Privacy Notice
Last updated November 12, 2026
This Privacy Notice for James Quintanilla (doing business as iMonstre) (“we,” “us,” or “our”) describes how and why we may access, collect, store, use, and share (“process”) your personal information when you use our services (“Services”), including when you:
- Visit our website at https://imonstre.com or any website of ours that links to this Privacy Notice
- Use iMonstre, a horror blog and member community with fear profiles, trophies, watch lists, and horror movie recommendations
- Contact us or engage with us in other related ways
Questions or concerns? Reading this Privacy Notice will help you understand your privacy rights and choices. We are responsible for making decisions about how your personal information is processed. If you do not agree with our policies and practices, please do not use our Services. If you still have questions or concerns, contact us at info@imonstre.com.
Summary of key points
What personal information do we process? Your email address, @name, password (stored in scrambled form), fear profile, and the lists, ratings, and opinions you add. Learn more about what we collect.
Do we process sensitive personal information? We do not ask for your race, religion, health, sexual orientation, or similar details. Some laws treat account log-in details as sensitive, and we do process those so you can log in.
Do we collect information from third parties? Only if you choose to log in with Google. Google then gives us your name, email address, and, if you have one, your profile photo.
How do we process your information? To run your account and the Services, recommend movies, communicate with you, keep the site secure, and comply with law. Learn more about how we process your information.
With whom do we share it? Only with the companies that help us run iMonstre and in the specific situations we describe. We do not sell your personal information. Learn more about sharing.
How do we keep it safe? We use organizational and technical safeguards, but no website can be guaranteed 100% secure. Learn more about how we protect your information.
What are your rights? Depending on where you live, you may have rights over your personal information. Learn more about your privacy rights.
How do you delete your account? Go to Profile → ⚙ → Account → Delete account. Learn more about what is deleted and what is kept.
1. What information do we collect?
Personal information you disclose to us
In short: We collect the personal information you provide to us.
We collect personal information you voluntarily provide when you create an account, complete your profile, use member features, or contact us. It may include:
- Email address
- Your @name and any previous @name, which we hold for 14 days after a change
- Password, stored only in scrambled form
- Your fear profile, including your gore level, the horror types you love, and your hard passes
- Your chosen monster and profile look
- Items on your Slab and Watched list, including titles you type in, progress, and notes
- Ratings, gore scores, and written opinions
- Votes you cast on other members’ opinions
- The date you agreed to our Terms and this Privacy Notice
- The member who invited you, if you joined through an invitation link
- Your name, email address, and message when you use our Contact page
All personal information you provide must be true, complete, and accurate. Please do not include sensitive details about yourself or anyone else in a written opinion or message.
Information from Google log-in
If you choose to sign up or log in with Google, Google gives us your name, email address, and, if you have one, your profile photo. We use this to create and secure your account.
Information created as you use iMonstre
We record your trophies, your movie picks and skips, and the blog posts you read to the end, so these features can work.
Information automatically collected
In short: Some information, such as your IP address and browser details, is collected automatically when you use the Services.
- Devices you are logged in on. We store the IP address (your device’s internet address) and a description of the browser and device for each log-in, to keep your account secure and to alert you to new log-ins.
- Security counts. We count repeated attempts at actions such as logging in. The email address or IP address in those counts is stored only as a one-way scrambled code.
- Server logs. Our hosting providers automatically process technical information, such as IP address, browser type, pages requested, and error reports, to deliver and protect the site.
We do not use GPS or request your device’s precise location. We do not use third-party advertising trackers or third-party analytics on iMonstre.
Cookies and browser storage
A cookie is a small note a website saves in your browser. We use one to keep you logged in for up to 30 days after your last visit. If you are just reading the blog, we set no cookies. Your browser also stores your reading text size, your unfinished sign-up answers, and whether you closed our cookie notice on your own device. Companies whose players you choose to tap may set their own cookies, as explained in section 4. Cloudflare Turnstile, our bot check, may process device and browser signals to tell people from automated programs.
