In force as of 30 October 2026

This English version is provided for information only; in case of discrepancy, the French version prevails.

The controller of the data collected on filmatters.org is Filmatters, SAS, 6 rue Charles Nodier, 75018 Paris, France. For any question about your data, write to contact@filmatters.org. Filmatters shows no advertising, does not sell your data and uses neither tracking cookies nor social media buttons. No profiling or automated decision-making takes place. Your accounts are hosted in France, on our own server, and connections to the site are encrypted (HTTPS). The camera, the microphone and the videos used in the workshops and the montage table are processed in your browser and are never sent to us.

Account (15 and over): name, email, hashed password, saved shots and collections; date of last login; date and version of the terms of use accepted; paid workshops available and the end date of access; IP address and browser for each session. To manage your account and send you the emails it needs. Basis: contract. Retention: until the account is deleted, or after 3 years without login; sessions last 30 days. Name, email and password are required to create an account; without one, the site remains available. An account opened by someone under 15 is deleted as soon as we become aware of it.

Newsletter: email and language, if you tick the box when signing up, which is optional. Basis: consent. Retention: until you unsubscribe, which you can do from any issue.

Searches: the text you enter, sent without your identity, translated by DeepL and kept in an internal tool to improve search. Do not enter personal data in it. Basis: legitimate interest. Retention: 1 year. An image used to search is analysed on our server, then discarded: it is never stored.

Boîte à lumière (accounts under contract): title and script, sent without your identity to Mistral AI to generate the intertitles. Do not enter personal data in them. Each account's generations are counted per day, to apply a quota. Basis: contract. Retention: title and script not kept by Filmatters; counter deleted after 2 days.

Statistics: some actions, recorded in an internal tool with a pseudonymous identifier derived from your IP address (or, for the Boîte à lumière, your account identifier); Vercel audience measurement, cookieless and aggregated. To understand how the site is used and improve it. Basis: legitimate interest. Retention: 1 year.

Technical logs: IP address, date, page requested and browser, for the security of the site. Basis: legitimate interest. Retention: 7 days at most.

Backups: accounts, saved shots and collections, encrypted before being stored with Dropbox (only Filmatters holds the key), so that your data is not lost if something fails. Basis: legitimate interest. Retention: 30 days.

Only Filmatters has access to this data. The API and the database are hosted by Filmatters on its own server, in France. Service providers: Vercel (hosting, audience measurement), Cloudflare (network), IONOS (emails), Sender.net (newsletter), DeepL, Mistral AI, Slack and Dropbox. Vercel, Cloudflare, Slack and Dropbox process data in the United States, under the Data Privacy Framework or the European Commission's standard contractual clauses.
Films (Wikimedia Commons, Internet Archive), the AI models of some tools (Hugging Face) and maps (OpenFreeMap) are loaded by your browser from these services, most of them based in the United States, which then receive your IP address.

Only necessary cookies, which require no consent: login session (30 days), chosen language (1 year), introduction already seen (10 days). Some tools keep your projects and settings in your browser, without sending them to us.

Access, rectification, erasure, restriction, objection, portability, withdrawal of consent and instructions for after your death: write to contact@filmatters.org from your account's email address. We reply within one month. You may object at any time to processing based on legitimate interest. Withdrawing your consent does not affect processing already carried out. A request to delete your account also erases your saved shots, collections and newsletter subscription; they disappear from the backups within 30 days. You may lodge a complaint with the French data protection authority, the CNIL (cnil.fr).