Privacy Policy

Find Film is operated by Gotham West Studios LLC ("we", "us", "our"). We are responsible for your personal information on Find Film. Under the EU and UK GDPR, that makes us the "controller".

Gotham West Studios LLC
447 Broadway, 2Fl #800
New York, NY 10013
United States

Phone: (212) 500-1890 (from outside the US: +1 212 500 1890)
Email: privacy@findfilm.app
Contact page: findfilm.app/contact

For any question about this policy or your information, use the Contact page, email us at privacy@findfilm.app, call us, or write to us at the address above.

• You can search and browse Find Film without an account. With your permission, we may use analytics (PostHog and Google Analytics) on public pages to understand how Find Film is used and improve it. You can withdraw permission at any time in "Cookie settings". We don't use advertising or advertising trackers, and we don't sell your personal information or share it for advertising.
• If you create an account, we hold your email address and what you choose to do with the account: the stores you save, the facts you confirm or report, and the listings you manage.
• Store listings are public business information. We never publish store email addresses, and we never show who confirmed or reported a fact.
• We may email a business to ask it to confirm its listing. Every one of these emails has a one-click unsubscribe link.
• Find Film runs on Amazon Web Services (AWS) in the United States.

Connection data. When your browser loads a page or data from Find Film, our hosting provider (AWS) receives your IP address, your browser type (user agent), the address of the page you asked for and the page that linked to it. Every website receives this information. It is needed to deliver the site and keep it secure.

AWS Amplify Hosting, which serves our pages, keeps a record of each request: IP address, date and time, the page address, the referring page and the browser type. It keeps these records for as long as Find Film is hosted there. We look at them only to investigate security incidents or technical problems.

Our own database and application logs are built not to hold IP addresses. To stop abuse, such as too many searches or form submissions from one network, we turn your IP address into a keyed code (a cryptographic hash) and count requests against that code. A keyed code is pseudonymous, not anonymous: it doesn't show the address, but the address it came from can be matched to it, so we treat it as personal information. These counters expire after one to two days and are then deleted automatically, usually within a few days. Our application logs record events and errors, and are built to leave out IP addresses, email addresses and what you searched for.

Searches. When you type a place into a search box, the text goes to our server, which asks Amazon Location Service for places that match. We don't store or log the text of these searches. Amazon may pass a search on to its map-data providers to answer it. Amazon says it removes information that identifies its customers before a search reaches them.

Your location, only if you ask. If you choose "Use my location", your browser asks for your permission and then gives the page your device's precise coordinates. When you use them for location-based results, they are used in your browser: we don't send them to our application servers or put them in a page address. The page keeps them in your browser's session storage for 30 minutes, so the results page can use them, and then deletes them (see our Cookie Policy). Maps around your location are loaded from our map provider, which sees the map area being viewed (see "Maps" below). If you allow analytics (below), analytics sees only which listed area's results you are shown (the page's address), never your coordinates or distances from them, though analytics providers may estimate an approximate location from your IP address. If you have already allowed Find Film to use your location in your browser, the Map page opens at your location without asking again. In the "Suggest a store" form, you can also use your location to place the store's pin: the pin you send is sent to us as the store's position (see "Suggesting a store" below). You can withdraw the permission in your browser settings at any time.

Maps. Your browser loads maps directly from Amazon Location Service (maps.geo.us-east-1.amazonaws.com). With each request it sends Amazon your IP address, your browser type, findfilm.app as the referring site, and which map tiles you are viewing, which shows Amazon the approximate area you are looking at. Your browser sends no cookies with these requests.

Listing data. Store listings load from our own data service, on a findfilm.app subdomain. These requests show which areas' listings your browser loaded. Access logging is turned off for this service.

Settings in your browser. Your theme choice and some navigation state are kept in your browser's storage and are not sent to us. See our Cookie Policy.

