Last updated: 1 January 2025 · UK GDPR compliant · Data controller: Drunk Movie Database (individual operator, United Kingdom)
1. Who we are
Drunk Movie Database ("DMDB", "we", "us") is operated by an individual based in the United Kingdom. We are the data controller for personal data collected through this website.
As a small, individually operated site, we collect the minimum data necessary to run the service. We do not sell your personal data. We never have, and we never will.
2. What data we collect
Data you provide directly
| Data | When collected | Why |
|---|---|---|
| Username | Registration | To identify your account and display on ratings |
| Email address | Registration | Account login, password reset, important notices |
| Password (hashed) | Registration | Account authentication. Never stored in plain text. |
| Ratings and reviews | When you submit them | Core function of the site |
| Movie submissions | When you submit them | To review and add films to the database |
Data collected automatically
| Data | Why |
|---|---|
| IP address | Security, spam prevention, and ban enforcement |
| Browser type and version | Technical troubleshooting and site compatibility |
| Pages visited and timestamps | Anonymous site analytics to understand usage patterns |
| Session cookies | Keeping you logged in during a session |
We do not collect your real name, phone number, address, payment details, or any sensitive personal data.
3. How we use your data
We use your personal data only for the following purposes:
- To create and manage your account
- To display your ratings and reviews on the site
- To send you account-related emails (password resets, important notices)
- To prevent spam, fraud, and abuse
- To enforce our Terms and Conditions
- To improve the site through anonymous usage analytics
- To comply with legal obligations
We will never use your data for unsolicited marketing without your explicit opt-in consent. If we ever introduce a newsletter or marketing emails, you will be asked separately to opt in, and you can opt out at any time.
4. Legal basis for processing
Under the UK GDPR, we must have a lawful basis for processing your personal data. We rely on the following:
- Contract — processing your account data and ratings is necessary to provide the service you signed up for
- Legitimate interests — collecting IP addresses and session logs to prevent spam and protect site security
- Legal obligation — retaining certain data if required by law
- Consent — for any optional data processing such as marketing emails (where applicable)
5. Who we share data with
We do not sell, rent, or trade your personal data. We may share limited data with the following categories of third parties:
- Hosting provider (Hostinger) — your data is stored on servers provided by Hostinger. They act as a data processor on our behalf and are bound by their own privacy obligations.
- TMDB API — we use The Movie Database API to fetch film metadata. We send film search queries to their API but do not share your personal data with them.
- Law enforcement — if required by law or a valid legal request, we may be obliged to disclose data to authorities.
No other third parties have access to your personal data.
6. Where your data is stored
Your data is stored on servers within the European Economic Area (EEA) via our hosting provider, Hostinger. If any data is transferred outside the EEA, appropriate safeguards will be in place in accordance with UK GDPR requirements.
During development and testing, some data may also be stored on a private server located in the United Kingdom (a Raspberry Pi on a private local network). This server is not publicly accessible and is used for development purposes only.
7. How long we keep your data
| Data type | Retention period |
|---|---|
| Account data (username, email) | Until you delete your account, or 2 years after last activity |
| Ratings and reviews | Retained indefinitely in anonymised form after account deletion |
| Server logs (IP, access logs) | 90 days, then automatically deleted |
| Ban records (IP/email) | Up to 2 years for security purposes |
8. Your rights
Under UK GDPR, you have the following rights regarding your personal data:
Right of access
Request a copy of the personal data we hold about you.
Right to rectification
Ask us to correct inaccurate or incomplete data.
Right to erasure
Request deletion of your personal data ("right to be forgotten").
Right to restriction
Ask us to limit how we use your data in certain circumstances.
Right to portability
Receive your data in a structured, machine-readable format.
Right to object
Object to processing based on legitimate interests.
To exercise any of these rights, contact us at privacy@drunkmoviedatabase.com. We will respond within 30 days. We may need to verify your identity before processing a request.
9. Cookies
We use a small number of cookies to make the site work:
| Cookie | Type | Purpose | Expires |
|---|---|---|---|
| dmdb_session | Essential | Keeps you logged in during your visit | Session end |
| dmdb_remember | Essential | "Remember me" persistent login | 30 days |
| dmdb_cookie_consent | Essential | Records your cookie consent choice | 1 year |
| Analytics cookies | Analytics (optional) | Anonymous site usage statistics | Up to 1 year |
Essential cookies are necessary for the site to function and cannot be disabled. Analytics cookies are optional and will only be set with your consent. You can manage your cookie preferences at any time using the cookie settings link in the footer.
We do not use advertising cookies or tracking cookies for targeted advertising.
10. Children's privacy
This Site is not intended for anyone under the age of 18. We do not knowingly collect personal data from children. If you are a parent or guardian and believe your child has provided us with personal data, please contact us and we will delete it promptly.
11. Changes to this policy
We may update this Privacy Policy from time to time. We will notify registered users of significant changes by email or by a prominent notice on the Site. The "last updated" date at the top of this page will always reflect the most recent version.
12. Contact and complaints
For any privacy-related questions or to exercise your rights, contact our data controller:
Drunk Movie Database
Email: privacy@drunkmoviedatabase.com
If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO):
ico.org.uk/make-a-complaint
ICO helpline: 0303 123 1113
We aim to respond to all privacy enquiries within 30 days as required by UK GDPR.