Privacy policy

Pocket Film School is a film-craft course. You sign in with Google. We store your name, email and avatar, your progress and quiz scores, and any shooting-assignment work you save. We measure how the app is used with PostHog, including recordings of sessions, and we run no advertising trackers and sell nothing. The app sends you no email. You can download everything we hold about you, or delete your account, yourself from your account page.

Account. Your email address, name and avatar link, as Google reports them (refreshed each time you sign in), a role (user or owner), and when the account was created and last changed. We never see your Google password.

Progress. For each module, which lessons you have completed, your quiz score and your Film IQ.

Shooting assignments. The shots you plan, the rubric items you tick, the notes you type, and the assignment’s status.

Feedback. If you send feedback we store your message, its kind, the page you were on, a link to the PostHog recording of that moment, your PostHog id, your browser’s user agent, and a salted hash of your IP address (used only to count submissions per source per hour). Signed-out visitors may also leave an email address for a reply; signed-in students are not asked for one. The account page says what happens to feedback when you delete an account.

Account log. A record of account actions, such as signing out everywhere, finishing onboarding, or deleting the account, kept against your account id with the time and, for some actions, a salted hash of your IP address. It holds no name or email. The site owner’s views of student records and feedback are logged here too. This log is append-only and is not removed when you delete your account.

Error log. Server errors are written to a short-lived table of the error message and the route that failed, emailed to the site owner in a digest, and removed seven days after they are recorded. They carry no account details.

What we do not store. No passwords, no payment details (nothing here is for sale), and no uploads: the only files kept are film posters.

Every visitor, signed in or not, loads PostHog’s analytics library. It records page views, clicks, mouse-position heatmaps, page-load performance, and errors, and it records sessions so a bug can be replayed. Text typed into fields is masked in recordings, as are the name and email shown in your account menu and on your account page, and the browser console is not recorded. Sign-in codes and the page you were heading to are stripped from every address before it is sent.

Until you sign in, PostHog knows you only by a random id. Once you sign in it uses your account id and your role, nothing else: no name and no email. The server also reports these events under that id: signing in and out, completing or un-completing a lesson, submitting a quiz (module, number correct, score), saving an assignment (assignment, status, number of shots), finishing onboarding, sending feedback, and server errors with their message, route and stack trace.

Your browser talks to PostHog through this site’s own address, which forwards the request without your cookies and with the referring address cut down to its path. Your IP address still goes along with it, as with any web request. There is no consent banner and no opt-out switch in the app: a content blocker will stop the analytics, or ask us to delete what PostHog holds for you.

These are the only services that receive personal data. Fonts and film posters are served from this site itself, with no font or image CDN.

One cookie holds your sealed, encrypted session; it keeps you signed in for up to 30 days and the app does not work without it. A second cookie remembers the page you were heading to while you sign in and lasts five minutes. PostHog keeps its random id (and, once you sign in, your account id) in first-party cookies and browser storage on this site. Your light or dark choice is kept in browser storage. There are no advertising or cross-site cookies.

Your account, progress and assignment work are kept until you delete your account, and then they are hard-deleted. Feedback keeps its text but loses its link to you, your email, IP hash, user agent, recording link and PostHog id. The account log stays, as described above. Error-log rows go seven days after they are recorded. PostHog keeps events and recordings under its own retention settings, and deleting your account does not delete what it already holds; ask us and we will have it removed.

From your account page you can download a JSON file of your profile, progress, assignments, feedback and account log; sign out of every other device; and delete your account, which signs you out everywhere. Nothing needs to be requested or waited for. For anything else, such as feedback you sent while signed out, a correction, or PostHog data, email us. If you are in the UK, the EU or a similar jurisdiction you may also complain to your data protection authority.

Pocket Film School — jeremy.ettlinger@gmail.com