Online Battle room privacy

Online duels and Royale need temporary shared state. Movie Night, untimed Solo, Computer and Pass & play do not create server rooms.

Your essential seat

Creating or joining sets a random Secure, HttpOnly, SameSite=Lax session cookie. The server recognises a hash; JavaScript cannot read the cookie. No email, account profile, chosen name or chat. Player handles are generated.

Temporary records

Our existing Sites Cloudflare Worker and D1 hold room codes, generated handles, hashed seat identifiers, accepted catalogue film IDs, kit choices and bans, queue slots, actions, revisions, deadlines and results for six hours. Expired rooms cannot be played or joined; request-triggered cleanup removes expired records in bounded batches. Short-lived rate counters use hashes. Hosting operational logs may include network information under the provider’s policies.

Typed search queries are sent to our server and Wikidata to find titles; they do not enter analytics or room records. Search cache keys are hashed. Public film facts may be cached for 24 hours, query results for one hour and missing results briefly; bounded cleanup applies. Two reviewed film previews (Speed and Dark Phoenix) load directly from MoviePosterDB. That provider receives your IP, browser information and our site origin when an image loads. Its source link and copyright notice accompany the image. Other posters appear only when verified artwork or separately authorized provider access exists; optional TMDB remains disabled. Verified film IDs and the accepted public facts are pinned into server matches for validation. Royale opponents see only whether you have answered until the round closes.

Your choices

Choose untimed Solo, Computer or Pass & play to avoid rooms. Their online film search still sends queries for matching; the frozen offline bank works without those requests. Find match exposes your generated handle and kit to the other matched player; public Royale exposes generated handles to members of that lobby. A waiting seat can be removed with Leave queue. Clearing cookies loses your online seat; clearing storage removes offline saves. It does not immediately delete another player’s shared match. Optional analytics remains off until allowed and sends only mode, edition and normalized win/draw/loss—not room codes, identities or films.

Manage optional analytics