Privacy Policy

Updated 25 October 2026

Drama4U (drama4u.com) is a movie information website. This policy explains what data we collect and how we use it.

What we collect

When you sign in with Google: your name, email address, profile photo and Google account ID. We use them only to show your name and photo next to your comments and to recognise you when you return. Your email is never shown on the site.
Comments you post, with the time they were posted.
Cookies: a sign-in session cookie (so you stay signed in) and a language preference cookie. We do not use advertising cookies at this time.
Server logs (such as IP address and browser type) kept for a limited time to protect the site from abuse.
Anonymous page-view counts: we count page views anonymously and in aggregate (no cookies, no IP addresses stored). Only the page address, the referring website’s domain, your country (from our network provider) and device type (mobile, tablet or desktop) are counted.
Where visits come from: we also count, anonymously and in aggregate, which link or website brought a visit. We use only the campaign tags in the link (utm_source, utm_medium, utm_campaign, utm_content) and the name of the referring website. This is kept only in your browser tab for that visit, with no cookies, no IP address and no personal information, and is used only for statistics. If your browser sends Do Not Track or Global Privacy Control, we ignore the campaign tags in the link. Signing up, commenting or saving a film is added to the same anonymous totals.

How comments are checked

New comments are reviewed by automated AI moderation (provided by Anthropic) before they appear publicly. Only the comment text and the film it belongs to are sent for this check.

Report and contact form

When you use the “Report an error / Contact us” button, we store your message, its topic, the page address, the language and your approximate country (from Cloudflare). If you are not signed in, we also store the email address and optional name you enter so that we can reply. New messages are sorted by AI (provided by Anthropic) to suggest a topic and priority and to prepare a draft reply; every reply is read and sent by our team, never automatically. Messages are kept for up to 24 months after the last activity; a visitor’s email address and name are deleted 12 months after the message is closed or has had no further activity. To limit abuse, we also store a one-way coded (hashed) form of your network address with the message for up to 48 hours; it cannot be turned back into your IP address.

To prevent spam, the form for visitors who are not signed in uses Cloudflare Turnstile, which checks signals from your browser and device to tell people from bots. This processing is covered by the Cloudflare Privacy Policy and the Turnstile Privacy Addendum.

Watchlist, followed people and notifications

If you are signed in and save films to your watchlist or follow actors and directors, we store the films you saved (title and poster) and the people you follow, with the site language and the date you added them, plus the notifications we send you. We use this only to show your lists and to send notifications to the bell on this site, such as a cinema release date, a film arriving on a streaming service, or new work by someone you follow. For release and streaming alerts we use the country in your settings or, if none is set, the country of the site edition you used. Your lists are never public and are never used for advertising. Read notifications are deleted after 90 days and unread ones after 180 days. You can remove saved films and followed people at any time, and all of this is deleted together with your account.

When a signed-in member shares a page with the share buttons, the link goes through drama4u.com/s/… so we can count visits to the shared page. When someone opens such a link, we store a one-way coded (hashed) form of their network address and browser (made with a secret key that changes every day and is deleted after 2 days, so the stored code can no longer be linked back to the IP address after that), their approximate country and network number (from Cloudflare), the browser family (for example “Chrome”) and how long the page was visible. To tell people from bots, Cloudflare Turnstile runs in the background during that visit (Turnstile Privacy Addendum). A cookie (d4u_ref, 30 days) remembers which shared link brought a visitor, so that if they create an account the member who shared it can be credited. A second cookie (d4u_lt, 30 minutes, sent only to our visit counter) holds a one-time visit code. If the person opening the link is signed in, their account number is stored with that visit record (to stop members counting their own visits). If a new account is created through a shared link, we keep a record linking the new member to the member who shared it for as long as both accounts exist. Visitors never receive anything. Members may earn points for genuine visits; points are not money, cannot be exchanged for cash and are not linked to advertising. Visit records are kept for up to 90 days and after that only as totals.

To protect the points system, an automatic check runs once a day on the visit statistics of members who earned points (numbers only, such as visit counts, countries, browser families and reading times, under a temporary code instead of the member’s name or account). Unusual patterns put the points on hold. AI provided by Anthropic helps review these statistics; points are cancelled automatically only when the AI is highly confident, otherwise our team decides. These check records are kept for as long as the account exists.

Your account page, points and leaderboard

When you are signed in, your private account page shows your points history, level, badges, your share links with how many people opened them, and your settings. A short form of your display name (the first word of the name on your Google account and the first letter of the last word; a one-word name is shown as it is; never your email address or photo), your level and your monthly points appear on the public monthly leaderboard by default when you are ranked; you can turn this off at any time with “Show my name on the public leaderboard” in your account settings. Accounts of our team do not earn points or badges and are never ranked. Our team can correct points, cancel points that break the points rules or pause points for an account; each such action is recorded with the reason. If you delete your account, these records are kept without any link to you. So that deleting and re-creating an account cannot be used to get around the points rules, we keep a one-way code (hash) of your Google account ID (not your name or email) for 12 months after deletion, together with a mark of whether points for the account were paused or under review. If you sign in again during that time, the pause still applies and the new account does not count as a referral.

We do not sell personal data. We use these service providers to run the site: Google (sign-in), Cloudflare (network and security), DigitalOcean (hosting) and Anthropic (comment moderation, sorting of contact messages and checks of the points system).

Your choices

You can delete your own comments at any time. You can delete your account yourself on your account page (My account → Delete account): your profile, comments, watchlist, followed people, notifications, messages, share links, points and badges are deleted at once and permanently. You can also email [email protected] from the address you signed in with, and we will remove your data within 30 days.

Advertising

If we add advertising in the future (for example Google AdSense), we will update this policy and ask for consent where required.

Children

The site is not intended for children under 13.

Changes

We will post any changes on this page with a new date.