Privacy at the cafe

Guest profiles and accounts

A first-party session cookie connects this browser to a server-stored profile. Sessions last up to 30 days. Clearing cookies can disconnect a guest collection. Accounts add sign-in credentials, a private email address and recovery information; password hashes are stored rather than plaintext passwords. Email password-reset delivery is currently disabled.

Private and public activity

Saved films, viewing progress/history, follows, private film lists, suggestions and reports are linked to your profile. Saves, history and lists are private. Signed-in recommendations and your display name/bio can appear publicly; email and recovery information do not.

Your choices and data

Preferences, theme and the last Browse language are saved in your profile or browser storage as appropriate. A public catalog cache supports offline browsing; provider videos and private API responses are not cached by the cafe’s service worker. Local browser storage can be cleared independently of server records.

You can clear viewing history in My library and download your profile, actions, follows and private lists. Those actions do not remove every server record. Server data and private operational backups are retained until removed through the cafe’s administration process; we do not claim an automatic expiry or deletion policy that is not implemented.

External providers and optional tools

Contact messages and optional reply emails are private to signed-in curators. An email is used only for a possible manual reply; we send no automated contact emails. Messages remain until reviewed. Closed contact messages are removed from the active database after 90 days when contact submission or the curator queue next runs. Private backups can contain earlier copies. Session, network and site-wide message limits protect the queue; short-lived counters store a network hash rather than a raw IP address.

Thumbnails can contact the video provider before playback. Pressing Play loads the original provider’s player, whose own cookies and privacy practices apply. Archive and PeerTube posters use the cafe logo. PeerTube embeds disable peer-to-peer sharing; these two players do not report progress to the cafe in this integration. Optional YouTube discovery can send your explicit search to YouTube and retains searches/provider snapshots for a bounded period. Ask Mini has deterministic local recommendations; optional hosted assistance, where enabled for approved accounts, processes the request and permitted film metadata rather than private viewing history.

Download or manage your collection · Contact and removal guidance