Movie Crew01. Scope and certification status
Movie Crew is a movie-outing and crew-planning service operated by Streamwalkers Corporation in San Antonio, Texas. This page covers the website at movie.streamwalkers.com and the connected Movie Crew app.
This is a description of current service controls, not an independent audit report. Movie Crew does not claim SOC 2, ISO 27001, ISO 42001 or PCI-DSS certification. A hosting provider’s certification does not certify this application.
02. Account and crew access
- Accounts use hashed passwords and expiring sessions. Verification and password-recovery links are single-use and time-limited.
- Administrator, editor and viewer roles determine which crew actions an account can perform. Server-side checks restrict access to crew records and administrative features.
- Session cookies use Secure, HttpOnly and SameSite protections. State-changing requests use request-verification checks.
- When Google sign-in is offered, the service validates the returned identity before granting account access.
03. Ticket recognition and human review
The website reads selected ticket screenshots on your device using optical character recognition (OCR). The reader can misread movie titles, dates, times, screens and seat numbers. Every extracted showing is presented for review before it is added to a plan.
Ticket screenshots, their QR codes and raw recognized text are not uploaded by this reading workflow. Editable draft fields may be held in the browser’s session storage for recovery. Saving a showing sends the reviewed fields to the service. Poster uploads are a separate feature and are stored for your crew.
04. Hosting and application safeguards
The service uses IONOS hosting and a MariaDB database. HTTPS protects connections to the website. The application checks authentication before serving private plans and posters, restricts uploaded poster formats, uses parameterized database queries, and records selected account and security events.
No website can guarantee uninterrupted operation or complete protection against every threat. This page does not assert a specific encryption-at-rest configuration, continuous security monitoring, or a completed independent penetration test.
05. Privacy and account control
Crew members should enter only information they are authorized to share. Names, optional contact details, movie plans and seat assignments are available to authorized members of the relevant crew. Sharing an itinerary through another app puts that copy under the recipient’s and that provider’s control.
Account deletion removes account-linked records from the live service; some shared records and provider backups may remain as explained in the Privacy Policy. Privacy requests can be sent to moviecrew@streamwalkers.com.
06. Ticket purchases and payment security
Movie Crew records plans, seat assignments and optional ticket costs. It does not issue theater tickets, guarantee admission or process theater-ticket payments. Purchases, refunds and ticket changes take place with the theater or ticket seller. Do not enter payment-card numbers, security codes or financial account credentials in crew fields.
07. Service communications
Verification, password recovery and account-related emails support use of the service. Itinerary sharing is initiated by the user through their selected communication app. Use those tools only for recipients who expect to hear from you; they are not intended for unsolicited bulk messaging.
08. Report a security concern
Email moviecrew@streamwalkers.com with “Security” in the subject and a description of the affected feature. Do not send passwords, reset links, complete ticket barcodes or other people’s private records. Do not test against another crew’s data or interrupt the service.