Privacy Policy

Classic Nostalgia Shows ("we," "our," or "the site") is a free, ad-supported archive devoted to classic public-domain films and television. This Privacy Policy explains what information we collect when you visit our website or use our mobile app, how it's used, and what choices you have. We aim to be straightforward about this — we collect as little as possible and we don't sell personal data to anyone.

1. Information we collect

We don't require an account, and we don't ask visitors for personal information. The data we collect is limited to the following:

Automatic information

When you visit our pages, your browser automatically sends standard technical information that we and our analytics provider receive, including: your approximate location (country/region, based on IP address), your device type, browser type and version, screen size, the pages you visit on our site, how long you stay, and the referring page that sent you here. We do not log or store full IP addresses.

Information you provide directly

The only place we ask visitors for personal information is the optional email-signup form ("Stay updated") that appears on some pages. If you enter your email address there and submit it, we store the address along with which page you signed up from and the date. We use it only to send occasional updates about new films added to the archive. You can unsubscribe at any time by contacting us, and we never share the list with third parties.

Only the site administrator has a login form, which uses cookies to maintain an authenticated session.

Video playback data

Our films and TV episodes are embedded from YouTube. When you click play, YouTube's player loads inside our page and collects information according to its own privacy policy — including your viewing activity. We don't see or store what you watch beyond aggregate page-view counts.

2. How we use that information

We use the limited information above only to:

• Understand which films, articles, and pages are popular so we can curate and improve the archive
• Diagnose technical problems (slow pages, broken links, browser compatibility)
• Detect abusive traffic such as scraping or brute-force login attempts on the admin panel
• Generate aggregate statistics — never tied to individual visitors — about our audience

We do not:

• Sell or rent personal data to third parties
• Use your data for targeted advertising on or off our site
• Build personal profiles or attempt to identify individual visitors
• Send marketing email (we have no mailing list)

3. Third-party services

A few external services are used to operate the site. Each has its own privacy practices, summarized below.

Google Analytics 4 (GA4)

We use Google Analytics to measure aggregate traffic. GA4 uses cookies and similar technologies to record visit information, including the page URL, referrer, approximate location, device characteristics, and basic engagement signals. Google may transfer this data to servers in the United States or elsewhere. IP addresses are anonymized before storage. You can opt out of Google Analytics tracking globally by installing the official Google Analytics Opt-out Browser Add-on. Google's privacy policy: policies.google.com/privacy.

YouTube (video playback)

Our films play through YouTube's embedded iframe player. The player is loaded in "youtube-nocookie" mode where possible, which limits some tracking. Even so, when you click play, YouTube places its own cookies and collects playback data subject to Google/YouTube's privacy policy. If you don't want YouTube to collect playback data, don't click play — or watch in your browser's private/incognito mode.

Hosting provider

Our site is hosted on a commercial web-hosting service which maintains standard server access logs (IP address, request timestamp, requested URL, user-agent) for security and operational purposes. These logs are typically retained for a few weeks and are accessible only to the host's administrators and us.

Cloudflare and similar CDNs

Some static assets (fonts, JavaScript libraries) load from public content delivery networks such as Google Fonts and cdn.jsdelivr.net. Those networks see your IP address as a routine part of delivering files but do not receive any account or identity information.

4. Cookies and similar technologies

A "cookie" is a small file your browser stores. We use cookies for three reasons:

• Strictly necessary cookies. Only set on the admin login flow — a session cookie keeps the administrator signed in, and a CSRF cookie prevents cross-site request forgery. Visitors to the public site receive no necessary cookies from us.
• Analytics cookies (Google Analytics). Set when GA4 loads. These let us count returning vs. new visitors and measure engagement without identifying anyone.
• YouTube cookies. Set by YouTube when you start playing a video. Controlled by Google, not us.

You can clear or block cookies through your browser's settings. Blocking analytics or YouTube cookies will not break the site — videos will still play, you'll just appear as a brand-new visitor each time to our aggregate stats.

5. Children's privacy

The site is general-audience and may appeal to families. We do not knowingly collect personal information from children under 13 (or under 16 in jurisdictions where that is the applicable age). We have no accounts, forms, or comment areas, so there is no mechanism for any visitor — adult or child — to provide personal data to us directly. If you are a parent or guardian and believe your child has somehow provided us with information, contact us using the address below and we will promptly delete it.

6. Your rights and choices

Depending on where you live (EU, UK, California, and a growing list of other jurisdictions), you may have legal rights regarding personal data, including:

• The right to access any personal data we hold about you
• The right to correction, deletion, or restriction of processing
• The right to object to processing
• The right to data portability
• The right to withdraw consent
• The right to lodge a complaint with a data-protection authority

Because we don't maintain individual visitor profiles, in most cases we don't actually hold data tied to a particular person. But if you'd like to make a request — including an opt-out of analytics tracking via cookie deletion — please use the contact information at the bottom of this page.

7. Data retention

Aggregate analytics data is retained by Google Analytics for up to 14 months under our current configuration. Server access logs are typically rotated and deleted within a few weeks. Administrative session cookies expire after eight hours of inactivity. We retain no personal data beyond what these services automatically collect and discard.

8. Security

We use HTTPS sitewide, modern security headers (HSTS, Content-Security-Policy, X-Frame-Options, and others), and we hash administrator passwords with industry-standard bcrypt. Brute-force login protection is in place on the admin panel. However, no method of transmission over the internet or method of electronic storage is 100% secure — we cannot guarantee absolute security.

9. Changes to this policy

We may update this Privacy Policy from time to time — for example, when we add a new third-party service or when regulations change. The "Last updated" date at the top of this page reflects the most recent revision. We encourage you to review the policy periodically. Continued use of the site after a policy change constitutes acceptance of the revised terms.

10. Contact