Submissions privacy policy
Effective October 13, 2026. This covers the submissions app at globalfilmfests.com/app/. Browsing the rest of the site is covered by the site-wide privacy policy. The rules for using the app are in the submissions terms.
What the app stores
- Your account: name, email, and a one-way hash of your password (we can’t read your password).
- Your films: title, credits, synopsis, runtime, completion date, language, country, and links to your screener, trailer and poster, plus any screener password you add. We store links only; no video files.
- Your tracker: festivals, status, platform, dates, fees and notes. Only you see it.
- Entries made here: the film, the category, your premiere statement, your note, and the version of the rules you accepted.
- Screener opens: the time a festival team member opens your screener link through the app.
- Judging: team roles, 1–10 scores, private notes, the decision, and any feedback the festival writes.
- Festival claims: the email used to claim, or the note sent for review.
- Monthly alerts: your email and chosen country, if you subscribe.
- Security records: sign-in codes (stored hashed, valid 15 minutes), the IP address with sign-up, sign-in and form attempts (24 hours, against spam and password guessing), and a log of account actions.
- One cookie,
gffapp, limited to /app/, that keeps you signed in for up to 30 days.
Who sees what
- Before you enter a festival, your films and tracker are private to you.
- When you enter a festival through the app, that festival’s team (its admins, programmers and judges) sees your name, email, the film’s details, the screener link and password, and your premiere statement and note. Each festival is responsible for how it uses what it receives, including its own exports.
- Screener opens: you see how many times your screener was opened and when, never by whom. The festival’s admins and programmers can see which team member opened it.
- Scores and private notes stay inside the festival’s team. Admins and programmers see everyone’s scores; a judge sees their own. Filmmakers see written feedback only if the festival writes some for them.
- Published numbers (entries received, films selected) are public only when a festival chooses to publish them.
- Never sold. We don’t sell, rent or share app data for advertising. Email is delivered by Resend, and the server is hosted by DigitalOcean in the United States.
Emails the app sends
Only for things you started or are part of: sign-in codes, password resets, claim codes, entry receipts, team invitations, decisions (with any feedback), overdue-decision notices, and the monthly list if you subscribed. They come from noreply@globalfilmfests.com.
How long it’s kept
- Account, films, tracker and entries: until you delete your account.
- Security records: 24 hours for rate limits. Sign-in codes expire after 15 minutes.
- Server backups can hold deleted data for up to 30 days.
- Copies a festival exported before you deleted your account are held by that festival.
Your controls
- Delete your account from your dashboard. This removes your profile, films, tracker, alerts, festival roles and past entries with their scores. Entries a festival is still deciding on must be withdrawn first.
- Export your tracker as a spreadsheet from the tracker.
- Change or remove a screener link on the film’s page at any time.
- Stop the monthly email with the link in each message.
- For a copy of everything we hold about you, a correction, or any privacy question, contact us. We answer within 30 days, wherever you live (including the EU, UK and California).
Children
Accounts are not for children under 13. Filmmakers under 18 should use the app with a parent or guardian, who agrees to the submissions terms.
Changes
We’ll update the date above and email account holders about significant changes.