Frame25 (frametwentyfive.com) is a place for audiences to talk about movies and shows. This page explains what we collect, why, and who handles it. Questions or requests: support@frametwentyfive.com.
What we collect
- Your account: your email address (or the email on the Google account you sign in with), and the profile you set up: an auto-generated username, a display name, and an optional avatar and bio.
- Your birth year: used only to apply our 18+ rule for posting and commenting. It is stored, but never shown on your profile or to other users.
- What you post: posts, images, poll votes, comments, likes, saved posts, ratings and reviews.
- If you rate or comment without an account: the theatre, show time, rating and review, or the name (and optional email) you type. A random device ID cookie lets us allow one rating per post per browser, and a hashed (not raw) form of your IP address is used only to limit spam.
- Basic technical data: sign-in session cookies, your light/dark theme choice, and short-lived browser storage that stops us counting the same view twice. We count post views and impressions in aggregate.
How we use it
- To run the service: sign you in, show your posts, and keep counts and trending accurate.
- To apply our age rule and keep the community safe and on topic, including automated checks on posts and images.
- To prevent spam and abuse, including rate limits.
We do not sell your personal data.
What is public
Your username, display name, avatar, bio, badge, posts and comments are visible to others, and individual post links can be opened by anyone. Your email address and birth year are not public.
Who handles data for us
- Supabase — database, sign-in and file storage (hosted in India, Mumbai region).
- Vercel — website hosting.
- Resend — sends the sign-in code emails.
- Upstash — short-lived counters for rate limiting and view counts.
- Google — “Sign in with Google”, and Google Cloud Vision, which scans images you upload for unsafe content before they are shown.
- Cloudflare — domain name (DNS) service.
Our article pages (not the Audience Voice feed or profiles) may show ads from Google AdSense. Google and its partners may use cookies to show and measure ads and to personalise them; you can manage this in Google's ad settings. Where required, we ask for your consent first. Ticket links may be affiliate links.
Age
Posting and commenting are limited to people 18 and over. Younger users can browse and react (likes, saves, poll votes) but cannot post or comment. We ask for your birth year only to apply this rule.
Keeping and deleting your data
We keep your data while your account exists. You can edit your profile at any time, and you can delete your account yourself from Edit profile → Delete my account, which permanently removes your profile, photo, posts and their images, comments, likes and votes. To ask what we hold about you, or if you can't sign in, email support@frametwentyfive.com from the address you signed up with. Ratings left without an account are not tied to an identity and may be kept.
Changes
If we change this policy in a meaningful way we will update the date above.