Privacy Policy

Who operates Remixflix

Remixflix is an independent, early-stage project — not yet a registered company. For the purposes of data protection law, the data controller is Francesco Carastiglia, reachable at legal@remixflix.com. This will be updated with a formal legal entity if and when one is incorporated.

What we collect

• Account: your email address and password (handled by our authentication provider, Supabase — we never see your password)
• Profile: username, display name, bio, avatar — all optional except username
• Content you create: submitted video cards, prompts, workflows, tags, likes, saves, collections, reports
• A session cookie that keeps you logged in

We do not collect payment information — there is no payment feature yet.

Legal basis and how long we keep it

• Account, profile, and content you publish: processed to perform the contract you enter into by signing up — kept until you delete your account, and cards you leave public stay up until you separately ask us to remove them too (see "Your rights" below)
• Reports and moderation records: processed under our legitimate interest in keeping the site safe and resolving disputes — kept for as long as needed to handle the report, generally no more than 12 months after it's closed
• Rate-limiting records (used to prevent abuse of features like likes and comments): automatically deleted after about 7 days
• Analytics: processed only with your consent — see "Analytics" below

Analytics

We use Google Analytics to understand how the site is used (pages visited, rough traffic volume). It only runs if you accept the cookie banner shown on your first visit — declining, or never answering, means no analytics cookie is ever set. You can change your choice at any time by clearing your browser's local storage for this site. Google processes this data under its own privacy policy; where this involves transferring data outside the EU, Google relies on the European Commission's Standard Contractual Clauses or an equivalent safeguard.

What we use it for

Running the service: authenticating you, showing your public profile and the cards you publish, letting you save/collect videos privately, and reviewing reports if content you submitted (or content you reported) needs moderation.

What's public vs. private

• Public: your username, display name, avatar, bio, and any card you publish
• Public: likes (needed to show like counts)
• Private: your saved videos and your collections, unless you choose to make a collection non-private

Third-party embeds

When you watch a video on a card, the player is loaded directly from its source (YouTube, Vimeo, or TikTok). YouTube is loaded in privacy-enhanced mode (youtube-nocookie.com), which limits cookies set before you interact with the player. Vimeo and TikTok players load immediately when you open a card and may set their own cookies or collect data right away, according to their own privacy policies — we don't control or receive that data.

Where data lives

Our database and authentication run on Supabase, whose primary infrastructure for this project is hosted in the EU (Ireland); thumbnail images are stored there too. Supabase acts as our data processor under a data processing agreement that includes EU Standard Contractual Clauses — some of Supabase's own subprocessors may be located outside the EU/EEA, under those same contractual safeguards.

Your rights

You can ask us to access, correct, or delete your account and the personal data attached to it, or to receive the personal data you've given us in a structured, commonly-used format (portability). We don't yet have a self-service delete-account button — at this early stage, email legal@remixflix.com and we'll handle it by hand, promptly. Note that deleting your account removes your profile and private data, but cards you published stay up (with the author shown as removed) unless you ask us to take them down too — this keeps other people's remixes and the derivation graph intact.

If you're not satisfied with how we handle your data, you also have the right to lodge a complaint with a data protection authority — in Italy, the Garante per la protezione dei dati personali.

Changes

We'll update the date at the top of this page whenever this policy changes.

Contact

Questions about this policy or your data: legal@remixflix.com