CottonCastle

Privacy Policy

Effective date: August 15, 2026

This Privacy Policy applies to the SameScene mobile application and related services operated by CottonCastle ("we", "us", or "Service Provider").

Information We Collect

When you use the Application, we may collect and process the following information:

• Account information, such as your email address, authentication provider, Firebase user ID, login status, age confirmation, and the versions of legal documents accepted when the account is created.
• Profile information, such as username, profile photo, short bio, chat languages, and account preferences.
• Library and matching information, such as selected movies or series, watch status, episode progress, spoiler preference, match openness, automatic match settings, match requests, and chat memberships.
• User-generated content, such as in-app chat messages, reports, and moderation-related information.
• Notification information, such as Firebase Cloud Messaging tokens used to deliver push notifications.
• Search and content interaction information, such as movie or series searches, selected filters, content identifiers, and content pages opened.
• Purchase and subscription information, such as product identifiers, purchase tokens, entitlement status, expiry information, and verification results. We do not receive your full payment card details.
• Device, diagnostic, and performance-related information that may be processed by Google Play services, Firebase services, or AdMob.
• Advertising identifiers, consent choices, and similar device or ad interaction information that may be processed by Google AdMob and Google's User Messaging Platform, depending on your region, choices, device settings, and app version.

We do not collect precise physical location, contacts, calendar events, SMS/MMS content, phone numbers, payment card details, or government identifiers through the Application.

How We Use Information

• Create, authenticate, and manage user accounts.
• Provide profiles, libraries, match requests, automatic match suggestions, chats, and notifications.
• Personalize matching and content-related experiences.
• Maintain safety, prevent abuse, review reports, and support moderation.
• Diagnose technical issues, improve app reliability, and understand app performance.
• Show ads or measure ad performance where AdMob is enabled.
• Verify purchases, provide premium access, and prevent advertising or purchase fraud.
• Comply with legal obligations and respond to lawful requests.

Legal Bases

Where applicable law requires a legal basis, we process information to perform our contract with you, based on your consent, to comply with legal obligations, and for legitimate interests such as securing the service, preventing abuse, supporting users, and improving reliability. You may withdraw consent where consent is the applicable basis, without affecting processing that occurred before withdrawal.

Third-Party Services

The Application uses Firebase Authentication, Cloud Firestore, Firebase Storage, Firebase Cloud Messaging, Google Sign-In, Google Play Services, Google Play Billing, Google AdMob, and Google's User Messaging Platform. These services are used for authentication, database, storage, notifications, sign-in, purchase verification, advertising, and privacy choices. Their providers may process data under their own privacy policies.

SameScene also uses TMDB to search for and retrieve movie and series metadata. Content searches or content identifiers may be sent to TMDB to return relevant results. We do not intentionally send your SameScene profile, chat messages, or email address to TMDB. This product uses the TMDB API but is not endorsed or certified by TMDB.

Data Sharing

We do not sell your personal information for money. Information may be processed by service providers and advertising partners as needed to operate, secure, analyze, monetize, and support the Application. Depending on your region, some advertising disclosures may be treated as "sharing" or targeted advertising under local law. Available ad privacy choices are presented through Google's consent tools and app settings. We may also disclose information if required by law, to protect rights or user safety, investigate fraud or abuse, or respond to a valid legal request.

Advertising and Privacy Choices

Non-premium users may receive personalized or non-personalized ads, depending on consent, region, device settings, and ad availability. Where required, Google's consent form is shown before advertising requests are made. If privacy options are required in your region, you can review or change them from the Application's Settings screen. Premium users do not receive ad requests while their premium status is active.

Data Retention

We retain account and service data while your account is active and for as long as reasonably needed to provide the Application. After an account deletion request is verified, associated personal app data is deleted or de-identified within a reasonable processing period. Limited security, fraud-prevention, transaction, report, or moderation records may be retained where required by law or reasonably necessary to protect users, enforce our terms, resolve disputes, or prevent abuse.

Account Deletion

You can request deletion of your account and associated data at https://movie-app-dec35.web.app/delete-account. You may also contact us at cottoncastleapps@gmail.com from the email address connected to your account.

Deleting your SameScene account does not automatically cancel an active Google Play subscription. Subscriptions must also be canceled through the applicable app store account.

Children

SameScene is intended only for adults aged 18 or older. We do not knowingly permit minors to create or use accounts. If we learn that a person under 18 has provided personal information or is using the Application, we will take steps to restrict the account and delete the information as appropriate, subject to legal and safety obligations.

Security

We use reasonable technical and organizational measures to protect user data. Data transmitted between the Application and Firebase/Google services is encrypted in transit using HTTPS/TLS. However, no method of transmission or storage is completely secure.

International Data Transfers

Your information may be processed in countries other than your country of residence by us or our service providers. Where required by applicable law, appropriate safeguards will be used for international data transfers.

Your Rights

Depending on your location, you may have rights to access, correct, delete, restrict, or object to the processing of your personal data. To exercise these rights, contact us at cottoncastleapps@gmail.com.

California Privacy Rights

If you are a California resident, you may have rights under the CCPA/CPRA, including the right to know, delete, correct, and opt out of certain sharing or targeted advertising. We do not sell personal information for money. To exercise your rights, contact us at cottoncastleapps@gmail.com.

Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the effective date and make the updated policy available through this page.

Contact Us

If you have questions about this Privacy Policy or our privacy practices, contact us at cottoncastleapps@gmail.com.

See also our Terms of Use, Child Safety Standards, and Account Deletion page.