Analytics and error reports (only if you allow it). With your permission, we may use PostHog and Google Analytics on public pages to understand how Find Film is used and improve it. If you turn on "Analytics" in the cookie banner or in "Cookie settings", our public pages send the information below to these services. Nothing is sent before you allow it, or if you reject it or your browser sends the Global Privacy Control signal. Analytics runs only on public pages: nothing is sent from the contact, store portal or admin pages, or while the sign-in window is open. We don't record sessions. What is sent:

• to PostHog: a random ID for your browser and for each visit (kept in your browser's storage); the pages you view and the site you came from (addresses only, never anything you typed); these actions: choosing a place to search (which listed place it led to), changing the filters or the sort, viewing a store, opening directions, saving a store, confirming or reporting (which kind only) and sending a suggestion; details of errors in our pages; and your browser, device, screen size and language;
• to Google Analytics, if we use it: a random ID for your browser (in its cookies), the pages you view, the site you came from, when you follow a link to another site (such as a store's website or Instagram, or map directions) and that link's address, and your browser and its version, your device (including its model), operating system and its version, screen size and language.

Both receive your IP address with each request, as every web service does: PostHog uses it to estimate your approximate location (country, region and city) and then discards it rather than storing it, and Google Analytics uses it only to estimate your approximate location (country, region and city) and doesn't store it. The random IDs are pseudonymous identifiers: they hold no name or email address, but they are how these services tell your visits apart, so we treat them as personal information. We don't send either service your name, email address or account ID, we don't intentionally connect analytics IDs to accounts, and we have turned off Google signals and Google's advertising features. We use this information to understand how Find Film is used, to improve it, and to find and fix problems. You can turn analytics off at any time in "Cookie settings": it stops at once, in every tab of findfilm.app, and the analytics cookies and storage are deleted from your browser. Turning it off stops future collection; what was already sent is kept as described in section 9. See our Cookie Policy.

Suggesting a store. The "Suggest a store" form doesn't ask for your name or email address. We keep what you enter: the store's name, where it is (if you used your location to place the pin, that position), what it does, its website or Instagram, the store's email address if you know it, and your note. We also keep the keyed code made from your IP address with the suggestion for 90 days, so we can spot duplicates and repeated submissions. Our team reviews suggestions to add stores to the directory. If you give us a store's email address, we may write to the store to confirm its details (see 3.4). Please don't include personal information about yourself or anyone else in the note beyond what is needed to describe the store.

Contacting us. When you send a message through our Contact page, we keep what you enter: your name if you give one, your email address, the topic you choose and your message, with the language of the page and the time. When you email privacy@findfilm.app, or reply to one of our emails to businesses (replies go to stores@findfilm.app), we keep the sender's name and address as the email gives them, its subject and its text, with the time it arrived and our email service's checks of it: whether it looks like spam or carries a virus, and whether the sending domain authenticated it. The message keeps the email's text, not its attachments. The whole email as it arrived is kept in our AWS storage for 30 days and then deleted automatically: its attachments, and its headers, which can include the IP address of the mail server or device it was sent from. An email the checks find to be spam or to carry a virus, or that falsely claims to come from Find Film, goes no further than that storage; every other email reaches our administrators, including one our tools could not read, and an administrator files it under the right topic when reading it. If you contact us by phone or by post, we record your request in the same way, with the day it arrived. We use them only to answer you and to handle what you ask. Our administrators read messages in Find Film's admin tools, which run on AWS, and answer from our company email accounts, so our answers, and anything you send back to them, are also kept by our business email provider (see section 7). You don't need an account. When you use the form, we don't keep your IP address or the keyed code made from it with your message: the form's abuse-prevention counters are the short-lived ones described above.

Security check (Cloudflare Turnstile). To keep automated spam and abuse off our public forms (Suggest a store, Report an issue, Contact), we use Cloudflare Turnstile from Cloudflare, Inc. It loads only when you start using one of these forms, and while that page stays open it renews the check about every five minutes. Cloudflare receives from your browser what it needs to tell people from bots: your IP address, browser and device details (user agent, TLS fingerprint) and the site the check runs on. Our server then sends Cloudflare the check's result token, together with our site's secret key and a one-time reference that reveals nothing about you, to confirm it; it does not send your IP address or what you wrote. Cloudflare states it uses these signals to detect and block bots, not to identify, profile or target anyone; it acts for us when protecting our forms and may also use them, as its own controller, to improve its bot detection. Turnstile is strictly necessary for the forms' security, so it is not one of the cookie choices. Cloudflare may keep its own security cookies for the check on challenges.cloudflare.com; we don't use Turnstile for advertising.

Links to other services. Store pages link to Google Maps, Apple Maps, Instagram and stores' own websites. When you follow one of these links, that service's privacy policy applies. Directions links contain the store's location, never yours.

