Privacy on EndCredits

What we store

Your account: the email address you sign in with, and, if you use Google, Apple, or Microsoft, the name and address that provider gives us. We use it to sign you in, to let collaborators reach you, and to match credits to you. We do not sell it or share it with anyone.

Your page: the name, handle, headline, bio, location, links, photo, education, and design choices you enter, and the projects, credits, stills, posters, and festival results you or your collaborators add. Video is never uploaded here; films are embedded from Vimeo or YouTube and stay under those services' terms.

Evidence you attach to a festival result, such as laurels, a screenshot, or a forwarded notification email, is stored so a person can check it. A forwarded email is read only to confirm the festival's message and is not used for anything else.

An activity log of actions on the site: who added, confirmed, declined, flagged, or removed what, and when. It exists so that disputes about credits can be settled from the record. Nothing in it is public.

Who can see what

Public person and project pages show what their owners publish: names, roles, confirmed credits, stills, and festival results. Search engines and link previews can read them. A project can be made unlisted or private at any time, and a person page without a claimed account shows only its credits.

Email addresses are never shown on a page. An unclaimed person you credit receives an invitation at the address you gave; the address is visible to the project's editors and to nobody else.

Page views are counted so owners can see how often a page is opened and which sites link to it. A visitor who is not signed in is counted once a day through a hash that cannot be turned back into an address, and nothing is stored in your browser for it. A signed-in viewer is shown to a page's owner by name only when both people have turned on Who viewed me on their profile. View records are deleted after a year, and counts are never public.

Email

We send sign-in links, credit invitations, confirmations, and, if you turn it on, a daily digest of things waiting for you. Digests can be switched off on your profile. Transactional mail is delivered through Resend; your address goes to them only to deliver the message.

Where it lives

The database, uploaded images, and sign-in run on Supabase, and the site is served by Vercel. Both act on our instructions and do not use your data for their own purposes. Nothing is stored in your browser beyond the session that keeps you signed in.

Removing things

You can edit or remove anything you posted from your page and your projects. Credits and endorsements keep their history, so a declined or removed credit is marked as such rather than erased; this is what makes a confirmed credit worth something.

To close your account or have a page that claims to be you taken down, write to d.d02031pw@gmail.com. We reply to every request. Rights and takedown requests follow the terms.