Privacy Policy

Recall My Movie is operated in the United States by liumo. This policy explains the limited information used to provide private movie-memory searches.

Contact

For privacy questions, access or deletion requests, and other data concerns, use the contact form.

Information you provide

A search may include a movie description, editable clues, answers to follow-up questions, and feedback about possible matches. Google sign-in provides a verified account identifier, email address, display name, and optional profile photo. A user may separately choose to publish an edited description as an anonymous help request and receive account-attributed replies from other visitors. Please do not include names, contact details, financial information, health information, passwords, or other sensitive personal information in a movie description or help request.

How the search works

Your browser keeps the active search state in session storage for the current tab. The private API stores the description, clues, answers, search state, and feedback in Cloudflare D1 so the search can be completed and protected from unauthorized access. Search access tokens are session-specific and are not placed in public URLs.

Clue organization and follow-up selection use deterministic application logic. When you run a search, Recall My Movie sends the movie description and submitted clues to web search providers to retrieve public pages about films matching that description, and to DeepSeek to extract tentative title guesses, English search keywords, genres, and a year range. Both outputs are treated as unverified search aids and cannot create a displayable movie result by themselves.

TMDB receives controlled title, keyword, genre, and release-date queries used to retrieve and verify movie records. When the initial TMDB pool is empty, English Wikipedia may receive a short title or keyword query to discover possible film page titles. Public web search results and selected page excerpts may be sent to DeepSeek to help compare clues. The application does not intentionally send TMDB API response records, posters, subtitles, or long plot texts to DeepSeek.

Help requests and replies are public to visitors who have the request link or open community page. Google sign-in is required to publish a request or reply. The requester remains anonymous on the public request, while the account is linked privately so the requester can manage it from another device. Replies display the commenter's Google display name and profile photo, if available. Email addresses and internal account identifiers are not displayed publicly.

Technical and security data

Cloudflare may process IP addresses, request metadata, security signals, and infrastructure logs when delivering the site and API. The application uses a one-way hash derived from the connecting IP address to enforce rate limits. Raw IP addresses are not stored in the Recall My Movie application database for this purpose.

Providers

Cloudflare provides hosting, content delivery, Worker execution, and D1 storage. DeepSeek processes search descriptions to organize clues and find candidate titles; its Search and Fetch services may also receive search queries and public page URLs to find and read relevant pages. DeepSeek's published privacy policy states that user input may be retained, processed in the People's Republic of China, and used to provide, develop, train, and improve its services, subject to its policies and available rights or opt-outs. If DeepSeek search is unavailable or returns no results, Brave Search or Tavily may receive the query and return public search results; Brave's privacy policy governs what it retains. TMDB provides licensed movie-record retrieval and verification. These providers process information under their own terms and privacy policies. This product uses the TMDB API but is not endorsed or certified by TMDB.

Retention

Private search-session data and associated help requests in Recall My Movie's D1 database are retained for up to 30 days and may be deleted earlier when a session expires. Help replies are deleted with their request. De-identified daily totals for searches, confirmations, and rejected candidates may be retained longer to measure search quality; these totals do not contain descriptions, movie titles, account details, or session identifiers. Login sessions are configured for up to 30 days. The basic Google account profile may remain stored so future sign-ins can reconnect the same user to retained requests, and may be deleted following a verified deletion request. Security and infrastructure logs controlled by Cloudflare may follow Cloudflare's applicable retention settings and policies. Information sent to DeepSeek or to the web search provider is subject to their provider-controlled retention and deletion practices and is not governed by Recall My Movie's 30-day D1 limit.

Cookies and analytics

Session storage keeps the current private search in the active browser tab. An HttpOnly authentication cookie keeps a signed-in Google account connected to the API. Recall My Movie uses Plausible Analytics for aggregate, privacy-focused traffic measurement and Google Analytics 4 for site usage measurement. These analytics may receive page URLs, device and browser information, approximate location derived from network data, and interaction events. Movie descriptions and follow-up answers are not included in analytics events. Google Analytics may use cookies or similar identifiers according to its configuration and policies. The service does not currently offer payments or advertising cookies.

Published solved cases

A private search is not published merely because you use the service. A solved case may be published only after appropriate permission or another lawful source, anonymization, title verification, and human review.

Your choices

You may request access, correction, or deletion of information associated with a search reference by contacting the operator. Reasonable identity or session verification may be required before fulfilling a request. You may also close the browser tab to clear its session-storage copy.

Children

The service is not directed to children under 13, and the operator does not knowingly collect personal information from children under 13.

Changes

This policy may be updated when the service, providers, or legal requirements change. The effective date above will be revised when material changes are published.