Posterflix
Privacy Policy
Last updated 27 October 2026
This is the whole of it, in plain words: what we collect, why we have it, who else sees it, and what you can ask us to do about it.
Who we are
Posterflix sells printed movie and art posters, online at posterflix.in, to addresses in India. If you want to reach a person about anything on this page, write to orders@posterflix.in.
What we collect
When you create an account
Your email address, and your name if you give us one. If you choose a password, we never store the password itself — your browser turns it into a key before it is sent, and we store only a salted hash of that key. Nobody at Posterflix can read or recover your password.
When you sign in with Google
Google sends us three things: your email address, your name, and confirmation that Google has verified the address. That is all we ask for and all we receive. We do not get your Google password, your contacts, your Drive, or anything else in your Google account, and we cannot act on your behalf anywhere in Google.
When you place an order
- The delivery name, 10-digit mobile number, street address, city, state and PIN code you enter.
- Which posters you ordered, in which size and quantity, and the total.
- The order's status over time — paid, printing, shipped, delivered or cancelled.
Payment details
Card numbers, UPI IDs, bank logins and one-time passwords are entered on Razorpay's systems, not ours. They never pass through Posterflix and we could not store them if we wanted to. What we keep is Razorpay's order and payment reference and whether the payment succeeded.
Automatically, as you browse
We use Google Analytics 4 to understand which posters people look at and where the shop confuses them. It records pages viewed, a rough location derived from your IP address (city level, not an address), and your device and browser type. Advertising storage is switched off in our configuration: we run no ads, build no advertising profiles, and share nothing with ad networks.
What we do with it
- Print, pack and deliver your order, and email you when its status changes.
- Let you sign in, see past orders and reuse a saved address.
- Work out your Posterflix Club rank, which counts posters on orders that were paid for and not cancelled or refunded.
- Keep accounts safe — repeated wrong passwords temporarily lock an account.
- Understand how the shop is used, in aggregate, so we can improve it.
We do not sell your data, rent it, or hand it to anyone for their own marketing.
Who else sees it
- Razorpay — payments. They receive what they need to take the payment and guard against fraud.
- The courier — the delivery name, address and mobile number printed on the label. Nothing else.
- Resend — the service that delivers our sign-in codes and order emails. They see your email address and the content of those emails.
- Cloudflare — hosting, the database and image storage. The site runs on their infrastructure.
- Google Analytics — the browsing measurements described above.
- Anyone we are legally required to disclose to, if a valid legal demand is made.
Cookies and what is stored on your device
- Session cookie — set when you sign in, so you stay signed in. It is HttpOnly, meaning no script on the page can read it, and it disappears when you sign out.
- Google Analytics cookies — measurement only. Blocking them does not break the shop.
- Your selection — the posters in your cart live in your browser's own storage on your device. They are not a cookie and are not sent to us until you check out.
How long we keep it
Order records are kept for as long as we need them for accounting, tax and support — in practice a few years. Sign-in codes expire in ten minutes. Sessions expire on their own. If you ask us to close your account, we delete your profile and addresses and keep only the minimum order record the law requires.
Your choices
- See and correct your details — sign in and open My account. Profile and Addresses are editable there.
- Get a copy, or have your data deleted — email orders@posterflix.in from the address on the account. We will respond within 30 days.
- Opt out of analytics — block cookies for this site, or use a browser or extension that blocks Google Analytics. Everything in the shop still works.
Security
The whole site is served over HTTPS. Passwords are hashed, never stored in readable form. Payment details never reach us. Access to the admin panel is limited to the account that runs the shop.
Children
Posterflix is not directed at children under 18, and we do not knowingly collect their data. If you believe a child has given us personal information, write to us and we will remove it.
Changes
If this policy changes we will post the new version here and update the date at the top. Material changes will be mentioned on the shop.
Contact
Questions about privacy, or a request about your data: orders@posterflix.in. See the contact page for how quickly we reply.