Privacy notice

Last updated: 12 October 2026

This notice covers the GoFilm website at gofilm.uk and the GoFilm UK app for iPhone. In short:

• The website has no accounts, no cookies, no analytics and no advertising. Our server keeps a standard log of requests, including your IP address, for 14 days. Your location and anything you type into its search stay in your browser.
• The app keeps what it needs for the features you use: your watchlist, saved cinemas and ratings; your email address if you sign in; and a push token if you turn on alerts. None of these is required — you can use GoFilm without an account or any saved data. You can download or delete all of it from the Account screen.

Who we are

The controller of your personal data is GoFilm UK. For anything in this notice, email privacy@gofilm.uk.

The website (gofilm.uk)

No cookies, no storage in your browser

gofilm.uk sets no cookies, and its pages store nothing in your browser: no local storage, no session storage and no other browser database. There is no consent banner because there is nothing to consent to. No analytics, tracking or advertising code runs on the site.

Server logs

Like almost every website, our web server writes a line to a log for each request it answers. Each line holds:

• your IP address;
• the date and time;
• the address requested;
• the result and size of the response, and how long it took;
• the referring page, if your browser sends one;
• your browser's user agent (its name and version);
• a flag, cookie=0 or cookie=1, saying whether your browser sent any cookie at all. The site never sets one, so this should always be 0. We record only whether a cookie was sent, never what it contained.

We use the logs to keep the site secure and working: to spot attacks and abuse, to find faults, and to count visits in aggregate. Our legal basis is legitimate interests (running a secure, working website). Logs are deleted after 14 days: they are rotated daily and the oldest is deleted when a new one starts. They stay on our server, which Hostinger hosts, and only we have access to them. We don't combine them with any other data, and we don't use them to identify anyone, unless that is needed to deal with an attack or the law requires it. Error logs, which can also contain an IP address, are kept for the same 14 days.

"Near me"

If you press "Find cinemas near me", your browser asks whether to share your location. If you allow it, the page works out the nearest cinemas itself, on your device. Your location is never sent to us or anyone else, and it is not stored: it is gone when you leave the page, and next time the browser asks again. To do this, the page loads a list of cinema locations from our server, which is an ordinary request in the log like any other page.

Film pages work the same way. "Use my location" and the postcode box there sort the cinemas by distance on your device, and your location stays on the page. The times come from files that are the same for every visitor (one per film and day), so the requests the page makes don't reveal where you are.

Postcode search

You can type a postcode instead. The page uses only its first half, the postcode district (for "SE15 4QL", just "SE15"). It looks that up in a list of district centre points that it downloads from our server in full. The postcode you type is never sent to us or stored. The list covers Great Britain only. It holds no full postcodes and nothing from Northern Ireland, the Channel Islands or the Isle of Man, so for those the page asks you to search by town. The district list is derived from the ONS Postcode Directory: contains OS data © Crown copyright and database right; contains Royal Mail data © Royal Mail copyright and database right; source: Office for National Statistics, licensed under the Open Government Licence v3.0.

Search

The search box also works entirely in your browser, against a file of film, cinema and town names it downloads from our server. What you type is not sent anywhere.

Film posters loaded from other sites

Film posters are loaded by your browser directly from the sites that host them, so those sites receive your IP address and browser user agent, as any website you load something from does. Our pages tell your browser to send only "gofilm.uk" as the referrer, never the page address. Those hosts are:

• image.tmdb.org: The Movie Database (TMDB)
• images.savoysystems.co.uk: Savoy Systems (a cinema booking-system provider)
• indy-systems.imgix.net: Indy Systems (a cinema booking-system provider), via imgix

Their own privacy policies apply to those requests. Our legal basis for showing the posters is legitimate interests: showing you what a film is.

Booking links (/go/)

Booking links on gofilm.uk go through an address of ours, gofilm.uk/go/…, which counts the click and sends you on to the cinema's booking page. To count each person once per screening per day without cookies or accounts, it stores:

• the screening (film, cinema and start time);
• the date;
• a one-way code made from your IP address and user agent mixed with a secret value. The secret value changes every day, and each day's is destroyed. The code can't be turned back into your IP address. Once a day's secret is gone, the same person's visits on different days can't be linked.

Requests that identify themselves as automated (search-engine crawlers, for example) are forwarded but not counted. We use the counts, in total by cinema and day, to understand which listings are useful and to show cinemas the bookings we send them. Our legal basis is legitimate interests. The one-way code is deleted, with that day's secret, within two days; only daily totals per film and cinema are kept.

Leaving the site

When you follow a link to a cinema, a map (Google Maps, Apple Maps) or a trailer (YouTube), you are on their site and under their privacy policy. Our pages tell your browser to send only "gofilm.uk" as the referrer, not the page you were on.

The app banner and App Store links

On an iPhone, Safari may show a banner offering the GoFilm UK app. Safari and Apple handle that, under Apple's privacy policy. Our links to the App Store carry a campaign label (for example "web-footer"). If you install the app after following one, Apple may tell us, only as totals, how many installs came from each label. We never learn who you are.

The app (GoFilm UK for iPhone)

Using the app without signing in

When you first use the app, it creates a guest account on our server: a random number, with nothing that identifies you. The app keeps its sign-in tokens on your phone. The app uses no cookies. If you use these features, we store:

• your watchlist, your film ratings, your saved cinemas and your Film Alerts;
• your location settings, if you save a location so the app can show nearby cinemas. We store the coordinates as your phone gives them (precise, not rounded), or the postcode you enter, and the search radius you choose. You can change or remove them in the app.

