Effective Date: March 28, 2026 · Last Updated: March 28, 2026
Your privacy matters to us. This policy explains how CineDraft collects, uses, and protects your personal information.
Privacy at a Glance
We don't sell your data. Your personal information is never sold to third parties.
You control your privacy. Choose who sees your profile, movies, and receives your messages.
You own your content. Your league data, chat messages, and picks belong to you.
Secure by default. We use industry-standard security to protect your information.
1. Introduction
This Privacy Policy explains how CineDraft, operated by Quiet Craft ("we", "us", or "the App"), collects, uses, shares, and protects your personal information when you use our movie social platform — including fantasy film leagues, Oscar prediction pools, movie reviews, thoughts, lists, journals, and social features.
By creating an account and using CineDraft, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the App.
2. Information We Collect
Account Information
Email address (for authentication and account recovery)
Display name
Profile poster image and banner image
Bio, location, and profile customization
Authentication credentials from sign-in providers (Apple, Google)
Movie Activity Data
Movie reviews, ratings, and thoughts (short-form discussion posts)
Movie lists (personal and collaborative)
Journal entries (watch log with dates and locations)
Consent (where required for notifications or optional features)
Legal obligations (complying with applicable laws)
4. Your Privacy Controls
CineDraft gives you control over your privacy. You can manage these settings in your Profile Settings:
Profile Visibility
Public: Anyone can view your profile and stats
Friends Only: Only league members can view your profile
Private: Only you can see your full profile
Trade Requests
Everyone: Anyone can send you trade proposals
League Members Only: Only people in your leagues can propose trades
No One: Disable incoming trade requests
Direct Messages
Everyone: Anyone can message you
League Members Only: Only people in your leagues can message you
No One: Disable direct messages
Activity Sharing
Your movie activity (watched, rated, reviewed) can be shared to the social feed
You can control which activity types are auto-shared in your privacy settings
Drafted movies are only visible to members of your league
Blocking Users
You can block users to prevent them from viewing your profile, sending messages, or proposing trades. Blocked users cannot see your activity in shared leagues.
5. Sharing & Disclosure
We do not sell, rent, or trade your personal information. We may share your data in the following limited circumstances:
With Other Users
League members can see your display name, profile picture, league-specific stats, and chat messages within shared leagues
Followers and friends can see your activity in the social feed (based on your sharing settings)
Users can see information based on your privacy settings (see Section 4)
Commissioners can see league management data for leagues they administrate
Trade partners can see proposed trade details
Collaborative list members can see and edit shared list content
With Service Providers
Firebase (Google) for hosting, database, authentication, cloud storage, and push notifications
Service providers operate under strict confidentiality obligations and may only use data to provide services to us
For Legal Reasons
To comply with legal obligations, court orders, or government requests
To protect our rights, privacy, safety, or property
To investigate and prevent fraud, security issues, or technical problems
In connection with a merger, acquisition, or sale of assets (with notice to users)
Aggregated & Anonymized Data
We may share aggregated, anonymized data that cannot identify you for analytics, research, and improving the App.
6. Data Retention
Active Accounts
We retain your information for as long as your account is active and as needed to provide the App's services.
Deleted Accounts
When you delete your account, your personal data is scheduled for permanent deletion within 30 days
During this 30-day period, you may recover your account by contacting support
Some data may be retained longer if required by law or to resolve disputes
League Data
Active league data is retained indefinitely
Inactive league data (no activity for 3 years) is automatically deleted
If you leave a league, your picks and messages in that league remain visible to other members
Messages & Chat
League chat messages are retained as long as the league exists
Direct messages are retained until deleted by you or account deletion
Analytics Data
Anonymized analytics data may be retained indefinitely for service improvement.
7. Security
We take reasonable technical and organizational measures to protect your personal information from unauthorized access, loss, misuse, or alteration. These measures include:
Encryption of data in transit (HTTPS/TLS)
Firebase Authentication with secure token management
Access controls and authentication requirements
Regular security assessments
However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
8. Push Notifications
With your permission, we send push notifications to keep you informed about:
Draft start times and when it's your turn to pick
Trade proposals and acceptances
League invitations and updates
Direct messages
Important app announcements
You can manage notification preferences in your device settings or within the App. We use Firebase Cloud Messaging, which may collect device tokens and delivery data.