2. How do we process your information?
In short: We process your information to provide and secure the Services, communicate with you, and comply with law.
- To create and manage your account, including confirming your email address and letting you log in.
- To deliver the Services, including your profile, trophies, Slab, Watched list, reading progress, and horror movie recommendations based on your fear profile.
- To build community gore ratings by combining members’ gore scores and thumbs for each film.
- To let members interact through opinions and votes.
- To respond to you when you contact us.
- To send necessary account emails, such as confirmation links, password resets, new log-in alerts, and account deletion messages. We do not currently send marketing emails.
- To protect our Services, including bot checks, limits on repeated attempts, and investigating misuse.
- To save or protect an individual’s vital interests, such as to prevent harm.
- To comply with the law and enforce our Terms and Conditions.
3. What legal bases do we rely on to process your information?
In short: We process your personal information only when we believe it is necessary and we have a valid legal reason to do so.
If you are located in the EU or UK
The General Data Protection Regulation (GDPR) and UK GDPR require us to explain the legal bases we rely on. We may rely on:
- Consent. Where you have given us permission for a specific purpose. You can withdraw your consent at any time.
- Performance of a contract. Where processing is necessary to provide the Services you asked for.
- Legitimate interests. Where processing is reasonably necessary and does not outweigh your interests and fundamental rights, such as keeping iMonstre secure, preventing fraud, diagnosing problems, improving the Services, and producing community gore ratings.
- Legal obligations. Where we must comply with the law, cooperate with authorities, or exercise or defend legal rights.
- Vital interests. Where necessary to protect someone’s vital interests, such as a threat to a person’s safety.
If you are located in Canada
We may process your information with your express consent, or where your consent can be implied. You can withdraw your consent at any time. In exceptional cases, applicable law may permit processing without consent, including:
- If collection is clearly in an individual’s interests and consent cannot be obtained in a timely way
- For investigations and fraud detection and prevention
- For business transactions, provided certain conditions are met
- If contained in a witness statement and necessary to assess, process, or settle an insurance claim
- For identifying injured, ill, or deceased persons and communicating with next of kin
- If we have reasonable grounds to believe an individual has been, is, or may be a victim of financial abuse
- If obtaining consent would compromise the availability or accuracy of the information and collection is reasonable to investigate a breach of an agreement or a contravention of law
- If disclosure is required to comply with a subpoena, warrant, court order, or rules of court
- If produced by an individual in the course of their employment, business, or profession and collection is consistent with that purpose
- If collection is solely for journalistic, artistic, or literary purposes
- If the information is publicly available and specified by regulation
- Where de-identified information is disclosed for approved research or statistics, subject to ethics oversight and confidentiality commitments
5. Is your information transferred internationally?
In short: We may transfer, store, and process your information in countries other than your own.
Our servers are located in the United States. Your information may also be processed by the companies listed in section 4 in the United States and other countries.
If you live in the European Economic Area (EEA), United Kingdom (UK), or Switzerland, these countries may not have data protection laws as comprehensive as yours. We will take reasonable steps to protect your information in line with this Privacy Notice and applicable law, including relying on our providers’ transfer safeguards, such as the European Commission’s Standard Contractual Clauses, where they apply.
6. How long do we keep your information?
In short: We keep your information for as long as you have an account, unless a longer period is required by law or the information can no longer identify you.
- Accounts: until you delete your account or we close it.
- Accounts never confirmed by email: removed after 7 days.
- Contact messages: kept in our email for as long as needed to respond and keep a record of the conversation.
- Ratings without a name: kept after account deletion, as explained in section 14. They can no longer be connected to you.
- Backups: we keep locked (encrypted) copies of our database for up to 90 days, then they are deleted automatically. If you delete your account, your information stays in those copies until they expire. We use them only to recover from a technical problem, and if we ever restore one, we delete again every account that was deleted since that copy was made.
When we no longer need personal information, we will delete it or make it anonymous. If that is not immediately possible, for example because it is in a backup, we will store it securely and isolate it from further processing until deletion is possible.