Guest accounts that haven't been used for 6 months are deleted automatically.

Signing in

If you sign in, so your data follows you across devices, we also store:

• your email address, encrypted, which you use to sign in;
• with Sign in with Apple: the identifier Apple gives us for you, and the email address Apple passes on. That is either your real address or a private relay address ending @privaterelay.appleid.com, as you chose. We receive nothing else from Apple;
• with an emailed code: while a code is outstanding, we hold it (as a one-way hash), your email address and the IP address that asked for it. We use them to check the code and to limit repeated requests. They're deleted within a day of the code expiring (codes last 15 minutes);
• sign-in sessions: so you stay signed in, we keep a record of each device's session with a label such as "iPhone iOS 26.6". Each session lasts up to 60 days, and the record is deleted 30 days after it expires or you sign out;
• your email preferences, such as whether you've asked for our weekly email. That email is sent only if you opt in, and every one carries an unsubscribe link.

Film Alerts and push notifications

If you allow notifications, iOS gives the app a push token: an address Apple uses to deliver notifications to your device. We store it with your device label, and use it only to send the alerts you've set up. It's deleted when you delete your account, or when Apple tells us it's no longer valid. You can turn notifications off at any time in iOS Settings → Notifications → GoFilm UK.

Booking links in the app

When you tap a booking link in the app, it tells us which film, cinema and showing you chose, with a random identifier the app creates for that installation. The identifier isn't linked to your account, and lets us count each showing once per installation per day. After 90 days the records are combined into totals by cinema and day, and the identifier is removed. We use the totals to understand which listings are useful, and to show cinemas the bookings we send them.

Server logs for the app

Our server logs the requests the app makes: the IP address, the time and the address requested. The address can include a place you're searching near. We use these logs for security and to find faults. The application log is kept for 7 days and the web server's log for 14 days.

Why we use your data, and for how long

Where we rely on legitimate interests, we have weighed them against your interests and kept the data to the minimum. You can object (see "Your rights").

Who else handles data

• Hostinger hosts our server, in Manchester in the UK, where all the data above is stored.
• Resend, a US company, sends our emails from its EU (Ireland) region: sign-in codes, alerts, the weekly email if you opt in, and data exports if you ask for one by email. It handles your email address and the email's content. resend.com/legal/privacy-policy
• ImprovMX, a US company, receives email sent to our gofilm.uk addresses (privacy@gofilm.uk, legal@gofilm.uk, feedback@gofilm.uk) and forwards it to our mailbox. It holds each message briefly in France (Amazon Web Services, Paris) and deletes it once delivered; delivery can pass through its servers in France or the US. It never logs the content of messages; it keeps a delivery log (the sender's address, our address, the subject and the sending server) for 7 days. improvmx.com/gdpr-compliance
• Apple provides Sign in with Apple and delivers push notifications. apple.com/legal/privacy
• Poster hosts: the website and the app load film posters from The Movie Database (TMDB), and the website a few from cinema booking-system providers (listed above). Your device fetches them directly, so they see your IP address.

Your data is stored on our server in the UK. Some of it leaves the UK through the providers above. Resend sends our email from its EU (Ireland) region, which UK adequacy regulations cover; Resend is a US company and may also handle some of that data in the US. If you email us, ImprovMX, a US company, receives your message in France (EU) and may deliver it onward through the US; its data processing agreement includes the UK Addendum for transfers from the UK. Apple, for Sign in with Apple and push notifications, is in the US. Your device fetches poster images directly from TMDB, also in the US. A transfer to the US is protected by the UK–US data bridge where the provider is certified under it, or otherwise by contract terms approved for UK transfers (the UK International Data Transfer Agreement or Addendum). We don't sell your data, share it with advertisers, or use it to profile you.

Your rights

Under UK GDPR you have the right to access your data, to have it corrected or deleted, to restrict or object to how we use it, and to take it elsewhere (portability). Where we rely on consent, you can withdraw it at any time. In the app:

• Download my data (Account screen) gives you a file with your account details, watchlist, ratings, saved cinemas and alerts. For anything else we hold about you, such as device and session records, email us.
• Delete account (Account screen) deletes your account and everything linked to it from our database straight away. Daily backups are kept up to 4 weeks and deleted accounts are never restored from them; logs expire as shown in the table.
• Stop emails: turn off the weekly email in the app, or use the unsubscribe link in any email.

If you signed in with Apple, you can also stop using Sign in with Apple for GoFilm in your Apple ID settings. That stops you signing in with Apple, but it does not delete your GoFilm account. To delete the account, use Delete account.

For any request, email privacy@gofilm.uk. We reply within one month. We may ask you to confirm the request from the email address on the account. If you've lost access to that address, we have no other way to identify you. The website holds no data that identifies you, so there is nothing about you there to request.

If you're unhappy with how we've handled your data, please tell us. You can also complain to the Information Commissioner's Office: ico.org.uk/make-a-complaint.

Children

GoFilm isn't designed for children under 13, and we don't knowingly collect their data. If you think a child has an account, delete it from the Account screen or email us.

Security

All connections to GoFilm use HTTPS. Email addresses are stored encrypted. Sign-in codes and session tokens are stored only as one-way hashes, and sign-in attempts are rate-limited. No system is completely secure. We keep as little as we can, which limits what a breach could expose.

Changes to this notice

If we change this notice materially, we'll update the date at the top. We'll also tell app members by email before the change takes effect.