Privacy policy

Effective date: February 14, 2026 · Version 2.0.4

In short

We collect only what we need to run Flicker. We don't sell your data, run ad-tracking, or train models on your work.

  • No data sales
  • No ad tracking
  • Encrypted at rest and in transit

1. Our approach

Flicker is built with respect for creators' autonomy. We collect only the minimum data needed to keep the platform running, and we don't use behavioral surveillance for advertising.

2. What we collect

Identity & authentication

Your email address for sign-in and important platform notifications. Profile information (name, bio, links) that you choose to make public.

Your uploads

The films and metadata you upload, stored on our cloud infrastructure and shown to whoever you choose to share with.

Technical telemetry

IP addresses, device information, and high-level usage metrics for security, rate-limiting, and reliability.

3. How we use it

  • · Running the service and keeping the infrastructure healthy
  • · Verifying your identity and securing your account
  • · Sending you transactional emails and magic links
  • · Preventing abuse and enforcing the Terms of Service

4. What we don't do

Sell or broker your data to third parties.
Track you for targeted advertising.
Train AI/ML models on your uploaded content.
Share your contact info with marketing partners.
Build behavioral profiles for algorithmic recommendation.

5. Data retention

You control your data. Deletion requests are processed promptly — once a film or account is deleted, the data is purged from active systems within 30 days. Some transaction logs may be retained longer for legal compliance.

6. Your rights (GDPR)

Under GDPR, you have the following rights:

Right of access
Right to rectification
Right to erasure
Right to portability

To exercise these rights, contact us at privacy@flicker.film.

7. Security

We use TLS 1.3 for data in transit and AES-256 for data at rest. Our infrastructure undergoes regular security audits.

8. Subprocessors

We use a small number of carefully chosen third-party providers (cloud hosting, transactional email). All are bound by data-processing agreements that meet GDPR standards.