Privacy Policy

The data controller for personal data collected directly through this game is the operator of Movie Draft, an independent project based in Poland.

For privacy requests, support, or feedback, email gamemoviedraft@gmail.com. Please use the subject “Privacy request” for access, correction, objection, restriction, portability, or deletion requests.

Your current draft, recent game history, achievements, settings, and an anonymous Daily Challenge identifier are stored in your browser’s local storage. They remain on that browser unless you clear site data or use Reset Progress.

If you choose Sign in with ChatGPT, the hosting platform provides an account identifier, email address, and optional display name. Movie Draft uses the account identifier to save and restore your game progress. Your email and display name are shown in the interface but are not written into the game-progress record.

Daily submissions contain the challenge code, selected roles and people, and reroll history so the server can reproduce and verify the result. The stored leaderboard record uses a one-way player hash and selection hash, plus the resulting scores, box office, and awards. It does not store the submitted crew names or your email address.

The ranking may include system-generated benchmark drafts. These are produced by the same game engine, obey the same budget and reroll rules, and pass the same server verification as player results. They provide a stable comparison pool and are not user accounts.

Local progress and optional account sync are processed to provide the game and the cross-device save feature you request (Article 6(1)(b) GDPR). Daily ranking data, fraud prevention, result verification, service security, and basic service operation are processed for the legitimate interests of operating a fair and secure game (Article 6(1)(f) GDPR).

Messages sent to the support address are processed to answer your request and manage the service, based on steps taken at your request and the legitimate interest in providing support. Data may also be processed when necessary to comply with a legal obligation (Article 6(1)(c) GDPR).

Creating an account is optional. You can play without providing account information. Game scoring is automated, but it is used only for entertainment and ranking and does not produce legal or similarly significant effects.

Movie Draft does not use advertising cookies or third-party analytics trackers. A consent banner is therefore not shown. The hosting and optional sign-in systems may use strictly necessary security or authentication cookies.

OpenAI processes hosted data on behalf of the Movie Draft operator to host, maintain, authenticate, and support the published site. OpenAI may use its listed sub-processors, including infrastructure and content-delivery providers such as Cloudflare. You can review the ChatGPT Sites Data Processing Addendum and the current OpenAI sub-processor list.

Google provides the Gmail service used to receive support and privacy messages. Personal data may also be disclosed where required by law or necessary to establish, exercise, or defend legal claims. Movie Draft does not sell personal data or share it for targeted advertising.

Hosted data may be processed outside the European Economic Area by OpenAI affiliates or sub-processors. Under the ChatGPT Sites Data Processing Addendum, applicable transfers are protected through European Commission adequacy decisions or Standard Contractual Clauses. Support email may be processed in locations used by Google under its applicable privacy and transfer safeguards.

Browser data remains until you use Reset Progress, clear site data, or remove it through browser controls. Synced progress is kept while the feature is used and until you reset it, request deletion, or the service no longer needs it to provide sync. Daily ranking records are retained while the corresponding historical leaderboard remains available or until they are no longer needed for ranking integrity; records may then be deleted or irreversibly aggregated.

Support and privacy correspondence is normally kept for up to 12 months after the request is closed, unless a longer period is needed to comply with law or handle a claim. Hosting security logs are retained according to the hosting provider’s applicable terms and security requirements.

Depending on the law that applies to you, you may request access to your personal data, correction, deletion, restriction of processing, portability, or object to processing based on legitimate interests. Where processing relies on consent in the future, you may withdraw that consent at any time without affecting earlier lawful processing.

Send a request to gamemoviedraft@gmail.com. Include enough information to identify the relevant account or Daily Challenge entry, but do not send passwords or sensitive documents unless specifically requested. Identity may need to be verified before a request is completed. Requests will be answered within the period required by applicable law, normally one month under GDPR.

Anonymous leaderboard data may be difficult or impossible to associate with you if the browser identifier has been deleted. This protects player privacy but may prevent identification of a specific anonymous record.

If you believe your data has been processed unlawfully, please contact Movie Draft first so the issue can be investigated. You also have the right to lodge a complaint with the supervisory authority in your country of residence, work, or the alleged infringement. In Poland this is the President of the Personal Data Protection Office (UODO). See UODO complaint information.

Traffic is served over HTTPS, input is validated on the server, and game results are recomputed before entering the ranking. No internet service can promise absolute security. Material changes to these practices will be reflected on this page with a revised date.