Privacy Policy
Version 2026-09-17
Flaggy Shore is a place to make films, not a place to harvest data. This page explains, in plain language, what we keep about you, why, who can see it, and how to get it changed or deleted.
The short version
- We don't sell your data, and we don't show ads.
- We don't use Google Analytics or any other tracking that follows you around the web.
- We use one cookie, to keep you logged in.
- We do store the things you give us (your profile, your films, your posts) because the site can't work without them.
- You can download your data or delete your account at any time.
Who we are
Flaggy Shore is run by [DATA CONTROLLER: legal name of person or company], [address], Ireland. We are the "data controller" for your personal data under the EU General Data Protection Regulation (GDPR). Contact us about anything on this page at [privacy@flaggyshore.com].
What we collect, and why
When you sign up The name you work under, your email address, your country, and a password (stored only as a secure hash, never as plain text). You also confirm you're 18 or over and accept our Terms. Why: to create and secure your account. Legal basis: our contract with you.
Your profile Your town or area, how far you'll travel, languages, roles, skills, kit, and anything else you choose to add, such as a photo or a bio. All of this is optional beyond what you need to join a round or answer a crew call. Why: so other members can find you and you can find them. Legal basis: our contract with you.
Your legal name Only if you sign something on the site, like a release or crew agreement. Why: those documents need it. Legal basis: our contract with you.
What you make and say Films and stills you upload, round entries, crew calls, credits, ledger entries, forum posts, messages and feedback. Why: this is the site. Legal basis: our contract with you.
Security logs When you log in we record your IP address, browser type and the time. Our servers also keep standard technical logs. Why: to spot break-ins, abuse and bugs. Legal basis: our legitimate interest in keeping the site and your account safe. Security logs are deleted after [90 days].
Payments If you become a Supporter, payments are handled by Mollie. We never see or store your card number; we keep a record that you paid, how much, and when. Why: to run your membership and meet tax law. Legal basis: contract and legal obligation.
We don't collect sensitive personal data (such as health, religion or politics) and we ask you not to put it in your profile.
What other members see
Other members can see: your name, photo, roles, skills, kit, town or area, the films you've made and crewed on, your credits, your ledger totals, and your posts.
Nobody but us sees: your email address, legal name, exact location, password, payment details or security logs.
The public (people not logged in) can see: [only what you choose to make public / films you mark as public / nothing]. Search engines can only index pages that are public.
Private messages are only visible to the people in the conversation. Like most sites, our administrators can access them when needed to investigate a report of abuse or a legal request.
- Always: account email you can't turn off, such as confirming your address, password resets, and messages about something you're taking part in (a crew call you answered, a film you're credited on).
- Only if you opt in: round briefs, screening dates and site news.
- One weekly digest if you want it. We don't send an email for every reply.
Every optional email has a one-click unsubscribe link.
Cookies
We set one cookie, which keeps you logged in and protects forms against forgery. It's strictly necessary, so we don't need to ask for consent, and it holds nothing about you except a session reference. There are no advertising, analytics or third-party tracking cookies. [If you add privacy-friendly, cookie-free statistics later, describe them here.]
Who we share data with
We only share personal data with companies that help us run the site, under contracts that require them to protect it and use it only for us:
| Provider | What for | Where |
|---|---|---|
| Hetzner | Servers and storage | Germany |
| Mollie | Supporter payments | Netherlands |
| Cloudflare | Telling people from bots on the sign-up form (Turnstile) | EU and United States |
We don't sell data, share it with advertisers, or use your films, scripts or posts to train AI models or let anyone else do so. We will disclose data if the law requires it.
Your data is stored in the European Union. If a provider ever processes it outside the EU, we will use GDPR-approved safeguards such as Standard Contractual Clauses.
How long we keep it
- Your account and profile: for as long as you have an account.
- Unconfirmed accounts: deleted after 7 days.
- Security logs: [90 days].
- Payment records: 6 years, because Irish tax law requires it.
- Backups: deleted data disappears from backups within [35 days].
- Inactive accounts: we'll email you after [3 years] without a login, then delete the account if you don't reply.
Deleting your account
You can delete your account from Settings at any time. We'll remove your profile, photos, private messages and any films you uploaded.
Films are made together, so some things are shared with other members. When you leave:
- Credits on other people's films stay, so their films keep a complete record. We'll show them as "Former member" unless you ask us to keep your name.
- Forum posts are anonymised rather than deleted, so conversations still make sense. If you want particular posts removed, ask and we will.
Your rights
Under GDPR you can:
- See a copy of your data
- Correct anything that's wrong
- Delete your data
- Download it in a machine-readable format
- Object to or restrict how we use it
- Withdraw consent for optional email at any time
Email [privacy@flaggyshore.com] and we'll reply within one month. If you're unhappy with our answer, you can complain to the Irish Data Protection Commission at www.dataprotection.ie.
Under-18s
Flaggy Shore is for adults. Anyone under 18 can only take part through an account managed by a parent or guardian, and we collect as little about them as possible. If we learn that someone under 18 has signed up on their own, we'll close the account.
Security
Passwords are hashed, connections are encrypted with HTTPS, and access to personal data is limited to the people who need it to run the site. If a breach puts your data at risk, we'll tell you and the Data Protection Commission as the law requires.
Changes
If we change this policy in a way that matters, we'll email you before it takes effect. Every version is dated at the top of this page.