Privacy Policy
Last updated: January 2025
Introduction
Pictures is a cinema listings service that helps you find film screenings at independent cinemas across London. We respect your privacy and are committed to protecting your personal data. This policy explains how we collect, use, and protect your information in compliance with UK GDPR and PECR.
What We Collect
Information you provide
- Account information: If you create an account, we store your email address and name (provided via Clerk authentication)
- Preferences: Your selected cinemas, watchlist, and films marked as seen or not interested
Information collected automatically (with your consent)
- Analytics data: Pages visited, features used, and how you interact with the site
- Session recordings: Anonymised recordings of your browsing session to help us fix bugs and improve the experience
- Technical data: Browser type, device type, and general location (city level)
How We Use Your Data
- To provide and personalise the cinema listings service
- To sync your preferences across devices (if signed in)
- To understand which features are popular and improve them
- To identify and fix bugs and usability issues
- To ensure the security and integrity of our service
We do not sell your data to third parties or use it for advertising.
Cookies and Tracking
Essential cookies (always active)
These are required for the site to function:
- Authentication cookies: Clerk session cookies that keep you signed in
- Preference storage: localStorage entries for your cinema selections and watchlist
Analytics cookies (your choice)
These help us improve Pictures but are only set with your consent:
- PostHog: Privacy-focused analytics platform hosted in the EU. Collects anonymised usage data and session recordings with all text inputs masked.
Your Cookie Preferences
Analytics cookies
Not set
Analytics help us understand how you use Postboxd. We use PostHog for privacy-focused analytics. Session recordings are masked to protect sensitive information.
Data Retention
- Account data: Retained while your account is active. Deleted within 30 days of account deletion.
- Analytics data: Retained for 12 months, then automatically deleted.
- Session recordings: Retained for 30 days.
Third-Party Services
We use the following services to operate Pictures:
- Clerk (authentication) - processes account data under their privacy policy
- PostHog (analytics) - EU-hosted, processes analytics under their privacy policy
- Supabase (database) - EU region, stores your preferences under their privacy policy
- Vercel (hosting) - serves the website under their privacy policy
- TMDB (film data) - provides film metadata, no user data shared
Your Rights
Under UK GDPR, you have the right to:
- Access: Request a copy of the data we hold about you
- Rectification: Ask us to correct inaccurate data
- Erasure: Ask us to delete your data
- Portability: Request your data in a portable format
- Object: Object to processing of your data
- Withdraw consent: Withdraw consent for analytics at any time via Settings
To exercise any of these rights, please contact us at the address below.
Contact Us
For privacy-related questions or to exercise your rights, contact us at: hello@pictures.london
If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO).
Changes to This Policy
We may update this policy from time to time. Significant changes will be communicated via a notice on the site. Your continued use of Pictures after changes constitutes acceptance of the updated policy.