7. How do we keep your information safe?
In short: We aim to protect your personal information through organizational and technical security measures.
We have implemented reasonable safeguards, including scrambled passwords, email confirmation, bot checks, limits on repeated attempts, and new log-in alerts. However, no electronic transmission or storage technology can be guaranteed to be 100% secure, and we cannot promise that unauthorized third parties will never defeat our security. You use the Services at your own risk and should access them only from a secure environment.
8. Do we collect information from minors?
In short: iMonstre is for adults. We do not knowingly collect data from or market to anyone under 18.
iMonstre includes graphic horror content. Members must confirm they are at least 18 when creating an account. If we learn that we have collected personal information from someone under 18, we will close the account and take reasonable steps to promptly delete the data. If you become aware of such data, please contact us at info@imonstre.com.
9. What are your privacy rights?
In short: Depending on where you live, you may have rights that give you greater access to and control over your personal information.
In some regions, including the EEA, UK, Switzerland, and Canada, these may include the right to access and obtain a copy of your personal information, to request correction or erasure, to restrict processing, to data portability, to object to processing, and not to be subject to certain automated decisions. We do not make decisions with legal or similarly significant effects solely by automated means. To make a request, use the details in section 13. We will consider and act on any request in accordance with applicable law.
If you are in the UK and are unhappy with how we handled your information, you can complain directly to us by email at info@imonstre.com or by post at the address in section 13. We will acknowledge your complaint within 30 days, investigate without unjustifiable or excessive delay, keep you informed, and explain the outcome. If you are not happy with our final response, you can refer your complaint to the Information Commissioner’s Office:
- Website: ico.org.uk/make-a-complaint
- Helpline: 0303 123 1113
- Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
If you are in the EEA or UK and believe we are unlawfully processing your information, you may complain to your Member State data protection authority or the UK data protection authority. If you are in Switzerland, you may contact the Federal Data Protection and Information Commissioner.
Withdrawing your consent: Where we rely on your consent, you may withdraw it at any time by contacting us using the details in section 13. This will not affect processing that happened before withdrawal or processing based on other lawful grounds.
Marketing emails: We do not currently send them. If that changes, each marketing email will include an unsubscribe link. We may still send messages needed to run your account.
Account information
You can review or change your profile in the Profile tab, or delete your account at any time. If you have questions about your privacy rights, email us at info@imonstre.com.
10. Controls for Do-Not-Track features
Many browsers include a Do-Not-Track (“DNT”) setting that signals a preference not to have your browsing monitored. No uniform standard for recognizing DNT signals has been finalized, so we do not currently respond to them. If a standard we must follow is adopted, we will describe it in a revised version of this Privacy Notice. California law requires us to tell you how we respond to DNT signals, and this section is our disclosure.
11. Do United States residents have specific privacy rights?
In short: Residents of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, or Virginia may have the right to access, correct, obtain a copy of, or delete their personal information, and to withdraw consent. These rights may be limited by law.
Categories of personal information we collect
This list shows the categories we collect. For the full inventory, see section 1.
- A. IdentifiersYES
Email address, @name, account ID, name from Google log-in, and Internet Protocol (IP) address
- B. California Customer Records informationYES
Name and contact information
- C. Protected classification characteristicsNO
Gender, age, date of birth, race, ethnicity, national origin, or marital status
- D. Commercial informationNO
Transaction information, purchase history, and payment information
- E. Biometric informationNO
Fingerprints and voiceprints
- F. Internet or other network activityYES
Your activity on iMonstre, such as posts read to the end, movie picks, ratings, and votes
- G. Geolocation dataNO
Precise device location
- H. Audio, electronic, or similar informationNO
Audio, video, or call recordings of you
- I. Professional or employment informationNO
Job title, work history, and business contact details
- J. Education informationNO
Student records and directory information
- K. Inferences from collected informationYES
Your fear profile and the movie recommendations built from it
- L. Sensitive personal informationYES
Account log-in information only
We keep the categories marked YES for as long as you have an account, except as described in section 6. We do not use sensitive personal information to infer characteristics about you.