9. Widgets & Live Activities
CineDraft offers Home Screen widgets and Lock Screen Live Activities to keep you updated:
Widgets display movie data (trending movies, watchlist, unread messages) on your Home Screen
Live Activities show draft countdown timers on your Lock Screen during active drafts
Widget and Live Activity data is stored locally on your device and refreshed periodically
No additional personal data is collected through widgets or Live Activities beyond what the App already collects
10. User-Generated Content
You may create and share content within CineDraft, including:
Profile information (display name, bio, images)
Movie reviews and ratings
Thoughts (short-form discussion posts)
Movie lists (personal and collaborative)
Journal entries (watch log)
League names and descriptions
Chat messages, direct messages, and group messages
Trade proposals and communications
Oscar predictions and sealed ballots
You are responsible for the content you share. By posting content, you grant us a non-exclusive license to store, display, and transmit your content as necessary to provide the App's services.
Do not share content that is illegal, offensive, violates others' rights, or breaches these terms. We reserve the right to remove content that violates our policies.
11. Cookies & Tracking Technologies
We use the following technologies to operate the App:
Authentication Tokens
We store secure session tokens on your device to keep you logged in.
Local Storage
App preferences and settings are stored locally on your device using UserDefaults.
Firebase Analytics
We use Firebase Analytics to understand how users interact with the App. This may collect device identifiers, usage patterns, and crash data.
Advertising
We do not currently use third-party advertising networks or tracking pixels. If this changes in the future, we will update this policy and notify you before any advertising-related data collection begins.
12. Third-Party Services
CineDraft integrates with third-party services to provide functionality. These services have their own privacy policies:
Firebase (Google Cloud)
Firebase Authentication: Manages user sign-in and authentication
Cloud Firestore: Stores league, draft, and user data
Firebase Cloud Storage: Stores profile images and banners
Firebase Analytics: Tracks app usage and performance
Firebase Crashlytics: Collects crash reports and diagnostic data to improve stability
Apple Sign-In
Allows secure authentication using your Apple ID. Apple may share your email and name with us (with your permission).
Google Sign-In
Allows secure authentication using your Google account. Google may share your email and name with us.
The Movie Database (TMDB)
Provides movie data, images, metadata, and streaming availability (via JustWatch). If you connect your TMDB account, an OAuth access token is stored securely on your device to sync your ratings, watchlist, and favorites. We do not send other personal information to TMDB.
MDBList
Provides aggregated movie ratings from multiple sources. We send movie identifiers (not personal data) to retrieve rating information.
Does The Dog Die
Provides content warnings and trigger information for movies. We send movie identifiers (not personal data) to retrieve content warning data.
We are not responsible for the privacy practices of third-party services. Please review their policies before using their services.
13. International Data Transfers
Your information may be transferred to and processed in countries other than your own, including the United States, where our servers and service providers are located.
When we transfer data internationally, we rely on appropriate safeguards such as standard contractual clauses and ensure that third-party providers comply with applicable data protection laws.
14. Your Rights & Choices
Depending on your location, you may have the following rights regarding your personal information:
General Rights
Access: View and obtain a copy of your personal data
Correction: Update or correct inaccurate information
Deletion: Request deletion of your account and data
Portability: Receive your data in a structured, machine-readable format
Opt-Out: Unsubscribe from marketing communications
EEA/UK Residents (GDPR)
Object to processing based on legitimate interests
Restrict processing in certain circumstances
Withdraw consent for consent-based processing
Lodge a complaint with your supervisory authority
California Residents (CCPA/CPRA)
Know what personal information we collect and how it's used
Request deletion of personal information
Opt-out of sale/sharing (note: we do not sell personal data)
Include your account email and specific request details
We may verify your identity before processing requests
We will respond within 30 days (45 days for complex requests)
Some data access and updates can be done directly in the App through Profile Settings.
15. Children's Privacy
CineDraft is not intended for children under 12 years of age. We do not knowingly collect personal information from children under 13. If we learn that a user is under 12, we will terminate their account and delete their data.
If you are a parent or guardian and believe your child has provided us with personal information, please contact us at cinedraftapp@gmail.com. We will take steps to delete such information promptly.
16. Data Breach Notification
In the event of a data breach that affects your personal information, we will:
Notify affected users without undue delay
Provide information about the nature of the breach
Describe steps we are taking to address the breach
Recommend actions you can take to protect yourself
Comply with applicable data breach notification laws
Notifications will be sent via email or in-app notification to the email address associated with your account.
17. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.
When we make material changes, we will:
Update the "Effective Date" at the top of this policy
Notify you through the App, email, or other appropriate means
Provide a reasonable notice period before changes take effect
Your continued use of CineDraft after changes become effective indicates your acceptance of the updated policy. We encourage you to review this policy periodically.
18. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: