Privacy

This page says what Twine Club keeps about you, why, who handles it for us, and how long it stays. It is written in plain language on purpose.

Who we are

Jeeve Singh runs Twine Club and is the controller of your personal data. Contact: hello@twine.club.

If you just pick films

There are no ads, no tracking scripts and no cookies for viewers. We do keep some small things in your browser's storage, listed under "What's stored on your device" below.

What we keep, why, and the lawful basis

The lawful basis is the legal reason we are allowed to use the data. For each item:

• Writer accounts (your email address, the name you choose for your byline, what you write, when you accepted the writer terms). We use these to let you sign in and write for us. Lawful basis: contract.
• Moderation and reports (reports about synopses, and what the editor decided). We use these to keep the site safe and to meet our duties under the Online Safety Act. Lawful basis: legitimate interests, and those legal duties.
• A random device ID, for one guess per device and for checking that ratings haven't been rigged. It is not linked to your name. Lawful basis: legitimate interests, because the site cannot work fairly without it.
• The same device ID, for counting visits. It lets us see how many people use Twine Club and how often they return. Lawful basis: legitimate interests, under the exception in the privacy and electronic communications rules for simple statistics. You can opt out below.
• Error reports. When the server fails, we get a report so we can fix it. Lawful basis: legitimate interests.
• Server logs, which include IP addresses. Our server briefly records the IP address of each request. Lawful basis: legitimate interests, in keeping the site running and secure.
• Backups. A nightly copy of the database, in case something goes wrong. Lawful basis: legitimate interests.

Providing your email address and name is required to write for us. You never need to give us anything to pick films.

We don't sell or share your data, we don't use it to train AI, and nothing is decided about you by an automated process.

Who processes it for us

• Resend sends the sign-in emails (United States).
• Backblaze B2 stores encrypted backups (EU Central).
• Sentry receives server error reports only, with email addresses removed (EU).
• Namecheap provides the domain, email forwarding and the server that runs Twine Club.
• TMDB, where film details come from, receives no personal data from us.

Transfers outside the UK

Resend is based in the United States, so your email address is sent there when we mail you a sign-in link. We use Resend only to send that email.

Namecheap is also a US company. It provides our domain, email forwarding and the server that runs Twine Club, so data it handles, including server logs and email sent to hello@twine.club, may be processed in the United States. We have not confirmed where the server itself is located.

How long we keep it

• Sign-in links and codes: 1 day (they stop working after 15 minutes).
• Sessions that keep you signed in: 30 days.
• Visit counts: 13 months.
• Reports and any note you add: 13 months after the editor has dealt with them.
• Backups: 14 days on the server and 30 days off it.
• Resend's email logs: 30 days.
• Sentry error reports: 30 days.
• Server logs, which include IP addresses: a few days, then overwritten.
• Writer data: until you delete your account. Backups made before then clear out within 30 days.

What's stored on your device

• A sign-in cookie (writers only). It keeps you signed in for 30 days. It is strictly necessary for signing in, so it needs no consent.
• Your choices: the services you picked, films you've skipped, seen or watched, and ratings waiting to be sent. This remembers what you chose, so it needs no consent.
• A random device ID, for one guess per device and rigging checks. It prevents cheating, so it needs no consent.
• The same ID, for visit counts. This is for statistics only, and you can switch it off with "Don't count my visits" under "On this device" below.

Your rights

You can ask to see your data, correct it, delete it, restrict or object to how we use it, or take a copy. Email hello@twine.club and we will answer within a month.

Writers can delete their account themselves: use "Delete my account" on the writer page. It removes your email, your name and your drafts. Synopses that are already live stay up under "Former writer", as the writer terms explain. To clear viewer data, use "Clear my data on this device" under "On this device" above, or clear this site's data in your browser.

Complaints

If you are unhappy with how we use your data, please tell us first. You can also complain to the Information Commissioner's Office: ico.org.uk/make-a-complaint, 0303 123 1113.