Privacy Policy
What Ember collects, why, who else sees it, and how to get it back or have it deleted.
Information We Collect
We collect the following types of information:
- Account information: email address, username, and password (encrypted) when you create an account
- Movie preferences: genres, moods, and content you interact with (likes, ratings, bookmarks)
- Watch history: movies and shows you mark as watched
- Search queries: the descriptions you enter when searching for movies (used to provide recommendations)
- Usage data: pages visited, features used, and interactions with the app (anonymized)
- Feedback: what you write, your mood and, if you give it, your email. When you are signed in, your name and user id are included.
- Feedback context: if you accepted analytics, feedback also includes the pages and titles you viewed in that session and an analytics session link.
How We Use Your Data
Your data is used exclusively to:
- Provide personalized movie recommendations based on your preferences and watch history
- Improve our recommendation algorithm and service quality
- Sync your data with connected services (Trakt, Plex) when you authorize them
- Communicate important service updates (we do not send marketing emails)
We do not sell, rent, or share your personal information with advertisers or data brokers.
ChatGPT, Claude and other assistants
You can use Ember inside an AI assistant such as ChatGPT or Claude. The assistant's provider handles your conversation under its own privacy policy; Ember only sees the requests the assistant sends to it. Through an assistant:
- Ember returns the film facts, recommendations, collections and library status you ask for. The assistant and its provider receive them.
- Your raw watch history, your password and your Plex, Radarr, Sonarr and Stremio credentials are never sent to the assistant.
- Ember AI searches send your description to Ember's AI search service and its language-model provider. The text is stored with your account to count your daily allowance.
- Without an account, ChatGPT searches count against a small daily allowance using a one-way hash of an anonymous ChatGPT identifier. Ember never stores the identifier itself, only the hash and the search text. Claude sends no identifier, so Ember AI searches there need an account.
- Ember saves or removes films and shows, adds to Radarr or Sonarr or saves to Stremio only when you ask, and library access is approved separately from basic access.
- Connecting uses your Ember account. A connection lasts at most 30 days and you can revoke it at any time under Connected apps, which blocks further access straight away.
Third-Party Services
We integrate with the following services. When you connect them, data is shared as described:
- TMDB: We fetch movie data (posters, descriptions, cast). No personal data is sent to TMDB.
- YouTube: Movie trailers are embedded from YouTube. When you watch a trailer, YouTube may track your viewing activity according to Google's Privacy Policy. You can disable this in cookie settings.
- Trakt: When connected, your watch history and ratings are synced bidirectionally. Trakt's privacy policy applies.
- Plex: When connected, we check your library for available content. Your Plex token is stored on Ember's servers and is never sent to an assistant.
- Radarr: When connected, Ember adds films to your Radarr with the quality profile and folder you choose. Your Radarr address and API key are stored on Ember's servers and are never sent to an assistant.
- Sonarr: When connected, Ember adds shows to your Sonarr with the quality profile and folder you choose. Your Sonarr address and API key are stored on Ember's servers and are never sent to an assistant.
- Stremio: When connected, Ember keeps your Stremio sign-in key (not your password) to read and update your library. Stremio's privacy policy applies.
- JustWatch: Streaming availability comes from JustWatch. Where-to-watch links open JustWatch, which forwards you to the service. They carry Ember's partner ID, so Ember may earn a commission if you follow one.
- Google Forms: a copy of your feedback (text, mood, email, name and user id) is stored in a Google Form operated by Ember.
Data Retention
Your data is retained as long as your account is active. You can delete your account at any time, which will remove all your personal data within 30 days. Anonymous, aggregated data may be retained for analytics.
- Search and recommendation results kept so an assistant can show them: encrypted, 30 minutes.
- Collection edits: a receipt that stops a retry applying twice, 24 hours, and a minimal audit record (account, action, collection, number of films), up to 30 days.
- Radarr, Sonarr and Stremio actions: a record of the account, service and title, and a retry binding that lasts up to 30 days, so a retry never repeats the action.
Your Rights
You have the right to:
- Access your personal data
- Export your data in a portable format
- Delete your account and all associated data
- Correct inaccurate information
Contact Us
For privacy questions or to exercise your rights, email us at contact@ember.film
Ember is operated by Ember Film Technology Ltd.
Email contact@ember.film