You sign in with your email address and a one-time code that we email to you. There is no password.

• Your account. Your email address, an account ID, whether the address has been confirmed, when the account was created and last changed, and your account type (member or store owner). The first time a code is requested for an address, we create an account for it. If the code is never entered, the account stays unconfirmed and holds only the address and those dates; we delete unconfirmed accounts once they are more than 30 days old (a daily job deletes them). If you get a code you didn't ask for, someone may have typed your address by mistake. You can ignore the email, or ask us to delete the record sooner.
• Staying signed in. Cookies that keep you signed in and protect sign-in. See our Cookie Policy.
• Accepting our Terms. To sign in, you check a box to accept our Terms of Service. Once the code you enter confirms your email address, and in any case before you can save or remove stores, confirm or report facts, or manage a listing, we record that you accepted them: your account ID, which version of the Terms (and a fingerprint of its text), the language, where on the site you accepted, how you were signed in, and when. If our Terms change in a way that needs your agreement, we ask you again and record that too. We don't record your IP address or device for this.
• Saved stores. The stores you save, so they appear on each device you sign in on. A copy is kept in your browser and deleted when you sign out.
• Confirmations and reports. When you confirm a fact, or report that something is wrong, closed or new, we record it with your account ID, the store, the fact, your note if you write one, and the time. Our team reviews reports. Public pages show only that a user confirmed a fact and when, never who.

We use this information to provide the features you use your account for, to keep the directory accurate, and to prevent abuse. For example, reports from accounts less than 14 days old don't count toward disputing a fact. This rule has no legal or similarly significant effect on you.

If you claim a store's listing, we also keep:

• Your claim. The store, when you asked, how your claim was checked, and our decision. If the email address you sign in with matches the store's email address on file and you signed in recently, your claim can be approved automatically. Otherwise our team reviews it. Our team can see your sign-in email address when managing a store's owners.
• What you submit. Edits to your listing, change requests (which may include a new store email address) and requests to add film stocks, each with your account ID and the time.
• Your authority. To claim a listing, you check a box confirming that you own the business or are authorized to manage its listing, and that you accept our Terms for your submission. We record that you did (your account ID, the Terms version, the language and the time).

What you publish on your listing is public (see section 4).

Where store contact details come from. We build listings from information businesses publish about themselves (for example on their websites and social media), from map and place-data services (Amazon Location Service and OpenStreetMap), from suggestions by members of the public, and from the businesses themselves. A store's email address can belong to a person, for example the owner of a one-person shop.

What we keep. The store's email address and where it came from. Earlier email addresses and phone numbers, in the listing's change history (earlier email addresses are deleted 12 months after they were replaced). For each email we send: the address, the date, a code that lets us recognize the link in the email (stored in a form that can't be turned back into the link), when the link was first opened, when the store answered, and any delivery problem (a bounce or a spam complaint). Replies to our emails go to stores@findfilm.app and arrive in Find Film's admin tools, on AWS, like any email to us (see 3.1).

Why we email. To ask the business to confirm or correct its listing, so that people get accurate information. We limit how often we email the same address and don't send reminders. We only email addresses that our team has added or checked; an address that came only from an anonymous suggestion is not emailed until our team has checked it. We email businesses only in countries whose email rules we have reviewed. These emails are separate from the emails you need for an account, such as sign-in codes.

Each email names Find Film and Gotham West Studios LLC, gives our postal address and a way to contact us, links to this policy, and has a one-click unsubscribe link. Our emails contain no tracking images. The personal "Check your listing" link is the only link that records anything: when it is opened and the page loads, we record the time it was first opened. Some email security services open links automatically, so this time can be recorded even if nobody at the store opened it, and we don't treat an opened link as an answer or as permission.

The link lets you confirm or edit the listing without an account. While you use it, it is kept in your browser tab, and it is removed when you finish. The page sends the link's code to our server to check the link and save your answer. Before your answer is saved, you check a box confirming that you own the business or are authorized to manage its listing, and that you accept our Terms for your submission; we record that with the link's record (the Terms version, the language and the time, but no name or IP address).

