Index privacy policy
Effective October 12, 2026. Publisher and privacy contact: MUHAMMAD DANIAL BIN KHAIRILAMRI, danial99175@gmail.com.
Information we process
Google sign-in provides an account identifier, name, email, verification status and profile image. Index stores these account details, encrypted provider tokens, browser sessions and authorized application grants in Cloudflare D1. An invited review account instead has an email and a password stored as a one-way hash. Session records can include IP address and browser information. Diary records contain the selected film, watch date, star rating, favourite and poster choices, record identifiers, revisions and timestamps. Recoverably deleted records remain stored.
How information is used and shared
Index uses account information to sign you in, protect access, operate your private diary and respond to support or privacy requests. Other users cannot browse your diary through Index. The operator can access stored information when operating the service or handling a verified request; the service does not provide end-to-end encryption. Cloudflare hosts the app and database. Google processes public sign-in. When you connect Index to ChatGPT, requested tool results, including relevant diary records, are returned to ChatGPT so it can fulfil your request; OpenAI processes them under its own terms and privacy policy.
Movie searches and links
Movie-title searches and selected film identifiers are sent to Wikimedia services. Watch dates, ratings and favourite choices are not part of those lookup requests. Public movie metadata is cached for reuse. Poster requests to Wikimedia image servers disclose the technical information needed to deliver the image, such as an IP address. External source and credit links are governed by the destination service when opened.
Cookies and technical records
Index uses a secure HttpOnly session cookie to keep you signed in and temporary cookies to protect sign-in and authorization. It does not add advertising or analytics trackers. The app applies rate limits and retains authentication records to protect access. Persistent Cloudflare Worker application logging is disabled in the current deployment, but hosting and identity providers can process their own operational and security records. Support messages are held in the support mailbox to handle your request.
Retention and deletion
Active and recoverably deleted diary records are retained until you request permanent erasure; there is no automatic diary purge. Browser sessions expire after seven days unless refreshed. Connected app access tokens last five minutes and refresh grants last up to 30 days. Expiration stops authorization but does not by itself promise immediate removal of database rows. To request access, a copy, correction or permanent deletion, email the privacy contact from your sign-in email. We verify account ownership before fulfilling requests. Account erasure removes the account, grants and diary from the active database. Cloudflare database recovery history may retain earlier copies for up to 30 days. Disconnecting the plugin, signing out, or moving an entry to Recently deleted does not request account erasure.
Age and changes
Index is intended for people aged 13 and older. Do not submit information about children under 13. If you believe such information has been provided, contact us so it can be addressed. Service providers may process data across countries. This page will be updated when the service’s data practices change; the effective date identifies the current version.