Jackson Film Club ("we") operates
jxnfilm.club and the membership service
at join.jxnfilm.club. We're a
small film club in Jackson, Mississippi — not a data company. This page
explains, in plain language, exactly what we collect and what happens
to it.
What we collect
Email address — for one-time login codes, and (only if you opt
in) club announcements.
Display name, plus optional pronouns and a
Letterboxd username — whatever you choose to show on your member
card. The Letterboxd handle is also used to fetch your public Letterboxd
activity for the Watched page: we mirror up to the most recent 50 diary
entries your public feed still serves, and nothing older than that feed
already carries.
RSVP records — when you RSVP to an event that takes RSVPs —
a member-hosted screening, or a club event an admin set up that way —
we record your name, email, and the time you RSVP'd, so whoever is
running it knows who's coming and we can email you the details.
Guest RSVPs — a host (or a club admin) can add a non-member
guest to their screening's list by name, optionally with an email the
guest gave them. A name-only guest has no email stored at all. If an
email is given, we send one confirmation that says who added you, with
the screening details and a one-click removal link — that's your
opt-out, no account needed. Guest names appear in the attendance list
the same way member names do.
Host addresses — if you host a house screening, you give us the
street address and any notes (parking, entry). The address is private:
it appears only in confirmation emails to confirmed RSVPs and in your
own host view — never on the public site or in any public data.
Screenings at a home are members-only. A screening you host at
your place is shown only to signed-in members. It is not listed on the
public site and it is not written to the public data files. A theater
meetup is public, because a theater is a public place.
Beta feedback — if you use the feedback form, we store your
message, its category, and which page you sent it from. Signed-out
feedback is stored with no identity at all. If you're signed in, we
also attach your name and email so we can follow up — unless you tick
Send anonymously, which keeps your identity out of it.
Voice recordings — if you submit a clip on the
Speak page for the podcast, we store
the audio itself plus your display name, when you sent it, and either
the prompt you answered or — if you sent us a message instead of
answering the round — the subject and any note you wrote for it.
Alongside that we keep the technical details of the file: its format,
its size, its length, and your Letterboxd handle if you have linked
one. Submitting requires ticking an explicit consent box: the clip may
be aired on the club podcast, credited to your display name. Nothing is
aired automatically — a club admin listens first. Each clip is also
transcribed as soon as it arrives, by speech-recognition software
running on a computer the club's organizer owns: your audio is never
sent to a transcription service or an AI company. That transcript is a
rough draft for captions — a club admin checks it before any captions
are used — and it is stored beside the audio and deleted with it. Your voice is inherently identifying, so we treat
clips with the strictest deletion rules on this page (below).
Where it lives
Your email, RSVP records, and host addresses are stored privately in
Cloudflare Workers KV. Your email is never published in the public
members list or committed to the public GitHub repository. What
is public: your display name, pronouns, Letterboxd handle, your
member id, and which screenings you attended — on the site and in the
repository's public data/*.json files. Attendance records
your member id and display name, never your email.
How we use your email
One-time login codes when you sign in.
Screening emails you asked for: RSVP confirmations (these include the
host's address), and updates or cancellations for screenings you've
RSVP'd to.
Club announcements — only if you opt in, via the checkbox at
signup or the toggle on your account page. Every announcement includes
a one-click unsubscribe link. Opting out never affects login codes or
RSVP emails.
We never sell, rent, or share your email with anyone.
Cookies and tracking
We set no cookies and run no analytics or trackers. Three
small entries in your browser's localStorage
(jxnfc_session, jxnfc_otp_inflight,
jxnfc_privacy_ack) keep you signed in and remember which
version of this policy you've already seen; they stay on your device,
and the sign-in entries are cleared when you sign out. One more entry,
jxnfc_next, is written only while you are logging in, so we
can put you back on the page you started from; it lives in this tab's
sessionStorage and disappears when you close the tab.
One exception worth naming: the homepage embeds our podcast via a Spotify
player, and Spotify sets its own cookies inside that frame — see
Spotify's privacy
policy.
