Privacy Policy

Effective August 10, 2026

TOthemovies (“we”, “us”) operates the TOthemovies website and mobile apps — a listings service for independent and repertory cinema in Toronto. This policy explains what personal information we collect, why, who we share it with, and the choices you have. We run no advertising and we do not track you across other apps or websites.

Who is responsible

TOthemovies is the operator responsible for the personal information described here. For any privacy question or request, contact us at:

privacy@tothemovies.ca

TOthemovies · 612 Bathurst Street, Toronto, ON M5S 2R1, Canada

What we collect

• Account. If you create a profile: your chosen username, an email address, and a securely hashed password. If you sign in with Google or Apple instead, we receive the account identifier and email information that provider makes available — never your Google or Apple password.
• Profile content. Anything you add to build your page: an optional profile photo and bio, the screenings you log (“stubs”), the films you mark as want-to-see, and your follows and likes.
• Film alerts (optional). If you ask to be notified about a film, we store the film, which theatres should trigger it, and the email or signed-in account that should receive it.
• Push notifications (optional). If you enable app notifications, we store the device token Apple gives the app, link it to your signed-in account, and store your notification category choices. The token is used only to deliver the notifications you enable; it is not an advertising identifier and is not used for analytics or cross-app tracking.
• Website usage analytics. First-party, cookieless analytics such as pages and features used, approximate country, and general browser/device type. A fresh random identifier is made for each page load; we do not use it to follow you across visits or other sites.
• Mobile app usage analytics. By using this service you agree to share anonymized usage data analytics such as page views, searches, filters, alerts/wants-to-see/stub use, and session elapsed time. A fresh random session identifier is created in memory on every app launch. These events do not include your account, sign-in cookie, IP address, location, user-agent, advertising identifier, or a stable device identifier, and are not joined to your profile.
• Sign-in cookie. If you log in on the website, we set one strictly-necessary cookie to keep you signed in; it is cleared when you sign out. We store one small flag in your browser to remember you have seen our privacy notice. We set no advertising or cross-site cookies.

How we use it

We use your information only to run the service: to create and secure your account, build and display your profile, send the emails and push notifications you have asked for, and understand aggregate usage so we can improve the app. We do not sell your personal information, and we do not use it for advertising, profiling, or tracking across apps or websites.

Who we share it with

We use a small number of service providers to operate. They process data on our behalf and only as needed to provide their service:

• Cloudflare — hosting and database infrastructure. Account, profile, alert, and first-party analytics data are stored here.
• Google — if you choose “Sign in with Google”, authentication is handled by Google. See Google’s privacy policy.
• Apple — if you choose “Sign in with Apple”, authentication is handled by Apple. See Apple’s privacy policy. Apple Push Notification service also delivers app notifications when you enable them.
• Resend — delivers our transactional and alert emails. See Resend’s privacy policy.
• TheTVDB — serves film metadata, posters and imagery. As with any image load, your IP address is visible to TheTVDB. This product uses the TheTVDB API but is not endorsed or certified by TheTVDB.
• YouTube / Google — film trailers are embedded in privacy-enhanced mode (youtube-nocookie.com) and load only when you open a trailer.

We may also disclose information if required by law, or to protect the rights, safety, or security of our users or the service.

How long we keep it

We keep your account and profile information for as long as your account exists. When you delete your account — from Settings on the website or in the app — your profile, stubs, want-to-see list, follows, likes, notifications, alerts, and active sessions are permanently removed. Film alerts are removed when you use the one-click cancel in any alert email. Sign-in sessions expire automatically.

Detailed mobile app analytics sessions, including search terms, are deleted after 30 days. We may keep longer-term daily totals by event type (for example, the number of film pages opened), but those totals contain no session identifier, search term, film title, filter, account, or device information.

Your choices and rights

Under Canadian privacy law (PIPEDA) you may:

• Access the personal information we hold about you;
• Correct it — you can edit your email, bio, photo, stubs and alerts directly in the app;
• Delete your account and associated data at any time from Settings;
• Withdraw consent for optional emails using the unsubscribe link, or by turning off notification categories in Settings.

To make an access or correction request that you cannot complete in the app, email privacy@tothemovies.ca and we will respond within a reasonable time.

Children

TOthemovies is not directed to children under 13, and we do not knowingly collect their personal information.

Changes

We may update this policy as the service evolves. Material changes will be reflected here with a new effective date.

← Back to TOthemovies