rights under Law 25 including data portability and the right to be informed about automated decision-making. You may complain to the Office of the Privacy Commissioner of Canada or, in Quebec, the Commission d'accès à l'information.
10.4
US Users. Residents of Washington, California, and other states with comprehensive privacy laws may request access, deletion, correction, and portability, and may opt out of the sale or sharing of personal data — although we do neither. We will not discriminate against you for exercising these rights. Washington residents are also covered by the My Health My Data Act; NextFilm does not knowingly collect consumer health data.
11. Automated processing
Recommendations, including Tonight's picks, are generated automatically by comparing text embeddings representing films and, for Tonight, the answers you give. This is not automated decision-making that produces legal or similarly significant effects. It does not affect your rights, your access to the Service, or what you pay.
12. Changes to this Policy
We may update this Policy. Non-material changes take effect on publication with a revised date. Material changes will be notified by email or in-product notice at least 30 days in advance.
13. Contact
| Privacy requests | [email protected] |
| General | [email protected] |
See also the Terms of Service, of which this Policy forms part.