Privacy Policy

3LM conseils en ingénierie, publisher of the Crimovies service, acts as the data controller for the personal data described below. This policy explains what data we collect, why, with whom it is shared, and how to exercise your rights.

1. Data Collected and Purposes

• Account (email address, username, encrypted password, provider ID for Google sign-in) — account creation and management, authentication. Legal basis: performance of the contract.
• Usage content (movies and shows watched, watch dates and times, ratings, wishlist, custom lists, preferred streaming services) — providing the service's features. Legal basis: performance of the contract.
• Technical data (IP address, device identifiers, access and error logs) — security, fraud prevention, diagnostics, and service improvement. Legal basis: legitimate interest.
• Subscription (status, plan, current period, subscription identifiers provided by our reseller) — managing the Premium plan and accounting obligations. Legal bases: performance of the contract and legal obligation. Payment card data never passes through Crimovies: it is collected and processed directly by Paddle.
• Support (messages you send us) — responding to your requests. Legal basis: legitimate interest.

2. Data Sharing

• Technical processors: hosting, database and authentication, transactional email delivery.
• Official reseller (Merchant of Record): Paddle.com, for selling the subscription, managing subscriptions, payments, tax compliance, and invoicing.
• Professional advisors: lawyers, accountants, when necessary.
• Authorities: when required by law.

We do not sell your personal data.

3. Transfers Outside the EU

Some providers may process data outside the European Union. These transfers are governed by adequacy decisions or the European Commission's standard contractual clauses, together with additional security measures.

4. Retention Periods

• Account and usage data: for the lifetime of the account, then deleted or anonymized within 30 days of its deletion.
• Technical logs: up to 12 months.
• Billing data: up to 10 years to comply with our accounting and tax obligations.

5. Your Rights

In accordance with the GDPR, you have the right to access, rectify, erase, restrict, port, and object to the processing of your data, as well as the right to withdraw your consent at any time where processing is based on it. Write to us at contact@crimovies.com: we respond within one month. You may also lodge a complaint with the CNIL (or the supervisory authority in your country of residence).

6. Security

We implement appropriate technical and organizational measures: encrypted connections (HTTPS), hashed passwords, per-user data isolation at the database level, access controls, and logging.

7. Cookies and Local Storage

Crimovies only uses strictly necessary cookies and local storage: maintaining your authentication session and remembering display preferences. No advertising or marketing tracking cookies are set. You can delete them from your browser settings, at the cost of being signed out.

8. Contact

3LM conseils en ingénierie — contact@crimovies.com.