Flicpick

Privacy policy

Last updated 2026-10-20. This explains what Flicpick collects, why, who it is shared with, how long it is kept, and your rights.

Who we are

Flicpick runs inside ChatGPT and on flicpick.onbaj.com. It is operated by Furkan Ismail, an individual developer publishing under the name onbaj ("we", "us"). Contact: privacy@onbaj.com.

What we collect

• An anonymous player ID: in ChatGPT, an ID that ChatGPT generates for Flicpick (not your name, email or OpenAI account); on the website, a random ID stored in your browser.
• Your country, language and device type as ChatGPT reports them, so picks match what streams where you are.
• Your streaming services, if you tell us, and movies you mark as seen, so we don't suggest them again.
• Movie nights: the cards shown, the name you enter to join (any nickname works), and your vote.
• Usage events and page visits (which action, when), with no IP address stored. Unique visitors are counted with a hash that changes daily.

What we don't collect

We never receive your ChatGPT conversations, email, phone number, precise location or payment details. No cookies, ads or third-party trackers. Movie posters load from TMDB's image server, which sees your IP address like any website you load images from.

Who sees what

Everyone in a movie night sees the names and votes of the people in it. Anyone with the link can join, so share it only with people you want there.

Sharing

• OpenAI, because Flicpick runs inside ChatGPT (OpenAI's privacy policy).
• Hetzner Online GmbH, which hosts our server in Germany.
• TMDB receives the movie searches we make (filters only, no personal data).
• Authorities, if legally required.

We do not sell personal data or use it for advertising.

Retention

Player data is kept while Flicpick operates. Movie nights are deleted after 90 days. Backups are kept for 14 days.

Your rights

Email privacy@onbaj.com to access, correct or delete your data. Include the movie-night code or describe what you did so we can find it. You can also complain to your local data protection authority.