How to stop these emails. Use the unsubscribe link in any of them, which takes effect at once, or contact us (on the Contact page, choose "Stop emails about my store"), and we stop emailing the address within 10 business days, usually much sooner. We keep the address on a do-not-email list for as long as we might otherwise email it, even if you later ask us to delete your information, because that list is how we make sure we don't email it again. It holds only what that needs: the address, and when and why it was added. Only our administrators can see it. Addresses that bounce or complain are added to the same list.

Each email follows the email rules of the country it is sent to, for example the CAN-SPAM Act in the United States and, for businesses in Japan, the Act on Regulation of Transmission of Specified Electronic Mail: each shows our name, address and contact details and how to stop receiving them.

If you are one of our administrators, we keep your sign-in email address, your account ID and a record of the changes you make, for security and audit. When you connect an AI assistant to Find Film's admin tools, we also keep the connection's details for up to 30 days after it was last used or revoked.

Our administrators may use AI assistants (Anthropic's Claude or OpenAI's ChatGPT) through a secured connection to help review suggestions and maintain listings. Through it, the assistant can see listing details, including a store's email address, and the text of suggestions and reports. It does not receive members' email addresses or account IDs, or messages sent to us.

Our administrators read messages to us (through the Contact page, or by email to privacy@findfilm.app or stores@findfilm.app) in Find Film's admin tools, on AWS, and answer them from our company email accounts, which our business email provider hosts.

To draw the preview images shown when a Find Film page is shared on social media, our server downloads fonts from Google Fonts. These requests contain only the public text drawn on the image, such as a store's name, and nothing about you. Your browser never contacts Google Fonts.

Store listings are public: the store's name, address, position on the map, opening hours, phone number, website and Instagram, what the store does and which films and services it offers, and when each fact was last confirmed and whether by the store, by Find Film or by a user. We publish this as business information.

We never publish store email addresses, members' email addresses, or who confirmed or reported a fact.

If you are in the European Economic Area, the United Kingdom or Switzerland, the law requires us to tell you the legal basis for each use of your information.

Where we rely on legitimate interests, you can object (see section 10).

We use the cookies and browser storage that the site needs to work, or that a feature you use needs: signing in, security, and remembering your settings. Analytics cookies and storage (see 3.1) are set only if you turn analytics on in the cookie banner or in "Cookie settings", and are deleted from your browser when you turn it off. The security check on our public forms (Cloudflare Turnstile, see 3.1) is strictly necessary and is not one of the choices. We don't use advertising cookies. Our Cookie Policy lists each one with its purpose and how long it lasts, and what your browser sends to other companies.

We don't sell, rent or share personal information for advertising. We share it only:

• With service providers who handle it for us under contract.
  • Amazon Web Services, Inc. (AWS): hosting and delivery of the site, databases, sign-in (Amazon Cognito), sending and receiving email (Amazon SES), maps and place search (Amazon Location Service), logs and security monitoring, and background tasks. Our data is stored in AWS's US East (N. Virginia) region, in the United States.
  • Our business email provider, which hosts the company email accounts our administrators answer messages from, where answers to them come back. It holds those emails, including the sender's address and whatever they contain.
  • Anthropic, PBC and OpenAI, the providers of the AI assistants our administrators use, as described in 3.6. We use them only under their business or API terms, which include data processing terms and don't allow them to train their models on our data.
  • PostHog, Inc.: analytics and error reports, only if you allow analytics (see 3.1). Our project is on PostHog's US cloud, and PostHog handles the information for us as our service provider.
  • Google LLC, if we use Google Analytics: counting visits and page views, only if you allow analytics (see 3.1). We use it under Google's data processing terms, with Google signals, advertising features and data sharing with other Google products turned off.
  • Cloudflare, Inc.: the security check on our public forms (see 3.1). It acts for us when protecting our forms, and may also use what it receives, as its own controller, to improve its bot detection.
• With the public, for listing information (see section 4).
• When the law requires it, or when needed to protect the rights, property or safety of our users, the public or us.
• With a new owner if Find Film or our business is reorganized, sold or transferred. The new owner must keep to this policy.

