Jackson Film Club ("we") operates
jxnfilm.club and the membership service
at join.jxnfilm.club. We're a
small film club in Jackson, Mississippi — not a data company. This page
explains, in plain language, exactly what we collect and what happens
to it.
What we collect
Email address — for one-time login codes, and (only if you opt
in) club announcements.
Display name, plus optional pronouns and a
Letterboxd username — whatever you choose to show on your member
card. The Letterboxd handle is also used to fetch your public Letterboxd
activity for the Watched page.
RSVP records — when you RSVP to a member-hosted screening, we
record your name, email, and the time you RSVP'd, so the host knows
who's coming and we can email you the details.
Guest RSVPs — a host (or a club admin) can add a non-member
guest to their screening's list by name, optionally with an email the
guest gave them. A name-only guest has no email stored at all. If an
email is given, we send one confirmation that says who added you, with
the screening details and a one-click removal link — that's your
opt-out, no account needed. Guest names appear in the attendance list
the same way member names do.
Host addresses — if you host a house screening, you give us the
street address and any notes (parking, entry). The address is private:
it appears only in confirmation emails to confirmed RSVPs and in your
own host view — never on the public site or in any public data.
Beta feedback — if you use the feedback form, we store your
message, its category, and which page you sent it from. Signed-out
feedback is stored with no identity at all. If you're signed in, we
also attach your name and email so we can follow up — unless you tick
Send anonymously, which keeps your identity out of it.
Where it lives
Your email, RSVP records, and host addresses are stored privately in
Cloudflare Workers KV. Your email is never published in the public
members list or committed to the public GitHub repository. What
is public: your display name, pronouns, Letterboxd handle, and
which screenings you attended (names only) — on the site and in the
repository's public data/*.json files.
How we use your email
One-time login codes when you sign in.
Screening emails you asked for: RSVP confirmations (these include the
host's address), and updates or cancellations for screenings you've
RSVP'd to.
Club announcements — only if you opt in, via the checkbox at
signup or the toggle on your account page. Every announcement includes
a one-click unsubscribe link and the club's postal address (as CAN-SPAM
requires). Opting out never affects login codes or RSVP emails.
We never sell, rent, or share your email with anyone.
Cookies and tracking
We set no cookies and run no analytics or trackers. Three
small entries in your browser's localStorage
(jxnfc_session, jxnfc_otp_inflight,
jxnfc_privacy_ack) keep you signed in and remember which
version of this policy you've already seen; they stay on your device,
and the sign-in entries are cleared when you sign out.
One exception worth naming: the homepage embeds our podcast via a Spotify
player, and Spotify sets its own cookies inside that frame — see
Spotify's privacy
policy.
Third parties
Cloudflare hosts the membership service and its storage. Its
standard infrastructure logs record request metadata (like IP
addresses) under Cloudflare's own retention.
Resend delivers our email. We don't keep contact lists
there — it only sees each message as it's sent.
GitHub hosts the public site and the public data files.
TMDB serves the film poster images your browser loads.
Letterboxd is the source of the public film activity we show;
we only read what you've already made public there.
Spotify powers the podcast player on the homepage (see
above).
How long we keep things
Login codes expire after 10 minutes; sign-in sessions after 1 hour.
If you tick Remember my login on this device at sign-in, that
device stays signed in for up to 30 days of inactivity — signing out
(or deleting your membership) revokes it immediately.
30 days after a screening, we automatically delete its RSVP
list (the emails — guest emails included) and the host's address and
notes. What stays is the names-only attendance history — the club's
record of who came.
Your email stays as long as your membership does, and goes when you
delete it (below).
Our newsletter log keeps only the subject line and recipient count —
never addresses.
Feedback deletes itself after 90 days — usually sooner, once
we've read and handled it.
Your choices
Delete your membership yourself, instantly — the danger zone on
your account page removes your
email, profile, and upcoming RSVPs on the spot. Any feedback you sent
keeps its text but loses your name and email in the same moment.
Optionally, you can also anonymize your name in past attendance
lists.
Unsubscribe from announcements — one click from any
announcement email, or the toggle on your account page.
Cancel an RSVP — one click from the confirmation email, or from
the event page.
Added as a guest and don't want to be? — one click on the
removal link in the confirmation email takes you off the list, and the
30-day deletion above erases the email record either way. The host can
also remove you on request.