MoviePosterDB collects only what we need to keep the archive useful and safe. We don’t sell user data, we don’t show ad-network trackers, and by default no third-party analytics script runs on this site.
What we store. Account email + hashed password, your uploaded posters and their metadata, your downloads, your saved/liked posters, and basic server-side request logs (IP + user-agent) for abuse prevention. Logs are rotated after 30 days. From those requests we also keep aggregated counters (page views per day, country, browser vs. bot) that no longer relate to any individual visitor.
Cookies. Only essential ones: mpdb_session keeps you signed in (set when you log in), mpdb_country and mpdb_locale remember your country and language. Our CDN and security provider Cloudflare may set __cf_bm / cf_clearance to tell browsers from bots. Your theme, your cookie-banner choice, recently viewed posters and dismissed hints live in your browser’s local storage and are never sent to us.
Analytics. Our statistics are computed server-side from the request logs above — no script, no cookie. Occasionally, for a few days at a time (seven at most), we additionally load Google Analytics through Google Tag Manager to check those numbers against an independent measurement. While such a window is open the cookie banner says so and lists the _ga cookies; Google Ireland Ltd. / Google LLC then receives your IP address, browser details and the pages you view. Choosing “Essentials only” in the banner keeps you out of these measurements — now and in every future window — and removes the cookies again. When the window closes, the script is gone for everyone. You can change your choice at any time:
Payments. Memberships are paid on the hosted checkout pages of Stripe or PayPal. Card and account details go directly to them; we only receive the payment status and what we need for your invoice.
Email. We send transactional mail (verification, password reset, moderator notifications). No marketing.
Your rights. You can delete your account at any time from your account settings; for a copy of the data we hold about you, or to have it corrected, contact us. Deleted accounts are scrubbed within 30 days, except for uploaded posters that have been approved into the archive — those stay attributed to a generic “archived contributor” handle.
For data requests or questions, contact us.
Controller responsible for this data is CryptoBiz GmbH, Bachweg 18, 9631 Ulisbach, Switzerland ([email protected]) — see the legal notice.