Privacy policy

The short version

• You don't need an account. We don't ask for or collect your name, email, phone number or address.
• Your browser gets a random ID in a cookie, and your game activity is linked to that ID. That still counts as personal information under Québec and Canadian law (and the GDPR), even without a name, so we explain it here.
• We don't sell your information, and we don't show ads or use advertising trackers.

What we collect

A browser ID (cookie cm_vid). A random code created on your first visit and kept for 400 days. It lets the site remember your votes, streak, games and Taste Match without an account.

Your game activity, linked to that ID:

• duel votes, skips and “Not seen it”, with how long you took to answer;
• Blind Top 5 games, bracket votes and champion predictions, and finished solo brackets;
• fantasy market (Elo Stock Market) trades and portfolio;
• the days you visited, to count return visits;
• shares, image downloads and clicks on streaming-service logos.

How you first arrived

On your first visit (cookie cm_ft, 30 days, then stored with your browser ID): the campaign tags of the link you used (utm_source, utm_medium, utm_campaign, utm_content), the website that sent you (its domain name only), the page you landed on, and your country and province or region (for example Québec), estimated from your IP address by our host.

Fair play and settings

Fair-play signals: a one-time token for each matchup, the speed of each vote, and a trust level that grows as you play. These keep automated or rushed votes from distorting the ranking.

Settings: your language (cookie cm_lang) and the country you pick for where-to-watch (cookie cm_country), each kept for a year. Your browser also keeps a few small notes in its own storage (whether you've played today's Top 5, which duel was on screen, and a one-time “page loaded” signal that helps tell people from bots). These stay on your device; only the “page loaded” signal is sent to us, together with your browser's language setting (for example French or English), which helps us see which languages our visitors use.

What we don't keep

• Your IP address isn't stored with your game activity. It's used briefly to limit abusive traffic (a counter that expires within a day) and, only if our bot check is triggered, sent to Cloudflare Turnstile to confirm you're not a bot.
• Your browser's user agent is checked on each request to filter out bots, but isn't stored.

Why

• To run the game: count votes and keep your streak, Top 5, brackets, market and Taste Match.
• To keep the ranking fair: detect bots, brigading and rushed votes.
• To understand, in aggregate, which links and campaigns bring people who play. We look at totals per campaign, not at individuals.

Who else handles it

• Vercel hosts the site, and its Web Analytics counts page visits without cookies.
• Neon hosts our database, and Upstash our rate-limit counters.
• Cloudflare Turnstile checks for bots, only when the check is triggered.
• TMDB (The Movie Database): your browser loads film posters and streaming logos from TMDB's servers, which see your IP address like any website you load images from. Where-to-watch data comes from JustWatch via TMDB.
• Links you choose to follow (trailers on YouTube, streaming services) take you to those sites, under their own policies.

Outside Québec and Canada: our hosting and database are in the United States, so your information is stored and processed there.

How long we keep it

Browser IDs with no activity for 24 months are deleted automatically, along with the activity linked to them. Your duel votes stay in the shared ranking, because the ranking is built from them, but without any link to your browser.

Your choices and rights

• Start fresh: clear this site's cookies and site data in your browser. You get a new browser ID, and the old one is no longer linked to you.
• Access, correction or deletion: email us with your browser ID (shown below), since there's no account to look you up by.
• You can also ask what we hold and how it's used, or complain to the Commission d'accès à l'information du Québec, the Office of the Privacy Commissioner of Canada, or your local data protection authority.

Contact

Person in charge of the protection of personal information: Privacy Officer, DuelCinema (Québec, Canada), privacy@duelcinema.com.

Changes

If we add advertising, social-media pixels or anything similar, we'll update this page first and ask for your consent where the law requires it, for example with a consent banner.