Privacy Policy

The data controller for personal data collected directly through this game is the operator of Movie Draft, an independent project based in Poland.

For privacy requests, support, or feedback, email gamemoviedraft@gmail.com. Please use the subject “Privacy request” for access, correction, objection, restriction, portability, or deletion requests.

Your current draft, recent game history, achievements, GOAT Actor personal bests and daily results, settings, and an anonymous Daily Challenge identifier are stored in your browser’s local storage. They remain on that browser unless you clear site data or use Reset Progress.

A Party Mode game, including the two player names you type, is kept only in the browser tab’s session storage so that a reload does not lose it. It is never sent to the server and disappears when the tab is closed or the party ends.

No account, email address or name is needed to play either game, the daily puzzles, or Party Mode.

If you choose Sign in with ChatGPT, the hosting platform provides an account identifier, email address, and optional display name. Movie Draft uses the account identifier to save and restore your game progress. Your email and display name are shown in the interface but are not written into the game-progress record.

Daily submissions contain the challenge code, selected roles and people, and reroll history so the server can reproduce and verify the result. The stored leaderboard record uses a one-way player hash and selection hash, plus the resulting scores, box office, and awards. It does not store the submitted crew names or your email address.

A finished GOAT Actor daily sends the date, the eight chosen slots and the anonymous identifier. The server recomputes the score and stores only that score with a one-way player hash; it does not store the picks, names or your email address.

The ranking may include system-generated benchmark drafts. These are produced by the same game engine, obey the same budget and reroll rules, and pass the same server verification as player results. They provide a stable comparison pool and are not user accounts.

Local progress and optional account sync are processed to provide the game and the cross-device save feature you request (Article 6(1)(b) GDPR). Daily ranking data, anonymous usage totals, fraud prevention, result verification, service security, and basic service operation are processed for the legitimate interests of operating a fair and secure game (Article 6(1)(f) GDPR).

Messages sent to the support address are processed to answer your request and manage the service, based on steps taken at your request and the legitimate interest in providing support. Data may also be processed when necessary to comply with a legal obligation (Article 6(1)(c) GDPR).

Google Analytics is used on the basis of your consent where the law requires it (Article 6(1)(a) GDPR). You may withdraw that consent at any time; this does not affect measurement that took place before.

Creating an account is optional. You can play without providing account information. Game scoring is automated, but it is used only for entertainment and ranking and does not produce legal or similarly significant effects.

Movie Draft sets no advertising cookies and shows no advertising. The browser storage described above is used only to run the game you asked for. The hosting and optional sign-in systems may use strictly necessary security or authentication cookies. Analytics cookies are set only by Google Analytics, and only as described below.

Page-view statistics are collected with Cloudflare Web Analytics, a cookieless service that does not use local storage, does not fingerprint visitors and does not follow them across sites. It reports totals such as page views, referring sites, countries and device types. See Cloudflare Web Analytics.

The site also keeps its own count of a few game events: a page opened, a game started or finished, a share button pressed, a challenge link opened, a daily streak continued, and a reminder sign-up. Each count is a daily total with a few fixed labels: which game, daily or free play, a score band, the share channel, and the campaign label of the link that brought you (for example utm_source=share). No cookie or browser storage is used for this, no identifier is created, IP addresses are not stored with the counts, and the totals cannot be traced back to a visitor. Browsers that send Do Not Track or Global Privacy Control are not counted.

Google Analytics. The site also uses Google Analytics 4, provided by Google Ireland Limited, to understand how the games are used: which screens are opened, games started and finished with their mode, score and duration, share buttons pressed, streaks continued, and the campaign link a visit came from. Google Analytics sets the cookies _ga and _ga_…, which last up to two years, to tell one browser from another. Google receives your IP address to work out an approximate location and does not store it. Advertising features, Google signals and ad personalisation are switched off.