We are based in the United States and our systems are there. If you use Find Film from another country, your information is handled in the United States, where privacy laws may differ from those where you live. The service providers in section 7 handle it in the United States too. Our contracts with them require them to protect personal information. Where the law requires a transfer safeguard, we rely on the one it provides for, such as the European Commission's Standard Contractual Clauses (with the UK Addendum), which are part of our service providers' data processing terms (for AWS, its Data Processing Addendum; for Google Analytics, Google's data processing terms). Google may also handle analytics data in its data centers in other countries, and Cloudflare may run the security check on our forms in its data centers outside the United States. Contact us for more information.

Depending on where you live, you may have the right to:

• access your personal information and get a copy of it;
• correct information that is wrong, including your sign-in email address (contact us to change it);
• delete your information;
• object to our use of your information based on legitimate interests, including emails to your business, which you can stop at any time;
• restrict our use of your information while a concern is being resolved;
• receive the information you gave us under our contract with you in a machine-readable format (portability);
• withdraw consent at any time, where we rely on it. You can turn analytics off in "Cookie settings", at the bottom of every page, and withdraw location permission in your browser settings.

We don't make decisions about you based solely on automated processing that have legal or similarly significant effects.

How to make a request. To request access, correction, export or deletion, or to object or ask us to restrict our use, contact us through the Contact page (choose "Privacy request"), by email to privacy@findfilm.app, by phone or by post. You don't need an account. We need to confirm that the request comes from you, in a way that fits the request: usually we ask you to confirm by email from the address concerned (your account's sign-in address, or the store's address). We don't ask for identity documents unless we have no other way to confirm it. You can use an authorized agent, as section 11 describes.

We answer within one month of receiving your request, or sooner if the law that applies to you requires it. Where that law allows us more time (for example, for a complex request), we will tell you within the first month how long we need and why. Requests are free, unless they are clearly unfounded or excessive. If we decline a request, we will tell you why and how to ask us to reconsider: reply to our answer. Where the law where you live gives you a right to appeal, that reply is your appeal, and we answer it within the time that law sets.

Analytics data. Analytics data (see 3.1) isn't linked to your name, email address or account: we can find it only with the random ID analytics keeps in your browser. While analytics is on, "Cookie settings" shows that ID with a Copy button. Turning analytics off deletes the ID from your browser, so copy it first if you want us to find or delete what was sent, and send it with your request. Turning analytics off never depends on this. Without the ID, we can't find the data, and it is deleted at the end of the period in section 9.

What deletion means. We delete your account, your saved stores, your links to any store you manage, and your messages to us and our emails with you, except the record of your request (section 9). Emails as they arrived at privacy@findfilm.app and stores@findfilm.app are deleted from our AWS storage 30 days after they arrived in any case. Your confirmations and reports stay in listing histories with your account ID removed. A note you wrote can still say something about you, so tell us if you want your notes deleted too, and we will delete them. If your address is a store's email address, we remove it from the listing and from our email records, and add it to the do-not-email list, which deletion doesn't remove, so that we don't email it again. We keep what the law requires or allows us to keep, such as the record of your request and the records of your acceptance of our Terms (section 9). Deleted information can remain in backups for up to 14 days, and in the records our hosting provider and AWS keep (section 9).

Complaints. You can complain to us first. You also have the right to complain to a data protection authority, for example the authority where you live in the EEA, the UK Information Commissioner's Office, or Japan's Personal Information Protection Commission.

This section applies to California residents to the extent the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA), applies to us.

What we collected in the last 12 months:

We collect this information for the purposes described in section 3 and keep it as described in section 9. We don't use or disclose sensitive personal information for any purpose that would give you the right to limit it.

We don't sell or share personal information, as the CCPA defines those terms, and we haven't done so in the last 12 months. Our analytics providers act as our service providers: we have turned off Google signals and Google's advertising features, so analytics data isn't used for cross-context behavioral advertising. We treat the Global Privacy Control signal as a choice to keep analytics off. We don't knowingly sell or share the personal information of anyone under 16.

Your rights. You can ask us to tell you what personal information we collected about you, how we used it and whom we disclosed it to; to delete it; and to correct it. Make a request as described in section 10 (by email to privacy@findfilm.app, the Contact page, phone or post). We will verify it by confirming control of the email address concerned. You can use an authorized agent, who must show your signed permission, and we may still ask you to confirm your identity directly. We answer within 45 days, and normally within the month in section 10. If we need the CCPA's one extension of another 45 days, we will tell you why within the first 45 days. We won't discriminate against you for using these rights.

