Privacy Policy

This policy explains what information is processed when you use Films on the Map (https://films-on-the-map.pages.dev, "the site"), why, and what your rights are.

1. In short

• No accounts, no sign-in, no ads, no cookies set by us, and no tracking profiles.
• Our visit counter never stores IP addresses. It keeps only the day, the page path, a count, a two-letter country code and a link tag (?ref=).
• Our hosting provider, Cloudflare, also gives us cookieless, aggregated statistics (Cloudflare Web Analytics).
• Your "passport", best quiz score and trip plan stay in your own browser and are never sent to us.
• The contact form runs on Google Forms. Only the message is required. Submissions are used only to handle your request and are deleted within 12 months.

2. Who is responsible

The site is run by private individuals in Israel ("the site operators", "we"). We decide how the information described here is used, so we are the controller of that information. You can reach us through the contact form; choose "Privacy". If you ask through the form, we will tell you the name of the person responsible and how to contact them directly.

3. Our visit counter: no IP addresses

When a page loads, your browser sends our server only the address (path) of the page. We then store:

• the date (Israel time);
• the page path, for example /en/godfather/;
• a count, which goes up by one.

When a visit starts from outside the site, we also add one to two more counts:

• the count for your country, as a two-letter code (for example "IT") that our hosting provider Cloudflare derives from your connection;
• if the link you followed contained a "?ref=" tag (for example ?ref=instagram), the count for that tag.

The counter never stores IP addresses. It also stores no cookies, device IDs or any other identifier, and it cannot tell one visitor from another. We have checked this in the site's code. Visits from automated browsers are counted separately as tests.

Purpose: to know, in aggregate, which pages are used and where visitors come from.

Legal basis (where the EU GDPR applies): our legitimate interest in running and improving the site (Art. 6(1)(f)).

Don't want to be counted? Use the "Don't count my visits" button on this page. It saves a small flag (mp_nocount) in your browser's local storage, and this browser is no longer counted. Clearing your browser data removes the flag.

4. Cloudflare Web Analytics

The site uses Cloudflare Web Analytics, a statistics service of our hosting provider. Cloudflare adds a small script to the pages. It measures page views and page speed and sends Cloudflare technical data such as the page address, the referring page, the browser and device type, the country and loading times.

According to Cloudflare, Web Analytics uses no cookies or local storage and does not fingerprint visitors. We see only aggregated reports.

Legal basis: our legitimate interest in understanding, in aggregate, how the site is used and how fast it loads. Cloudflare's privacy policy: https://www.cloudflare.com/privacypolicy/ (opens in a new tab)

5. Hosting and security

The site is hosted on Cloudflare Pages. Cloudflare, Inc. is a US company that runs a global network. Like any web server, Cloudflare's servers receive your IP address and technical request data, such as the address requested, the time and your browser type. Cloudflare uses this data on our behalf to deliver the pages and to protect the site from attacks and abuse. We keep no server logs of our own.

Legal basis: our legitimate interest in delivering a secure website.

6. The contact form (Google Forms)

The contact form is operated through Google Forms, a Google service. Google's privacy terms (https://policies.google.com/privacy (opens in a new tab)) apply to Google's processing when you open or send the form. Google may use cookies on its own form pages.

• No sign-in is needed.
• Every field is optional except the message. Give an email address only if you want a reply.
• Please don't include sensitive details, such as health information or identity documents, or other people's personal details.
• We use what you send only to handle your request.
• We do not share submissions with anyone else. Google, as the provider of the form service, stores them.
• Submissions, and the email notifications we receive about them, are deleted within 12 months.

You are not legally required to give us any information; it is up to you. Without a message, we cannot handle a request.

Legal basis: handling the request you sent us (our legitimate interest). For privacy requests: complying with our legal obligations.

7. Stored only in your browser

Some features save data in your browser's local storage, on your own device:

• your "passport" (the places you have marked);
• your best quiz score;
• your trip plan;
• the "don't count my visits" flag, if you choose it.

This data is not sent to us, and it is not used for tracking. It is needed only for the features you choose to use. You can delete it at any time by clearing this site's data in your browser settings.

8. Links, sharing, photos and fonts

• Google Maps links: nothing is loaded from Google until you click a link. After that, Google's terms and privacy policy apply.
• Share buttons open the service you choose (WhatsApp, Facebook, Telegram or X) or your device's share menu. That service's policy then applies.
• Photos, fonts and maps are served from our own site. While you browse, your browser makes no requests to Wikimedia, Google Fonts or map-tile servers.

9. What we don't do

We don't show ads, sell or rent data, build profiles, make automated decisions about you, or use advertising or social-media pixels.

10. International transfers

We are in Israel. The European Commission recognises Israel as providing an adequate level of protection for personal data (Decision 2011/61/EU, confirmed in its January 2024 review).

Cloudflare and Google are US companies and may process data in the USA and in other countries. They state that they protect such transfers with recognised mechanisms, such as the EU-US Data Privacy Framework and standard contractual clauses.

11. How long we keep data

• Visit counter: anonymous statistics, kept as statistics.
• Contact-form submissions and the related email notifications: deleted within 12 months.
• Browser storage: until you clear it.
• Technical data held by Cloudflare or Google: according to their policies.

12. Your rights

Depending on where you live, you may have the right:

• to know whether we hold data about you and to see it;
• to correct it or have it deleted;
• to object to or restrict its use;
• to receive it in a portable form.

These rights come, for example, from the EU General Data Protection Regulation (GDPR), Israel's Privacy Protection Law 1981 and Brazil's General Data Protection Law (LGPD).

To make a request, use the contact form and choose "Privacy". Because the counter stores no identifiers, we cannot link counter statistics to any person. We aim to answer within 30 days. We may ask for details needed to confirm that the request is yours.

You may also complain to a data protection authority:

• in Israel, the Privacy Protection Authority;
• in the EU or EEA, the authority of your country, for example the AEPD (Spain), the Garante (Italy) or the CNPD (Portugal);
• in Brazil, the ANPD.

13. Children

The site is a general-audience travel and film guide. We do not knowingly collect personal data from children. If you are under 16, please do not enter your email or other personal details in the contact form.

14. Security

The site is served only over HTTPS, collects as little data as possible, and limits access to the statistics to the site operators.

15. Changes to this policy

We may update this policy. The date below shows the latest version. To the extent permitted by law, the Hebrew version prevails over other language versions.

Contact: the Contact page (/en/contact/), request type "Privacy".

Last updated: 1 November 2026