If you are in the European Economic Area, the United Kingdom or Switzerland, Google Analytics is not loaded and no analytics cookie is set unless you choose Accept in the banner. Elsewhere it starts when you open the site. Wherever you are, it is never loaded for a browser that sends Do Not Track or Global Privacy Control. You can change or withdraw your choice at any time with “Cookie settings” at the bottom of every page; withdrawing removes the analytics cookies. Your choice is remembered in this browser for six months, after which you are asked again. Declining changes nothing about how the games work.

If a “daily puzzle reminder” form is offered and you use it, your email address is sent directly to the mailing service that delivers the reminder and is used for nothing else. Signing up is optional, and every email carries an unsubscribe link. Movie Draft does not copy the address into its own database.

A “Support the game” link, when shown, leads to an external donation page with its own privacy policy. Nothing is sent to it unless you open it.

The site shows no advertising at present and loads no advertising code. If advertising is introduced, this policy will be updated first, and visitors in the European Economic Area, the United Kingdom and Switzerland will be asked for consent before any advertising cookie is set.

OpenAI processes hosted data on behalf of the Movie Draft operator to host, maintain, authenticate, and support the published site. OpenAI may use its listed sub-processors, including infrastructure and content-delivery providers such as Cloudflare. Cloudflare also provides the cookieless page-view statistics described above.

Google Ireland Limited provides Google Analytics, where you have allowed it, and acts as a processor for that data. See how Google uses information from sites that use its services. You can review the ChatGPT Sites Data Processing Addendum and the current OpenAI sub-processor list.

Google provides the Gmail service used to receive support and privacy messages. Personal data may also be disclosed where required by law or necessary to establish, exercise, or defend legal claims. Movie Draft does not sell personal data or share it for targeted advertising.

Hosted data may be processed outside the European Economic Area by OpenAI affiliates or sub-processors. Under the ChatGPT Sites Data Processing Addendum, applicable transfers are protected through European Commission adequacy decisions or Standard Contractual Clauses. Support email may be processed in locations used by Google under its applicable privacy and transfer safeguards. Google Analytics data may be processed in the United States and other countries, protected by the EU–US Data Privacy Framework and Standard Contractual Clauses.

Browser data remains until you use Reset Progress, clear site data, or remove it through browser controls. Synced progress is kept while the feature is used and until you reset it, request deletion, or the service no longer needs it to provide sync. Daily ranking records are retained while the corresponding historical leaderboard remains available or until they are no longer needed for ranking integrity; records may then be deleted or irreversibly aggregated.

Support and privacy correspondence is normally kept for up to 12 months after the request is closed, unless a longer period is needed to comply with law or handle a claim. Hosting security logs are retained according to the hosting provider’s applicable terms and security requirements. Google Analytics keeps data that is tied to its cookies for two months; totals in its reports are not tied to a visitor.

Depending on the law that applies to you, you may request access to your personal data, correction, deletion, restriction of processing, portability, or object to processing based on legitimate interests. Where processing relies on consent in the future, you may withdraw that consent at any time without affecting earlier lawful processing.

Send a request to gamemoviedraft@gmail.com. Include enough information to identify the relevant account or Daily Challenge entry, but do not send passwords or sensitive documents unless specifically requested. Identity may need to be verified before a request is completed. Requests will be answered within the period required by applicable law, normally one month under GDPR.

Anonymous leaderboard data may be difficult or impossible to associate with you if the browser identifier has been deleted. This protects player privacy but may prevent identification of a specific anonymous record.

If you believe your data has been processed unlawfully, please contact Movie Draft first so the issue can be investigated. You also have the right to lodge a complaint with the supervisory authority in your country of residence, work, or the alleged infringement. In Poland this is the President of the Personal Data Protection Office (UODO). See UODO complaint information.

Traffic is served over HTTPS, input is validated on the server, and game results are recomputed before entering the ranking. No internet service can promise absolute security. Material changes to these practices will be reflected on this page with a revised date.