Privacy policy
What we know about you, why we keep it, and how to get it back or deleted.
Who is responsible
Julien Martorell, publisher of FrameClub, decides why and how your personal data is processed. Contact for anything in this document, including exercising your rights: hello@frameclub.club. Full identification is on the legal notice.
FrameClub is small enough not to need a data protection officer. Your requests reach the operator directly.
What we collect
| Category | Data | Where it comes from |
|---|---|---|
| Account | Email address, password (hashed, never readable), name, account creation date, chosen language | You, when you sign up |
| Google sign-in | Google account identifier, email address, name, profile picture | Google, if you choose that sign-in |
| Public profile | Display name, title, biography, website, Instagram handle, contact line, profile and cover images | You, whenever you fill them in |
| Your work | Videos, thumbnails, titles, descriptions, credits, the roles you assign to others | You, when you upload |
| Activity | Likes, comments, votes, follows, curator ratings, reports you file, edit requests | Generated as you use the site |
| Email preferences | Which notifications you accept, newsletter subscription and its status | You, in your settings |
| Technical | IP address, browser and device, pages viewed, error reports, upload sessions | Your browser, automatically |
| Analytics and replay | Clicks, navigation, session recordings with all typed input masked | Only if you accepted analytics cookies |
Why, and on what legal basis
| Purpose | Legal basis | Kept for |
|---|---|---|
| Running your account and publishing your work | Performance of the contract formed by the Terms of Use | As long as your account exists |
| Notification emails about your account and credits | Contract, with per-type opt-outs in your settings | As long as your account exists |
| Newsletter and announcements | Our legitimate interest in keeping the professionals who use FrameClub informed about it. You are told at sign-up and can decline there or at any time after. | Until you unsubscribe, and at most 3 years after your last interaction |
| Keeping the platform safe: rate limiting, fraud and abuse handling, moderation | Our legitimate interest in a platform that is not abused | Security logs: 12 months |
| Error reports and technical diagnostics | Our legitimate interest in a site that works | 90 days |
| Cookieless audience measurement | Our legitimate interest in aggregate statistics that identify no one | 25 months, aggregated |
| Analytics and session replay | Your consent, through the cookie banner | 12 months |
| Automatic classification of videos by genre | Our legitimate interest in a browsable catalogue | As long as the video is published |
| Meeting our legal obligations, answering rights requests and legal claims | Legal obligation | The applicable limitation period |
Where we rely on legitimate interest, you can object at any time — see Your rights. The newsletter is the clearest case: it is on when you sign up, the sign-up form says so, and one click in your settings or at the bottom of any campaign ends it for good.
What is public
FrameClub is a public showcase. Your profile, your published videos, their credits, your comments and the roles you are credited in are visible to anyone, including visitors without an account, and are indexed by search engines.
Your email address and password are never public, and are never shown to other members.
Videos are delivered through a content delivery network and can be embedded on other sites when you enable embedding. Anything you publish may therefore be seen, and copied, beyond FrameClub.
People who are not members
Two things bring data about people who never signed up.
Credits. A member can credit someone by name for their role on a film. Until that person joins, the credit is a name and a role attached to a video, nothing more.
Public sources. We collect published work from public pages and industry publications — title, author, description, thumbnail, link — to build the catalogue. The legal basis is our legitimate interest in documenting published creative work, and the data is limited to what its authors already made public professionally.
If you are credited or listed and would rather not be, write to hello@frameclub.club and we will remove it. You do not have to explain why, and you do not need an account.
Who else handles your data
These providers process data on our instructions only, under a contract that forbids them from using it for themselves. We do not sell personal data and we never will.
| Provider | What for | Where |
|---|---|---|
| Vercel | Runs the site | France (Paris) |
| Supabase | Database | Ireland |
| Bunny.net | Video hosting and delivery | European Union |
| SendGrid (Twilio) | Account and notification emails | United States |
| Upstash | Rate limiting | European Union |
| Algolia | Search | European Union |
| Sentry | Error reports | United States |
| PostHog | Analytics and session replay, only with your consent | European Union |
| Hotjar | Heatmaps and session replay, only with your consent | European Union |
| Anthropic | Automatic classification of video genres | United States |
Transfers outside the European Union
Most of the stack sits in the EU. Three providers are American: SendGrid, which sends your emails; Sentry, which receives error reports; and Anthropic, which classifies videos by genre and is sent the video's public description, never your personal data.
Those transfers rely on the European Commission's standard contractual clauses, and on the EU–US Data Privacy Framework where the provider is certified under it.
Deleting your account
You can delete your account yourself, from your settings, without giving a reason. It takes effect immediately and cannot be undone.
Deleting removes your profile, your email address, your password and your personal data, along with your likes, comments, votes and notifications. The videos you posted are taken offline at the same time, and the credits you hold are removed.
Videos posted by other members are never deleted with your account, even where you are credited on them — that work is theirs, not yours to remove.
Keep your own masters before you go: we cannot give a deleted video back. If you would also like your name taken off credits on other members' videos, tell us at hello@frameclub.club and we will do it.
Your rights
Under the GDPR you may ask for access to your data, correction of anything wrong, erasure, a portable copy, a restriction on how we use it, and you may object to processing based on our legitimate interest.
Most of it is immediate: edit your profile at any time, adjust notifications in your settings, download your data or delete your account from the same place. For anything else, write to hello@frameclub.club. We answer within one month.
If our answer does not satisfy you, you can lodge a complaint with the CNIL, the French data protection authority — 3 place de Fontenoy, 75007 Paris, cnil.fr.
Security
Passwords are stored hashed with bcrypt and cannot be read back, by us or anyone else. Traffic is encrypted end to end. Access to production data is limited to the operator, sensitive endpoints are rate limited, and administrative actions are logged.
No system is beyond reach. If a breach ever puts your rights at risk, we will tell the CNIL within 72 hours and tell you without undue delay.
Age
FrameClub is for filmmaking professionals and is not intended for children. You must be at least 16 to hold an account. If we learn that an account belongs to someone younger, we delete it.
Changes to this policy
The date at the top of this page says when it last changed. A change that affects your rights, or that adds a purpose, is announced by email before it takes effect.