Sources, use, and sharing
Learn about the sources of personal information in section 1, how we use it in section 2, and who receives it in section 4. In the past twelve months, we have not sold personal information or shared it for targeted advertising. We may disclose categories A, B, F, K, and L to the service providers listed in section 4 for business purposes.
Your rights
Under certain US state laws, and with exceptions allowed by law, you may have the right to:
- Know whether we are processing your personal data
- Access your personal data
- Correct inaccuracies in your personal data
- Request deletion of your personal data
- Obtain a copy of the personal data you shared with us
- Non-discrimination for exercising your rights
- Opt out of targeted advertising, the sale or sharing of personal data, or profiling in furtherance of decisions with legal or similarly significant effects
Depending on your state, you may also have the right to:
- Access the categories of personal data being processed (including in Minnesota)
- Obtain a list of categories of third parties to which we disclosed personal data (including in California, Delaware, and Maryland)
- Obtain a list of specific third parties to which we disclosed personal data (including in Minnesota and Oregon)
- Obtain a list of third parties to which we sold personal data (including in Connecticut)
- Review, understand, question, and in some states correct how personal data was profiled (including in Connecticut and Minnesota)
- Limit the use and disclosure of sensitive personal data (including in California)
- Opt out of the collection of sensitive data and data collected through voice or facial recognition (including in Florida)
How to exercise your rights
Email us at info@imonstre.com, use the Contact page, or write to the address in section 13. You can also delete your account from your account settings. Under certain state laws, you may use an authorized agent. We may deny a request from an agent who does not provide proof of valid authorization.
Request verification
We will need to verify your identity before acting on a request and will use the information you provide only for that purpose. If we cannot verify you from information we already hold, we may ask for more information for identity, security, or fraud-prevention purposes. If you use an authorized agent, we may need additional verification and your signed permission.
Appeals
If we decline to act on your request, you may appeal by emailing info@imonstre.com. We will tell you in writing what action we took or did not take and why. If your appeal is denied, you may submit a complaint to your state attorney general.
California “Shine the Light” law
California Civil Code Section 1798.83 permits California residents to request, once a year and free of charge, information about personal information disclosed to third parties for direct marketing in the preceding calendar year. To make a request, write to us using the details in section 13.
12. Do we make updates to this notice?
In short: Yes, as needed to stay accurate and comply with the law.
We will show the new “Last updated” date at the top of this page. If we make material changes, we may post a prominent notice or notify you directly. Please review this Privacy Notice from time to time.
13. How can you contact us about this notice?
Email us at info@imonstre.com, or write to us at:
James Quintanilla10910 Long Beach Blvd
STE 103-601
Lynwood, CA 90262
United States
14. How can you review, update, or delete the data we collect from you?
Based on the laws where you live, you may have the right to request access to your personal information, details about how we processed it, corrections, or deletion, and to withdraw your consent. To make a request, email info@imonstre.com. You can update your profile yourself in the Profile tab, and download a copy of your data at any time under You → Account → Download my data.
Deleting your account
You can delete your account yourself at any time:
- Go to Profile → ⚙ → Account → Delete account.
- Ask us to email you a delete link. The link can be used once and works for 1 hour.
- Open the link and confirm by tapping “Delete my account for good.”
Your account is deleted immediately and permanently. This cannot be undone. We will send a final email confirming the deletion.
What is deleted: your account details (email address, @name, password, and Google link), log-ins, fear profile, trophies, Slab, Watched list, written opinions, votes you cast, votes on your opinions, movie picks, and posts read.
What is kept without your name: for films we can identify, we keep your most recent gore score and 👍/👎 so our community gore ratings stay accurate. They are stored with a random code, without your name, email address, or @name, and cannot be traced back to you. Titles you typed by hand and your written opinions are not kept.
As described in section 6, deleted information may remain in secure backups for up to 90 days, and we may keep information where the law requires it.
This Privacy Notice was adapted from a policy created using Termly’s Privacy Policy Generator.