Privacy Policy

What we collect

• Account details: your name, email address, profile picture and a securely hashed password (never the password itself). If you sign in with Google we receive your name, email and profile picture from Google.
• Your activity on TunisiaFlicks: favorites, bookmarks, watch history, lists, profiles, followed titles and notification preferences.
• If you turn on notifications: the address your browser gives us to deliver them (a push subscription), your language and which notifications you chose. Turning them off deletes it.
• Your interface language (English, French, Arabic or Tunisian): kept in a cookie on this device and, when you are signed in, with your account and your notification subscriptions, so that emails and notifications reach you in it.
• Technical data: your IP address is used briefly to protect logins and forms against abuse (rate limiting) and is not kept for longer than a day.
• Cookies: a session cookie to keep you signed in, and small preference cookies for your language and active profile. We do not use advertising cookies.
• Analytics: anonymous, cookie-free page statistics (Vercel Web Analytics) to see which pages are used.

How we use it

• To provide your account features (sync, recommendations, alerts, your yearly recap).
• To send the emails you ask for: password resets, email verification and release alerts.
• To show anonymous site-wide trends ("Trending on TunisiaFlicks"): only counts of how many accounts watched a title, and only once several different accounts have.
• To keep the service secure and fix problems.

Who we share it with

We do not sell or rent your data. It is processed only by the providers that run the service: hosting (Vercel), database (MongoDB Atlas) and email delivery, and, only for what each feature below describes, AI search (Groq, only the words you type in Ask), soundtracks (Deezer) and support payments (Ko-fi). When you press play, the video player you chose is a third-party service with its own privacy policy, as are YouTube videos.

Friends and ratings

Friends, ratings and your page are off until you turn them on. A profile can create a page with a handle and choose who sees its activity and ratings: only you, or your friends (ratings can also be shown to anyone with your link).

Friends see what you watched with a delay, and only from the moment you turned sharing on. A note sent with a recommendation is limited to 140 characters; there is no chat. A block covers the whole account. Deleting a page or an account removes its friendships, invites, ratings and notifications. Kids profiles never have a page.

E-mails

The weekly digest is opt-in, per profile, and goes to your account’s confirmed address. It has no tracking pixels and no tracked links, and every e-mail can be unsubscribed from in one click. We keep a record of each delivery for 120 days. Release-alert e-mails have their own switch for the whole account in Settings.

Interface language

We remember your interface language (English, French, Arabic or Tunisian) in a cookie, and in your account when you are signed in, so the site opens in your language.

Shared lists

You choose who can see each list: only you (or the people in it), your friends, or anyone with the link. Lists made before this choice existed stay visible to anyone with their link. People you invite to build a list see your name and photo next to the titles you add, and the list’s recent changes. Invitation links work for 30 days and for up to 8 people, and you can turn them off.

If you delete your account, a list others build with you goes to the person who has been in it longest; your other lists are deleted, and your name is taken off lists you helped build.

Movie nights

Only the people invited to a movie night see its name, place and note. Someone holding its link sees only the date, the host’s first name and the posters; when a place or a note is set, the host approves anyone joining through the link. Votes are visible to the night’s members, and a swipe room linked to a night shows the night’s name only to them. The calendar file is served only to the host and to the guests who are going. Nights are deleted 14 days after they end.

Badges and streak

Badges and streak keeps, per profile, a private daily log of the days you pressed play: which titles were played that day and, for grown-up profiles only, whether it was at night (00:00–04:59) or early (05:00–08:59). No times are stored. Your browser’s time zone is used only to choose the day and is never stored. The log is kept for 13 months, and turning Badges and streak off in Settings deletes it. Others never see the night and early badges, or whether you played this week.

Supporting us

Coffees are paid on Ko-fi, never on this site. To match a coffee to an account we keep only a keyed hash of the payer’s e-mail address, the Ko-fi transaction id, the TF- code if one was written in the message, and the date, for 400 days. Never the e-mail address itself, a name, an amount or the message. A supporter’s name appears on the support page only if they choose so.

Ask (AI search)

When you use Ask, the words you type are sent to Groq, which runs the AI model that turns them into a search; e-mail addresses, links and phone numbers are removed first. Nothing else is sent: not your account, your profile, your IP address or what you watch. We keep what a request meant, filed under a one-way fingerprint of the words rather than the words themselves, for up to 14 days so the same question is answered faster, and daily counts with no text for 90 days.

Visitors who are not signed in get a random first-party cookie (tf-gid, one year) used only for fair-use limits. Ask is not offered on Kids profiles or in TV mode.

Videos, Tunisian TV and soundtracks

Trailers, extras and the Tunisian channels’ videos come from YouTube. Their pictures reach you through our server, so YouTube is only contacted when you press play; the video then plays from YouTube (youtube-nocookie.com), under its own privacy policy. Soundtracks come from Deezer: we keep which album matches a title, never anything about you, and a track preview plays from Deezer only when you press it. A report that an album is wrong is counted once per network address, without storing that address.

The apps

The Android apps are downloaded from GitHub, which hosts the files; this site only links to them. The phone app shows the site in Chrome and the TV app in Android's WebView: they add no tracking and collect nothing of their own, and the site behaves in them exactly as in a browser. On an iPhone, an iPad or a computer, installing the site keeps it on your device like any website.

TVs signed in from a phone

To sign a TV in, you approve the code it shows from your phone. A TV session is tied to one profile and cannot change your e-mail address, password, profiles or page. You see every signed-in TV in Settings, with its device type and when it was last used, and can sign it out there; it is signed out within 5 minutes. Pairing codes expire after 10 minutes.

Your choices and rights

• Export: download a copy of your data from your profile page.
• Correct: change your name, email and avatar from your profile page.
• Delete: delete your account and all its data from your profile page. Deletion is permanent.
• Questions or requests can also be sent through the contact page.

Children

Accounts are meant for people aged 13 and over. Parents can create Kids profiles, which only show titles rated for children.

Changes

If this policy changes, the date at the top of this page will change too. Significant changes will be announced on the site.