Privacy Policy
Effective April 25, 2026
Who we are
IMAX Tracker is operated by Conor Stripling. This policy describes what personal data we collect, how we use it, and the choices you have. Contact: drop70mm@gmail.com.
What we collect
- Account data. Your email address, display name, and an authentication identifier from our auth provider.
- Preferences. The movies you track, venues you follow, day-of-week and time-window filters, and seat preferences.
- Notification channels. Browser push subscription tokens and any ntfy topic you configure, used to deliver alerts.
- Billing data. If you subscribe to a paid plan, Stripe processes your payment and shares limited metadata (customer ID, subscription status, period dates) with us. We never see or store your card details.
- Operational logs. Server logs, error reports, and anonymous usage analytics (via Vercel Analytics) used to keep the Service running and to diagnose problems.
How we use it
- to authenticate you and provide the Service;
- to send the notifications you ask us to send;
- to process subscriptions and handle billing disputes;
- to secure the Service, prevent abuse, and debug issues;
- to comply with legal obligations.
We do not sell your personal data, and we do not use it for advertising.
Service providers
We share data with a small number of vendors who process it on our behalf:
- Supabase — database, authentication.
- Vercel — application hosting, analytics.
- Stripe — payment processing.
- Web Push / ntfy.sh — notification delivery.
- TMDB — movie metadata and poster artwork (you are not sent to TMDB; we fetch on your behalf).
Showtime sources
Showtime and seat-availability data is collected from publicly accessible pages of third-party cinema websites. We do not receive information about you from those sites, and we do not share your identity with them when we fetch data.
Retention
We keep your account data while your account is active. When you ask us to delete your account we remove your profile, preferences, and notification subscriptions promptly (within 30 days, and usually within a few days). Billing records may be retained as long as required for tax and accounting purposes. Server logs are retained for a short rolling window (typically 30 days).
Your choices
- Access or correct. Most of your data is visible and editable from the settings page.
- Delete your account. Email drop70mm@gmail.com from the address on your account and we will delete your profile, preferences, and notification subscriptions. We confirm by reply and complete the deletion within 30 days (usually much sooner).
- Turn off notifications. You can disable push or ntfy notifications in settings, or from your browser/operating system.
GDPR, UK GDPR, and CCPA rights
Residents of the EEA, UK, and California (and other jurisdictions with comparable laws) have rights to:
- Access a copy of the personal data we hold about you;
- Correct data that is inaccurate or incomplete;
- Deleteyour data (“right to be forgotten”);
- Port your data — receive it in a machine-readable format;
- Object to or restrict certain processing;
- Withdraw consent at any time where processing is based on consent;
- Lodge a complaint with your local data protection authority (for EEA/UK residents) or the California Attorney General.
To exercise any of these rights, email drop70mm@gmail.com from the address on your account, or include enough information for us to verify your identity. We respond within 30 days. We will not discriminate against you for exercising any of these rights. We do not sell or share personal data for cross-context behavioral advertising.
Children
The Service is not directed to children under 13 and we do not knowingly collect personal data from them. If you believe a child has provided us data, contact us and we will delete it.
Security
We take reasonable technical and organizational measures to protect your data, including encryption in transit, scoped database access, and limited administrative access. No system is perfectly secure, so we cannot guarantee absolute security.
Changes
We may update this policy from time to time. Material changes will be reflected in the effective date above and, where appropriate, communicated in-app or by email.
Contact
Questions or requests? Email drop70mm@gmail.com.