Privacy Policy

FilmLink (“we”, “us”) operates the movie-puzzle game at www.filmlink.io. This policy explains what information the game collects, why, and the choices you have. Questions and requests: contact@filmlink.io. We do not sell your personal data and we do not show ads.

Account data (only if you register): your email address, a password (stored as a hash by our authentication provider — we never see it), your display name, and anything optional you add to your profile: an avatar picture, a username color, featured badges, and links to your social profiles.

Gameplay data: your puzzle results (links, times, solve paths), streaks, badges, multiplayer match history and ratings, league membership, poll votes, and feedback you send us.

Device data: a random device identifier stored in a cookie (fl_did), used to prevent duplicate daily submissions and to count unique players. Our servers also keep standard, short-lived request logs (IP address, browser user-agent) as part of hosting.

Usage analytics:gameplay events (for example “daily puzzle started”) via Google Analytics 4, and — when enabled — anonymized interaction data (clicks, scrolling, heatmaps) via Microsoft Clarity, to understand where the game confuses people.

On your device:the game keeps preferences and progress (theme, current chain, cached scores, streaks) in your browser’s local storage. That data stays on your device; clearing your browser data removes it.

To run the game: score and rank the daily puzzle, keep streaks and badges honest, match you into multiplayer games, prevent duplicate submissions and cheating, moderate names and avatars, answer your messages, and understand which parts of the game work so we can improve them. We use analytics in aggregate; we do not build advertising profiles.

FilmLink is a leaderboard game, so some of your information is public by design: your display name, avatar, username color, featured badges, and your results appear on leaderboards, in multiplayer lobbies and match history, in leagues, and on your public profile page (filmlink.io/u/yourname). Your email address is never public. If you share a result to a chat, what you share is up to you.

We use a small set: fl_did (persistent device identifier, for daily-submission integrity and unique-player counts), authentication session cookies/tokens when you sign in, and the cookies set by Google Analytics and Microsoft Clarity where enabled. Local storage holds game preferences and progress. You can clear all of these in your browser settings; the game keeps working, though guest progress and streaks on that device will reset.

These providers process data on our behalf to run the game:

• Supabase: accounts, database, and avatar storage
• Vercel: hosting and server logs
• Upstash: live game-state storage
• PartyKit (Cloudflare): real-time multiplayer connections
• Google Analytics 4: usage analytics
• Microsoft Clarity: interaction analytics (when enabled)
• TMDB — film data and posters; poster images load directly from TMDB’s image servers, which receive your IP address as part of serving the image

Some of these providers operate in other countries (including the United States); where required, data transfers rely on the providers’ standard contractual safeguards.

Account and gameplay data are kept while your account exists — leaderboards and match history are long-lived records of the game. Server request logs are short-lived. Guest results are tied to your device identifier and display name. If you ask us to delete your account, we remove your profile and personal data; anonymized or aggregated records (for example, a leaderboard total) may survive without anything that identifies you.

Email us to access, correct, export, or delete your data — including full account deletion. Depending on where you live (for example the EU/UK under GDPR, or California under the CCPA), you may have formal rights to these things and to complain to your local data-protection authority; we honor the requests either way. You can also play FilmLink entirely as a guest, without ever creating an account or giving us an email address.

FilmLink is not directed at children under 13 and we do not knowingly collect personal information from them. If you believe a child has created an account, contact us and we will delete it.

Traffic is encrypted in transit (HTTPS), passwords are hashed by our authentication provider, and access to production data is limited. No online service can promise perfect security, but we keep the data we hold to the minimum a game needs.

We may update this policy as the game evolves. The “Last updated” date above reflects the current version, and material changes may also be announced on the site.

Privacy questions or requests: contact@filmlink.io