MovieFinder is an Android app for cataloguing a shelf of DVDs and Blu-rays. This policy describes what the app does with data. It is short because the app does little: there is no account, no advertising, no analytics, and your collection stays on your phone.
Josef Sobotta Tile-Hagemannstr. 4 29525 Uelzen Germany support@sinusquell.com
Everything you add in the app is stored on the device itself:
None of this is sent to us. Only the app itself can read it.
If Android's automatic backup is switched on, Android copies this data into your own Google Drive backup, under your Google account. That is a function of your phone rather than of this app, and you can switch it off in the Android settings under Backup.
Working out which film a barcode belongs to takes a lookup, and a lookup takes a network request. When you scan a barcode or search for a title online, the app sends the following to the MovieFinder service:
There is no account and no device identifier. Requests are not tied to a person, and the app never assigns you an id. Every installation sends the same fixed app key, which does nothing except stop the service from standing open to anyone on the internet.
What the service keeps is about films, not about people: which product title belongs to a barcode, which film users picked for it, names typed by hand, and which barcodes no database lists. It is a shared lookup table, so the second person to scan the same case gets an answer without a fresh lookup. None of those entries says anything about who scanned.
Some releases are in no product database at all: box sets, regional editions, older home video. For those the app lets you type the name yourself, and that name is stored in the shared table and shown to other people who scan the same barcode.
Only the name, the barcode and the language the app was in are stored. Nothing marks you as its author, and no other user can reply to you or contact you. Do not type anything personal there, because it is the one thing in the app that other people will read.
Every name shown this way has a report button beside it. Reporting a name hides it from everyone straight away. The entry itself is kept rather than deleted, so a name hidden by mistake can be restored, and so we can tell if the button is being misused.
The camera is used for exactly one thing: reading the barcode on a case. Frames are analysed on the device by Google's ML Kit, which is built into the app and works offline. No picture is saved and none is sent anywhere. Only the decoded digits are used, and only once a code has actually been found.
You can refuse the camera permission and still use the app, by typing barcodes or titles by hand.
The service runs on Cloudflare. Like any web server it processes the technical data that comes with a request, including your IP address, the time and the app version, in order to answer it and to prevent abuse. That happens on Cloudflare's own servers, is not written into the service's database, and is not used to build a profile of anyone. Cloudflare acts as a data processor on our behalf; see the Cloudflare privacy policy.
| Service | What it receives | What for |
|---|---|---|
| Barcode databases (UPCitemdb, Barcode Lookup) | barcode numbers, through the MovieFinder service | turning a barcode into a product name |
| DuckDuckGo (html.duckduckgo.com) | a barcode number as a search query, sent from your phone, so your IP address is visible to them | last resort for releases no database lists |
| Google Play Billing | your purchase | selling the full version |
The full version is sold through Google Play. Google handles the payment: the app never sees your name, your address or your payment details. It only asks Play whether a purchase exists and stores the answer as a single yes or no on the device. What Google does with purchase data is covered by the Google privacy policy.
There is none. No advertising network, no analytics or crash reporting SDK, no tracking of any kind is built into the app.
The app is not directed at children and collects nothing that would identify one.
Your collection: uninstalling the app, or clearing its data in the Android settings, removes it completely. If Android backup is switched on, delete the backup in your Google account as well.
The shared table: the entries there describe films and are not linked to you, so there is nothing that could be looked up under your name. If you typed a name you would like removed, write to support@sinusquell.com with the barcode and it will be deleted.
Under the GDPR you have the right of access, rectification, erasure, restriction of processing, data portability and objection, and the right to complain to a supervisory authority. Because nothing in the service is linked to an identity, a request cannot be matched to particular entries. If you believe otherwise, describe what you are looking for and we will help as far as the data allows.
Legal basis: processing barcodes and search terms is necessary to provide the function you asked for, Art. 6(1)(b) GDPR. Server logs and protection against abuse rest on the legitimate interest in a service that works and is not abused, Art. 6(1)(f) GDPR.
If this policy changes, the date at the top changes with it. The current version is always at this address.