This section sets out the information the Act on the Protection of Personal Information (APPI) requires us to make available.

• Business operator: Gotham West Studios LLC, 447 Broadway, 2Fl #800, New York, NY 10013, United States. The name of our representative is available on request through the Contact page.
• Purposes of use: (1) providing Find Film and its features (search, maps, accounts, saved stores, confirmations and reports, tools for store owners); (2) building the directory and keeping it accurate, including emailing businesses to confirm their listings; (3) keeping Find Film secure and preventing abuse; (4) responding to inquiries and requests; (5) complying with the law; (6) understanding how Find Film is used, to improve it and fix problems (analytics, only if you allow it).
• Provision to third parties: We don't provide personal data to third parties without your consent, except where the law allows. We entrust the handling of personal data to service providers to run Find Film: AWS (hosting, databases, sign-in, sending and receiving email, maps and place search, logs, security monitoring); our business email provider (the company email accounts we answer messages from); Anthropic, PBC and OpenAI (the AI assistants our administrators use, which see listing details, including a store's email address, and the text of suggestions and reports); and, only if you allow analytics, PostHog, Inc. (analytics and error reports) and, if we use it, Google LLC (Google Analytics). Store listings are published as business information (section 4).
• Handling in a foreign country: Personal data is stored and handled in the United States, by AWS, which operates our systems for us, by our business email provider, by Anthropic and OpenAI, and, for analytics, by PostHog and Google. The United States has no comprehensive federal law on personal information; there are federal laws for specific sectors and state laws such as the CCPA. Our contracts with them (for AWS, its Data Processing Addendum; for the others, their business or API terms) require them to protect personal data appropriately, and Anthropic and OpenAI may not use it to train their models.
• Information sent to other companies (Telecommunications Business Act): what your browser sends to other companies, to whom and why, is listed in section 7 of our Cookie Policy.
• Security measures: Within Gotham West Studios LLC, access to personal data is limited to authorized personnel who need it for their work and who must sign in; service providers handle it as described above. Data is encrypted in transit (HTTPS) and our database is encrypted at rest. Sign-in uses one-time codes sent by email, not passwords. Our database and application logs hold IP addresses only as keyed codes (our hosting provider's request records hold them in full, and the headers of an email sent to us can hold one for 30 days, see section 9). We choose our service providers carefully and bind them by contract. We apply these measures knowing that the data is handled in the United States (see above).
• Your requests: You can ask us to notify you of the purposes of use, or to disclose, correct, add to, delete, stop using, erase or stop providing to third parties your personal data, and to disclose records of any provision to third parties. Use the Contact page, email privacy@findfilm.app, or call or write to us. There is no fee. We confirm your identity as described in section 10.
• Inquiries and complaints: Contact page, email privacy@findfilm.app, phone or post (section 1).

Find Film is not directed to children under 16, and you must be 16 or older to create an account. If we learn that an account belongs to a child under 16, we will delete it. Parents or guardians can contact us.

Within Gotham West Studios LLC, access to personal information is limited to authorized personnel who need it for their work. Service providers process information as described in this policy. We use technical and organizational safeguards appropriate to the information and the service, including these:

• the site uses HTTPS, and our database is encrypted at rest;
• sign-in uses one-time codes that we email to you, not passwords. Anyone who can read your email can sign in as you, so keep your email account secure. Sign-in cookies can't be read by page scripts;
• our database and application logs hold IP addresses only as keyed codes; our hosting provider's request records hold full IP addresses, and so can the headers of an email sent to us, which our AWS storage keeps for 30 days (see 3.1 and section 9);
• the code in the "Check your listing" link we email to a business is kept in a part of the address that browsers don't send to servers, and the page removes it from the address bar as soon as it loads. The unsubscribe link's code is part of the address, so it appears in our hosting provider's request records; it can only unsubscribe.

No system can guarantee complete security. If a security incident affects your information, we will tell you and the authorities when the law requires it.

We will post any change on this page and update the effective date. If a change significantly affects how we use your information, we will tell you before it takes effect, for example with a notice on the site.

Gotham West Studios LLC, 447 Broadway, 2Fl #800, New York, NY 10013, United States
Phone: (212) 500-1890 (+1 212 500 1890)
Email: privacy@findfilm.app
findfilm.app/contact