Short version: We collect the minimum data necessary to run the site. We don't sell your data, we don't run ads, and we don't share your information with third parties except where explicitly described below.
1. Who we are
Eltorama (eltorama.com) is a personal project dedicated to curated movie lists. You can reach us at [email protected] or via our contact page.
2. What data we collect and why
Contact form
When you use the contact form, we collect your name, email address, and message. This data is transmitted to us by email and is not stored in our database. We use it solely to respond to your enquiry.
Newsletter
If you subscribe to the newsletter, we store your email address and (optionally) your name in our database. We use this information only to send you notifications when new lists are published. Each email includes an unsubscribe link. We will never share your email address with third parties.
User accounts
If you create an account, we store your username, display name, email address, and a securely hashed (bcrypt) version of your password. We never store your password in plain text. Your account data is used to identify you as the author of lists you create and to allow you to log in.
Comments
Guest comments store the name and email address you provide, plus your comment text. Comments from registered users are linked to their account. Submitted comments are held for moderation before becoming publicly visible.
Session data
A session cookie is set automatically when you visit the site. It contains a session identifier (no personal data) used for rate-limiting (e.g., comment submission limits) and to keep you logged in if you have an account. The cookie expires when you close your browser or after your session times out.
3. Cookies
- Session cookie — required for the site to function. Contains only a session ID. Deleted when the browser is closed.
- Google Analytics — we use Google Analytics on the eltorama.com domain to understand aggregate traffic (pages visited, session duration, geographic distribution). This sets cookies managed by Google. No personally identifiable information is shared with Google. You can opt out via the Google Analytics Opt-out Browser Add-on.
- Ko-fi widget — the Ko-fi donation widget on this site loads a script from Ko-fi's CDN. Ko-fi may set its own cookies. See Ko-fi's privacy policy.
We do not use advertising cookies or sell data to ad networks.
4. Third-party services
- OMDb / IMDb — movie metadata, ratings, and poster images.
- TMDB — trailer links, streaming availability, additional metadata.
- YouTube (embedded) — trailers are embedded from YouTube. YouTube may set cookies when you watch a trailer. See Google's privacy policy.
- Google Fonts — fonts are loaded from Google's CDN. Google may log your IP address when serving fonts.
- Cloudflare — we use Cloudflare for CDN and DDoS protection. Cloudflare may process request metadata. See Cloudflare's privacy policy.
We do not share your personal data with any of the above services.
5. Data retention
- Contact form submissions — not stored; sent by email only.
- Newsletter subscriptions — retained until you unsubscribe.
- User accounts — retained until you request deletion.
- Comments — retained until deleted by an administrator or upon your request.
6. Your rights
You may at any time request access to, correction of, or deletion of any personal data we hold about you. Contact us at [email protected] or via our contact page. We will respond within 30 days.
7. Children
Eltorama is not directed at children under 13. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us immediately.
8. Changes to this policy
We may update this policy from time to time. Material changes will be noted at the top of this page with an updated date. Continued use of the site after changes constitutes acceptance of the updated policy.