Privacy

Last updated 4 November 2026

Cold Take is a small film site and app, made and run by one person. This page says what it keeps about you, who else sees it, and how to have it removed. Questions: hello@coldtake.org.

What Cold Take keeps

• Your account: your username, your email address, and your password as a one-way hash (nobody, us included, can read the password back). If you sign in with Google: Google's id for your account and the email Google gives us. Your bio and the avatar you pick, if you add them.
• What you do here: your takes (scores) and comments, your votes on comments, your watchlist, the films you've watched and when, your lists, who and which film people you follow, your clubs, their rounds and messages, and invitations and nudges between you and other users. Films you import from Letterboxd or IMDb become takes like these.
• The phone app: a fingerprint of the key that keeps your phone logged in, and, if you allow notifications, your phone's push address.
• Safety: failed logins, new accounts and password-reset mails are kept with the IP address they came from for one day, to stop anyone guessing passwords or making accounts by the thousand.

There are no ads, no analytics and no tracking. The only cookie keeps you logged in.

Who sees what

• Anyone can see your username, avatar and bio, your takes and comments (under the blind rule: on a film's page only to people who've rated it too), your lists, and who you follow.
• A club's rounds and messages are seen by its members.
• Your email address is never shown to anyone. It's used only to confirm it's yours and to send you a link when you forget your password.

Services Cold Take uses

• Railway runs the server and stores the database (in the United States).
• Resend sends the confirmation and password mails, so it gets your email address and the mail.
• TMDB provides the film data. Posters and photos load straight from TMDB's servers, which see your IP address the way any website does.
• Google, if you choose to sign in with it (Google's privacy policy).
• Expo, with Apple or Google, delivers the app's notifications, if you allow them.

Nothing is sold, and nothing goes to anyone else.

How long, and deleting it

Your data stays while you have an account. You can delete the account yourself, on the site under Settings → Account or in the app under Me → Account: that removes everything above that belongs to you, at once. The server keeps a copy of the database once a day for a week, to recover from accidents, so a deleted account is gone from those copies within seven days.

To see what we have about you, correct it or ask anything else about it, write to hello@coldtake.org.

Children

Cold Take is not meant for children under 13, and we don't knowingly keep their data.

Changes

If this changes, the new version is posted here with a new date.