Privacy Policy

Controller

The party responsible for processing data on this website is:

IT Dienstleistungen Sven Stauden Tilsiter Straße 75 66121 Saarbrücken Deutschland Email: hello@sstauden.de

The controller is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data.

In short

Match a Movie works without an account. No registration, email address or password is required. You only enter a nickname of your choosing and pick an avatar image.

We process only what is technically necessary to run a matching round. There is no advertising, no cross-site tracking and no sharing of data for marketing purposes.

Cookies

This website uses strictly necessary cookies only. They are required so you can return to a round after closing your browser. Under Art. 6(1)(f) GDPR no consent banner is required for these.

Both cookies are set with the HttpOnly attribute and therefore cannot be read by JavaScript. They expire after one year and can be removed at any time through your browser settings.

• mam_uid – a randomly generated, signed device identifier (UUID). It contains no personal information and serves only to associate your device with a round.
• mam_profile – the nickname you chose, your avatar image number and your genre selection, so they are pre-filled on your next visit.

What we process

Within a matching round the following is stored on our servers:

This data is accessible only to the participants of that round who know its join code.

• the nickname and avatar image you chose,
• your genre selection, along with the chosen region and streaming providers,
• your ratings of the films shown (like or pass) and the matches resulting from them,
• the round's name, its join code, and the times of creation and last activity.

Hosting

This website is hosted and processed by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. When you open the site, Cloudflare processes technically necessary connection data such as your IP address, the date and time of the request, and details about your browser and operating system.

The legal basis is Art. 6(1)(f) GDPR (legitimate interest in secure and reliable delivery). Transfer to the USA takes place on the basis of the European Commission's standard contractual clauses.

Film data from TMDB

Film information comes from The Movie Database (TMDB), operated by TiVo Platform Technologies LLC, USA. Film data is requested by our server; your IP address is not transmitted to TMDB in the process.

Film posters, however, are loaded directly from TMDB's servers (image.tmdb.org) into your browser. For technical reasons TMDB receives your IP address when this happens. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in delivering images efficiently).

Match a Movie is in no way affiliated with Netflix, Amazon Prime Video or Disney+.

Anonymous match statistics

When a group agrees on a film, we store a single row describing the shape of that decision, so we can publish statistics about how groups decide what to watch. It contains only the following:

This row contains no device identifier, no nickname, no round name, no join code and no round identifier. It cannot be linked to you, to your device or to the round it came from, and it is never read back by the app. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in understanding and describing how the service is used). Because the data is anonymous, it is not personal data within the meaning of Art. 4(1) GDPR.

These figures are published in aggregate form only.

• the time of the match,
• the region and the streaming providers selected for the round,
• how many people were in the round,
• how many films had been shown, and how many seconds had passed since voting began,
• the genres of the matched film, and whether it was the round's first match or a later one.

No analytics, no advertising

This website uses no analytics or tracking tools, no advertising networks and no social media plugins. In particular, Google Analytics is not used.

Fonts are not loaded from third parties either: they are served directly from our own server, so no connection to third-party servers is made.

Retention

Round data is deleted once it is no longer needed to operate the service, and at the latest once a round has been inactive for an extended period. The cookies described above expire after one year. Where statutory retention obligations apply, deletion follows their expiry.

SSL / TLS encryption

For security reasons this website uses TLS encryption. You can recognise an encrypted connection by the browser address bar beginning with “https://”.

Your rights

You have the right at any time to obtain information free of charge about your stored personal data, its origin and recipients, and the purpose of processing. You also have the right to rectification, erasure, restriction of processing, data portability, and a right to object.

An informal message to hello@sstauden.de is enough to exercise these rights. Where possible, please include the join code of the round concerned so the data can be identified.

You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the Member State of your habitual residence or the place of the alleged infringement.