What this site records

The server writes down every request it answers. That happens for every visitor and is not something you are asked about, it is how a web server works at all.

Purpose

delivering what your browser asks for, and finding out afterwards why something failed

• the IP address, in full and not shortened
• the date and time, what was asked for, the answer and its size, the page you came from and your browser identification string

The log is not routinely read and is not used to identify anybody.

Turning away abuse

fail2ban reads the same log and turns away the address behind repeated failed requests: five failed requests from one address within ten minutes, or three at the server login. A ban lasts one hour, and four hours for the server login; the record goes after one day.

Watching the films

The films, posters and typefaces come from our own servers; there is no third-party video player, so pressing play contacts only us.

Until you press something, this site stores nothing at all. The count described above writes nothing here, no cookie, no entry, nothing for you to clear, which is why you are not asked about it. Whatever is stored is stored because you answered the notice or used a control, and none of it leaves your device.

The Google cookies appear only after you agree; the objection is written only if you make one.

Browsers cut these lifetimes down; the period shown is the longest possible.

Nothing is withheld if you refuse; the two answers are one press each, and the Global Privacy Control signal is honoured as a refusal.

Changing your answer

You can withdraw at any time, as easily as you agreed, one press, here or at the foot of any page.

Withdrawing switches the tag off, deletes both Google cookies and reloads the page; later pages never fetch it. It stops things from that moment rather than undoing what came before.

Every recipient, named:

• Hetzner Online GmbH, Germany, runs the server. A processor under Art. 28 GDPR, under a data processing agreement.
• Google Ireland Limited, Ireland, the company our Google Analytics terms are with. The contract being with it does not mean it holds the data.
• Google LLC, United States, receives the usage data and stores them there. Google offers Art. 28 GDPR processor terms, which we have accepted. German supervisory authorities hold that operator and Google are joint controllers under Art. 26 GDPR for Analytics, and no Art. 26 arrangement exists here; the question is not settled.

Leaving the EU

The basis is Art. 45 GDPR, the European Commission’s adequacy decision of 10 July 2023 for the EU–US Data Privacy Framework, which covers only organisations on the framework list at the time of the transfer. Checked 2026-09-05: Google LLC is certified.

Not Art. 49(1)(a) GDPR: agreeing to be counted is not agreeing to bear the risk of a transfer.

United States public authorities can reach data held there under its surveillance laws, with administrative redress rather than a court. The decision is under challenge before the Court of Justice of the European Union; if it falls, the counting stops.

Nothing here is kept “for as long as necessary”.