Privacy Policy

When you use Made of Screens, you trust us with your personal data. We take that responsibility seriously. This policy is designed to be transparent about what we collect and why, so you can make informed choices about your use of the Service.

Made of Screens is a social platform for movie and TV series enthusiasts. We collect data to provide, improve, and personalize your experience — not to sell it.

2.1 Data You Provide Directly

• Account information: name, username, email address, password (hashed), profile picture, and bio.
• Content you create: reviews, ratings, diary entries, lists, comments, and messages.
• Subscription information: billing details processed via Stripe (we do not store raw card numbers).
• Communications: support requests and feedback you send us.

2.2 Data Collected Automatically

• Device & browser information: IP address, browser type and version, operating system, and device identifiers.
• Log data: server access logs, error reports, and performance metrics.
• Behavioral analytics data — only if you consent to Analytics cookies: a fixed set of product events (e.g. logging a diary entry, following someone, starting a checkout), collected via PostHog. See Section 11 (Cookies) for the full list and what we deliberately exclude (no autocapture, no session recording, no free text).
• Cookies and similar tracking technologies (see Section 11).

2.3 Data from Third Parties

• Movie and TV metadata from The Movie Database (TMDB API).
• Payment confirmation data from Stripe (e.g., subscription status, last 4 digits of card).

We use your personal data for the following purposes and legal bases:

We do not sell your personal data. We may share it in the following limited circumstances:

• Service providers: Stripe (payments), email delivery providers, hosting and CDN providers, and PostHog (behavioral analytics, only if you consent to Analytics cookies). These are bound by data processing agreements and may only use your data to provide services to us.
• Legal requirements: if required by applicable law, court order, or governmental authority.
• Protection of rights: to enforce our Terms of Service, detect or prevent fraud, or protect the safety of our users.
• Business transfers: in the event of a merger, acquisition, or sale of all or substantially all of our assets, your data may be transferred. We will notify you via email and/or prominent notice on the Service.
• With your consent: for any other purpose with your explicit consent.

Public content you post (reviews, ratings, lists) may be visible to other users according to your privacy settings.

We retain your personal data for as long as your account is active or as needed to provide the Service. Specifically:

• Account data: retained while your account exists, and for up to 90 days after deletion to allow recovery.
• Billing records: retained for up to 7 years to comply with tax and financial regulations (or 5 years under Brazilian law, whichever is longer).
• Log and analytics data: retained for up to 12 months.
• Deleted content: may persist in backups for up to 30 days before permanent deletion.

You may request deletion of your account and personal data at any time from your account settings or by contacting us at suporte@web.madeofscreens.com.

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These include:

• Encryption of data in transit using TLS/HTTPS.
• Hashing of passwords using industry-standard algorithms.
• Access controls limiting data access to authorized personnel only.
• Regular security reviews and monitoring.

No method of transmission over the internet or electronic storage is 100% secure. If you believe your account has been compromised, contact us immediately at suporte@web.madeofscreens.com.

Made of Screens is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal data, please contact us at suporte@web.madeofscreens.com and we will delete the information promptly.

If you are located in Brazil, the Lei Geral de Proteção de Dados (LGPD — Lei nº 13.709/2018) grants you the following rights regarding your personal data:

• Confirmation: confirm whether we process your personal data.
• Access: access your personal data in a clear and complete format.
• Correction: correct inaccurate, incomplete, or outdated data.
• Anonymization, blocking, or deletion: request anonymization, blocking, or deletion of unnecessary or excessive data, or data processed in violation of the LGPD.
• Data portability: receive your data in a structured, machine-readable format.
• Deletion: request deletion of personal data processed based on your consent.
• Information about sharing: obtain information about public and private entities with which we share your data.
• Revocation of consent: withdraw consent at any time.
• Review of automated decisions: request review of decisions made solely by automated means that affect your interests.
• Complaint to the ANPD: file a complaint with the Autoridade Nacional de Proteção de Dados (ANPD) at gov.br/anpd.

To exercise these rights, contact us at suporte@web.madeofscreens.com. We will respond within 15 days as required by the LGPD.

If you are a California resident, the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA) grant you additional rights:

• Right to Know: request disclosure of the categories and specific pieces of personal information we have collected about you.
• Right to Delete: request deletion of your personal information, subject to certain exceptions.
• Right to Correct: request correction of inaccurate personal information.
• Right to Opt-Out of Sale or Sharing: we do not sell or share your personal information for cross-context behavioral advertising.
• Right to Limit Use of Sensitive Personal Information: request that we limit the use of your sensitive personal information.
• Right to Non-Discrimination: we will not discriminate against you for exercising your CCPA rights.

To submit a verifiable consumer request, contact us at suporte@web.madeofscreens.com. We will respond within 45 days. California residents may also designate an authorized agent to make requests on their behalf.

For residents of other US states with applicable privacy laws (Virginia, Colorado, Connecticut, etc.), we will honor equivalent rights to the extent required by your state's law.

Made of Screens may process your personal data outside of your country of residence. When transferring data internationally, we ensure appropriate safeguards are in place, such as:

• Standard contractual clauses approved by relevant data protection authorities.
• Data processing agreements with our service providers.
• Transfers to countries with adequate data protection levels as recognized by applicable authorities.

For Brazilian users: international transfers are conducted in accordance with Article 33 of the LGPD, which permits transfers to countries that provide an adequate degree of protection or when appropriate contractual guarantees are in place.

Specifically for behavioral analytics: PostHog Inc. is headquartered in the United States, but the account we use for this Service stores and processes data in the European Union. For Brazilian users, this transfer relies on your specific, highlighted consent to Analytics cookies (LGPD Art. 33, VIII) together with contractual safeguards under our data processing agreement with PostHog (LGPD Art. 33, II). No analytics data is transferred unless you have consented to it.

We use cookies and similar technologies to operate and improve the Service. For detailed information, please read our Cookie Policy.

You can manage your cookie preferences through your browser settings or via the cookie consent tool available on the Service.

We may update this Privacy Policy periodically. When we make material changes, we will notify you by email or by posting a notice on the Service at least 15 days before the changes take effect.

We encourage you to review this policy periodically. Your continued use of the Service after changes become effective constitutes acceptance of the updated policy.

For any questions, requests, or concerns regarding this Privacy Policy or the processing of your personal data, please contact us:

Brazilian users may also contact the Autoridade Nacional de Proteção de Dados (ANPD) at www.gov.br/anpd if they believe their rights under the LGPD have been violated.