Privacy

No tracking, no advertising, no analytics. Our own cookies are only for signing in.

The short version: if you have an account, we store the email address it was created with and a hashed password, so that you can sign back into it. There is no tracking, no advertising and no third-party analytics, and the only cookies this site sets are the ones an account needs.

Accounts are not open yet. When they are, having one will be part of contributing a film, a missing dog or a correction — browsing will never ask you to sign in. This policy is here first, describing how an account is handled, rather than arriving after the fact.

Who runs this site

Dogs on Film is run by Viljar Vahter, a private individual in Estonia. It is a hobby, not a business: nothing here is sold, nothing here is advertised, and there is no company behind it. Under the GDPR he is nonetheless the data controller for everything described on this page, and “we” throughout it means him. He can be reached at privacy@dogsonfilm.com.

What we store

For an account: the email address it was created with, and a hashed password — never the password itself. Alongside those, Supabase, which hosts our database and handles signing in, keeps the records any login system needs: when the account was created, when its address was confirmed, when it was last used to sign in, and the sessions that keep it signed in.

We ask for nothing else. There is no display name, no profile, no location and no date of birth anywhere on this site.

Why we are allowed to store it

Two lawful bases under the GDPR, and no others. The email address and the hashed password are stored to perform a contract with you — Article 6(1)(b). An account cannot be created, confirmed or signed back into without them, so asking for an account is what makes storing them lawful.

An administrator being able to see the address of someone who sent a submission rests on legitimate interests — Article 6(1)(f). The interests are narrow and practical: being able to ask a contributor about their own submission, and being able to stop someone who abuses the queue repeatedly. Nothing else is done with the address, and you can object to this use; see your rights, below.

We do not rely on consent for anything, and there is nothing here you could consent to that would change what we hold.

What we do not do

No advertising, and no advertising identifiers. No analytics, no measurement and no behavioural tracking — we do not record how you move around the site. We do not sell or share your data with anyone. We send no email other than account mail: confirming an address, and resetting a password.

Images loaded from elsewhere

Film posters are the only ones. Your browser loads them directly from TMDB rather than from us, which tells TMDB your IP address and which browser you are using, as visiting any site does. It is not told which page you were on, and it is not given anything else about you. TMDB sets no cookie.

Breed photographs are not loaded from elsewhere, although they come from elsewhere. Each one is from Wikimedia Commons, and we keep our own copy of it and serve that copy from this site, so your browser never contacts Wikimedia and Wikimedia is never told you were here. Until recently it was: their image servers set WMF-Uniq, a random identifier lasting about two years, and on some of them a GeoIP cookie holding an approximate location worked out from your IP address. Nothing on this site causes those any more. If your browser still holds one from an earlier visit, it is the Wikimedia Foundation’s under its privacy policy, it was never sent to us and we could never read it, and clearing your cookies removes it.

Every photograph is still credited to the person who took it, under the licence they chose, with a link to the original on Wikimedia Commons. The copy we hold is the photographer’s file byte for byte; what your browser receives is that same picture resized and re-compressed to suit your screen, which is a change of file format and not a change to the work. Nothing is cropped, retouched or recomposed, so the credit beside each one is still what its licence asks for.

There are no other requests to anywhere else, on any page. No third-party fonts, scripts, embeds, widgets, players or trackers — the typefaces are served from this site along with everything else.

Cookies

Signing in sets one cookie, and that cookie is what keeps you signed in. Logging out removes it.

Signing up, or asking for a password reset link, sets a few more that belong to that one request. They hold random values the email link is completed against, and nothing about you.

That is the whole list of cookies this site sets. There are no preference cookies, no marketing cookies and no measurement cookies, and none of them can recognise you on another site. Every one is strictly necessary for something you asked this site to do, which is why you are not being asked to consent to cookies. No third party sets a cookie through this site either: the poster host sets none, and breed photographs are served from here.

Who can see your email address

Site administrators can. Once accounts are used to contribute, an administrator reviewing a submission sees the address of the person who sent it — that is how a contributor can be asked about their own submission, and how repeated abuse can be stopped.

It is never public. No email address appears anywhere on the public site: not on a page, not in a credit, and not in the data behind either.

How long we keep it

An account’s email address and hashed password are kept for as long as the account exists, and are deleted when it is deleted. The sign-in records Supabase keeps alongside them go at the same time. A deletion request is acted on within 30 days, and usually the same week.

We do not currently delete accounts that go unused. Automatic deletion of inactive accounts is on the list of things still to build, and this page will say so, with a period attached, once something actually enforces it — promising a schedule that nothing carries out would be a worse answer than admitting there is not one yet.

Separately from accounts, our host keeps a short technical log of requests to the site — the address requested, the browser asking and the region it was served from. On the plan this site runs on those logs are retained for one hour and are then gone. They are not linked to an account, and nothing is copied out of them.

Deleting your account

Email the address below and we will delete the account and its email address. At present there is nothing else attached to an account to delete.

Where your data is kept

The database holding accounts is hosted by Supabase in Ireland, and the site’s server-side code runs on Vercel in Dublin, deliberately placed beside it. Both companies are based in the United States, so both are engaged under data processing agreements with the European Commission’s standard contractual clauses covering any access from outside the EEA.

Pages, images and fonts are served from Vercel’s worldwide network, from wherever is nearest to you. Those files are the same for every visitor and contain no account data.

Account mail — confirming an address, resetting a password — is sent through Resend, also a United States company, engaged under the same clauses. Resend stores the record of each message it sends for us in the United States, whichever of its regions the message is dispatched from.

The one transfer that is not ours to make is the poster images described above: your browser requests those from TMDB in the United States directly, and we are not part of that request.

Keeping it safe

Passwords are stored hashed and never in plain text, every connection to this site and to its database is encrypted, and only the site’s administrators can reach the database at all.

Your rights

You can ask us for a copy of what we hold about you, for a correction to it, for it to be deleted, for its use to be restricted, and for a portable copy of it. You can also object to the legitimate-interests use described above. Email the address below and we will answer within one month.

No decision about you is made automatically here. There is no profiling, no scoring and no automated decision-making of any kind.

If you think we have handled your data badly, you can complain to the Estonian Data Protection Inspectorate — Andmekaitse Inspektsioon, Tatari 39, Tallinn 10134, aki.ee. You do not have to raise it with us first, although we would rather you did, because we can usually fix it faster.

Children

This site is not aimed at children, and an account is not knowingly created for anyone under 13, which is the age Estonia sets and the lowest the GDPR allows. If we learn that one has been, we delete it.

Contact

privacy@dogsonfilm.com — a real person answers.

Changes to this policy

Last updated: 16 September 2026. If any of this changes in a way that matters, the change will be described here and this date will move with it.