Privacy
Dos Bros Film Challenge Last updated 2 August 2026
Short version: we collect your email so we can tell you when the round starts, we show your handle publicly only if you tick the box, and we don't sell, share, track, or advertise to anybody. There are no analytics on this site and no advertising cookies.
1. Who's responsible
Dos Bros — two individuals in the United States, self-funded, running this challenge. For data-protection purposes we're the controller. Contact us through the contact form.
2. What we collect, and why
When you sign up:
| What | Why | Shown publicly? |
|---|---|---|
| Handle or name | To identify you on the list and in the challenge | Yes, if you tick the box |
| Email address | To email you the start date, deadline, and results | Never |
| Weight class | To place you in the right class | Yes, if you tick the box |
| Graphics card (optional) | To help us set class boundaries sensibly | No |
| One-line concept (optional) | To show people what's being made | Yes, if you tick the box |
When you use the contact form: your name, email, subject and message. We keep it so we can reply and so we've got a record of what was asked — nothing else, and it goes nowhere else.
Automatically: standard server logs from Google App Engine — IP address, timestamp, page requested, browser type. These are Google's operational logs, kept on their default schedule, and we use them only to keep the site working and to stop abuse.
If you enter a film, we'll also hold what the rules require — models used, GPU and VRAM, and for prize claims the workflow materials you publish.
That's everything. No advertising identifiers, no cross-site tracking, no data brokers, no profiling.
3. Cookies
This site sets no cookies.
We store one item in your browser's local storage — theme, holding either light or dark — so the site remembers which you picked. It never leaves your device, identifies nobody, and you can clear it any time. That's the lot.
We embed a font stylesheet from Google Fonts, which means Google's servers see a request from your browser when you load the page.
4. Lawful basis
If you're in the UK or EEA: we process your signup details on the basis of your consent, given when you submit the form. Server logs and abuse prevention rest on our legitimate interest in keeping the site running.
You can withdraw consent at any time — see §7. Withdrawing it doesn't affect anything we did lawfully beforehand.
5. Who sees it
- Us, the two organizers.
- Judges see entries and films. They do not get the signup list or anyone's email address.
- Google Cloud, which hosts the site and the database on our behalf under their processing terms.
- A payment provider (Wise, or a stablecoin transfer if a winner asks for it) — but only for a winner, only what's needed to pay them.
We have never sold or shared this data and we won't. No marketing lists, no partners, no "trusted third parties."
6. Where it lives, and for how long
Data is stored on Google Cloud infrastructure in the United States. If you're in the UK or EEA, that's an international transfer, made under Google Cloud's standard contractual clauses.
- Signup details: kept until the round ends and results are published, or until you ask us to delete them — whichever comes first. If the round never happens, we'll email you, and we'll delete the list within 30 days of that email.
- Entries and published workflows: the archive is meant to be permanent — that's the point of it. Your film and your published method stay up unless you ask us to remove them, and we'll honour that.
- Contact messages: kept while we deal with them and for a reasonable period after, in case the conversation picks back up. Ask us to delete one and we will.
- Payout records: kept as long as we need to for tax and accounting.
7. Your rights
Wherever you are, you can ask us to:
- tell you what we hold about you,
- correct anything wrong,
- delete it,
- send you a copy in a portable format,
- stop processing it, or withdraw your consent.
Send us a note through the contact form and we'll action it — realistically within a few days, and within 30 days at the outside. We won't ask you why, and it won't affect your entry unless deletion makes it impossible to judge or pay you, in which case we'll say so first.
If you're in the UK or EEA and you think we've handled this badly, you can complain to your national data protection authority. We'd rather you told us first so we can fix it.
8. Children
The challenge is 18+, and the site isn't aimed at children. If you believe a minor has given us details, tell us through the contact form and we'll delete them.
9. Security
Standard practice: HTTPS everywhere, database credentials in Google Secret Manager rather than in the code, no email addresses in any public API response or page, and a shared multi-layer spam filter on both forms (which does check submitting IPs and email addresses against StopForumSpam, a public abuse-reputation service). We're two people, not a security team — we've built this carefully, but we're not going to claim more than that.
10. Changes
If we change this in a way that matters, we'll email everyone on the list. The date at the top always reflects the current version.
11. Contact
Use the contact form — it reaches both of us and a person reads it.
⚖️ Written in good faith by non-lawyers and not yet reviewed by a solicitor. If you're relying on this for something significant, take your own advice.