Cookie policy
Last updated
Most cookie policies are three pages of hedging. This one tries to be short and specific instead: what is stored, who stores it, and which parts you control.
The short version
Nothing optional is switched on unless you say so. The security and spam checks that keep the site working are always on, because without them we cannot serve it safely. Analytics and advertising are off until you allow them, and you can change that at any time.
What a cookie is
A cookie is a small file a website stores on your device, so it can recognise it later. The same rules cover comparable technologies — local storage, session storage, pixels and device fingerprinting — and where we say “cookie” below we mean all of them.
Under EU rules, storing anything on your device that is not strictly necessary to deliver something you asked for requires your prior consent. Prior means before it is stored, not after. Analytics is not strictly necessary, so it waits for your answer.
On this website (filmatic.io)
| What | Purpose | Type | Consent needed |
|---|---|---|---|
Your cookie choice (filmatic.consent) | Records the decision you make in the banner, so you are not asked again on every page. Stored in your browser only and never sent to us | Strictly necessary | No — it exists solely to remember your answer |
__cf_bm | Cloudflare’s bot management, to tell automated traffic from real visitors. Expires after 30 minutes | Strictly necessary (security) | No — exempt |
cf_clearance | Set only if you are shown a security challenge, to record that you passed it | Strictly necessary (security) | No — exempt |
| Cloudflare Turnstile | The spam check on our contact form. Runs only on the contact page, and only when you use the form | Strictly necessary (security) | No — exempt |
| Cloudflare Web Analytics | Counts page views and referrers in aggregate. Stores nothing on your device, sets no identifier, and does not follow you between sites | Cookieless measurement | No — nothing is stored |
| Analytics cookies | None in use yet. If we add a measurement tool that stores an identifier, it will appear here by name before it runs | Analytics | Yes — off unless you allow it |
| Advertising cookies | None in use yet. If we add an advertising or conversion pixel, it will appear here by name before it runs | Advertising | Yes — off unless you allow it |
That is the complete list. There is no Google Analytics, no Meta pixel, no advertising network, no session recording and no A/B testing tool on this website today.
Why Cloudflare Web Analytics is not behind the switch: it reports page views without writing a cookie, without local storage, and without generating a persistent identifier for you. We get counts; we do not get a profile of you. Because nothing is stored on your device, the storage rules that require consent do not apply to it — so putting it behind a permission would be asking you to authorise something that never happens.
How the banner behaves
- Before you answer, nothing optional loads. Not queued, not loaded-but-idle. The tags are inert markup until you allow them.
- Accept and reject are the same size, in the same place, one click each. If you have ever hunted for a greyed-out “reject” behind two menus, that was the point of the design, and it is not the design here.
- Declining is remembered. You will not be re-asked on the next page, or the next visit.
- Changing your mind takes effect immediately. Switching a category off reloads the page so the tag actually stops, rather than continuing to run until you happen to navigate.
If your browser blocks local storage, we cannot remember your answer — so we ask again on the next page, and nothing optional loads in the meantime.
In the app (app.filmatic.io, iOS and Android)
The app is a different matter, because it has to remember that you are signed in — and there we do ask.
| What | Purpose | Type | Consent needed |
|---|---|---|---|
| Authentication tokens | Keep you signed in between visits. Stored by our authentication provider in your browser’s local storage or the app’s secure storage | Strictly necessary | No — you asked to sign in |
| Preferences | Remember your settings, such as your country and chosen streaming services | Strictly necessary | No |
| PostHog product analytics | Understand which features are used and where people get stuck, so we can fix it | Analytics | Yes — you are asked on first launch, and it stays off unless you say yes |
If you decline analytics in the app, we do not load PostHog at all. You can change your mind at any time in the app’s privacy settings, in either direction.
How to control cookies
- On this website: use the button above, or the banner on your first visit.
- In the app: your analytics choice lives in the app’s privacy settings and can be changed whenever you like.
- In your browser: every browser lets you block or delete cookies. Blocking the strictly necessary ones may stop you signing in, but nothing on this website will break.
- Do Not Track / Global Privacy Control: we do not currently set the kind of storage these signals are designed to stop. If that changes, we will honour them.
If this changes
If we add an advertising or cookie-based analytics tool, it will be named in the table above before it starts collecting anything, and it will load only if you have allowed its category. We will not quietly add a tracker and update the policy afterwards.
If the categories themselves change, your previous answer is discarded rather than carried over — you will be asked again, because consent to the old set is not consent to the new one.
Questions
Email privacy@filmatic.io. For the wider picture of what we collect and why, see the privacy policy.