Third parties
Cloudflare hosts the membership service and its storage. Its
standard infrastructure logs record request metadata (like IP
addresses) under Cloudflare's own retention.
Resend delivers our email. We don't keep contact lists
there — it only sees each message as it's sent.
GitHub hosts the public site and the public data files.
Google proxies images in Gmail. If you read our newsletter in
Gmail, Google fetches any flyer image through its own servers rather
than letting us see your request.
TMDB serves the film poster images your browser loads.
Letterboxd is the source of the public film activity we show;
we only read what you've already made public there.
Spotify powers the podcast player on the homepage (see
above).
How long we keep things
Flyer images we put in a newsletter stay up indefinitely, at a
public link. That is deliberate rather than careless: most mail apps
re-fetch an image from us every time the email is opened, so deleting one
would silently break a newsletter someone received months ago. The link
is a long random string, unguessable and not listed anywhere, but anyone
holding it can view the image. These are event flyers and club artwork —
we do not put anything about you in them.
Login codes expire after 10 minutes; sign-in sessions after 1 hour.
If you tick Remember my login on this device at sign-in, that
device stays signed in for up to 30 days of inactivity — signing out
(or deleting your membership) revokes it immediately.
30 days after an event, we automatically delete its RSVP
list (the emails — guest emails included) along with any host address
and notes. That applies to club events that took RSVPs exactly as it
does to member-hosted screenings. What stays is the names-only
attendance history — the club's record of who came.
Your email stays as long as your membership does, and goes when you
delete it (below).
Our newsletter log keeps only the subject line and recipient count —
never addresses.
Every newsletter is also published at a shareable link, so you
can forward one to someone who is not a member and so it still reads if
your mail app clips or mangles it. The link is in the footer of the
email. It holds the same announcement everyone received — never your
address, and never your personal unsubscribe link. The link is a long
random string and is not listed anywhere, but anyone holding it can read
that newsletter, and it stays up indefinitely.
Your Letterboxd activity is a mirror, not an archive. We cache
what your public feed currently serves, refreshed continuously; when an
entry falls out of that feed it falls out of ours. Unlinking your
Letterboxd handle, or deleting your membership, drops your entries
immediately.
Feedback deletes itself after 90 days — usually sooner, once
we've read and handled it.
Voice recordings delete themselves 60 days after you submit
them — every clip, including ones we approved but never used, and
messages exactly the same as answers to a prompt. The
deletion is a storage-level expiry rule, not a cleanup script that
could silently break. A clip that was aired persists only as
part of that published episode's audio; the original upload still
deletes on the same 60-day clock. Replacing your clip restarts the
clock for the new recording.
Your choices
Delete your membership yourself, instantly — the danger zone on
your account page removes your
email, profile, and upcoming RSVPs on the spot. Any feedback you sent
keeps its text but loses your name and email in the same moment.
Optionally, you can also anonymize your name in past attendance
lists — with one exception, next.
Screenings you hosted keep your name. For a theater meetup the
listing itself is public and reads Hosted by …. A screening at
your home is shown only to members, but hosting it still puts your name
in that screening's attendance list, and attendance is public. Either
way your name ends up on the public record of who was there. The
anonymize option above does not remove it, and deleting your
membership does not either. If you want your name off screenings you
hosted, ask us directly at
privacy@jxnfilm.club — we
do those by hand, one request at a time.
Unsubscribe from announcements — one click from any
announcement email, or the toggle on your account page.
Cancel an RSVP — one click from the confirmation email, or from
the event page.
Added as a guest and don't want to be? — one click on the
removal link in the confirmation email takes you off the list, and the
30-day deletion above erases the email record either way. The host can
also remove you on request.
Delete or replace your voice clip — anytime before it's used,
right on the Speak page, and the same
for any message you sent us: each one is listed there and deleted on
its own. You can keep up to five messages waiting on us at a time.
Deleting your membership deletes your clips, your messages and any
transcripts of them with it, immediately and completely — a voice
can't be anonymized, so we don't try.