Privacy Policy

Updated on 4 November 2026

This is a translation of the Italian text. In case of any discrepancy, the Italian version prevails.

In short

We only ask for the data needed to sign in and to process your films. Only you can see your films (plus the administrator, for support and security). To process them we use external artificial-intelligence services, some outside the European Union: the film's audio, frames and text go through them. We don't sell data. We advertise on Facebook, Instagram and Google and, only if you accept it in the cookie banner, we use the Meta Pixel and the Google Ads tag to measure those ads. We also note which of our ad campaigns you came from: just its name, which stays with us.

Who the controller is
What data we process
Why, and on what legal basis
Who we entrust it to
Data outside the European Union
How long we keep it
Automated checks
Your rights
Age, changes, cookies

1. Who the controller is

The data controller is Nicolmario Ciccotti, who runs MovieCineLab as a private individual. For any question about this page or your data, write to contatti@moviecinelab.com.

2. What data we process

Your account

If you sign in with Google: name, email address and profile picture. We never receive your Google password.
If you sign up with your email: name, email address and password. We don't store the password in clear text but in a non-reversible hashed form: not even we can read it.
Date of sign-up and of your last sign-in.
The language you use the site in (Italian or English), so we can write to you in the right language.

Your films and what we make from them

The film you upload, or the link we download it from, with the title you give it.
Everything the platform makes from it: audio, frames, transcript, list of characters, subtitles, novel, screenplay, voices and dubbed audio.
For dubbing: short pieces of each character's original voice, used as a reference so that the new voice takes on its timbre, and the voice "fingerprints", computed on our server only to tell the characters apart. They aren't used to identify people and they disappear with the film.
The lines you write with "Change the words", including in the tries on the example film.

A film may contain other people's data: faces, voices, names. We process them only to work on the film at your request; you are responsible for having the right to use it (see the Terms).

When you use the service

The declarations you accept, with date, time and text: acceptance of the Terms and of this page, of the clauses to be approved separately and, for every film you add, the one about rights.
The minutes bought and used, with the related transactions.
Payments: they are handled by Stripe. We receive the outcome, the amount and a reference; we don't see or store your card details.
The requests you send us (support from the Help page, account unblocking) and our replies.
The ad campaign you first came from, if the link carries its name (the utm_campaign parameter, for example “sciarada_it_nov26”): we keep it in the session cookie until you sign in, then in your account. It's only the campaign's name: it doesn't say who you are and we don't send it to anyone. If you come from the ad and sign in with Google, for the length of the sign-in (a few seconds) we also keep in the session cookie, together with the campaign's name, the ad click code (the fbclid parameter for Facebook and Instagram, gclid, gbraid or wbraid for Google), only to put them back into the address of the first page after you sign in; then we remove them. The Meta Pixel and the Google Ads tag read that code only if you accepted marketing cookies.
The server's technical logs: IP address, date and time, page requested, browser.

3. Why, and on what legal basis

What for	Legal basis
Letting you sign in, processing your films, showing them to you, sending you account emails (address confirmation, new password)	Performance of the contract you accept when you sign up (Art. 6(1)(b) GDPR)
Selling minute packs and keeping accounting records	Contract and legal obligations (Art. 6(1)(b) and 6(1)(c))
Security of the service, abuse prevention, blocking those who break the terms, handling reports, defence in case of disputes	Legitimate interest (Art. 6(1)(f))
Measuring how well our ads work (how many sign-ups and purchases come from each campaign) using the name of the campaign you came from, and showing you first the example film of the ad you saw	Legitimate interest (Art. 6(1)(f)): it's only the campaign's name, it stays with us and doesn't go to Meta or anyone else. You can object by writing to us
Measuring our ads on Facebook and Instagram with the Meta Pixel (visits, sign-ups, purchases, first film), only if you accept marketing cookies	Consent (Art. 6(1)(a) GDPR and Art. 122 of the Italian Privacy Code), which you can withdraw at any time
Measuring our ads on Google with the Google Ads tag (visits and, only once, sign-up with a new account), only if you accept marketing cookies	Consent (Art. 6(1)(a) GDPR and Art. 122 of the Italian Privacy Code), which you can withdraw at any time

We don't sell your data and we don't send you promotional emails. For advertising, the only data that leaves us is the Meta Pixel's and the Google Ads tag's, only with your consent; the name of the campaign you came from stays with us: see the cookie page.

4. Who we entrust it to

To run MovieCineLab we use some third-party tools, which may change depending on the needs of the service. They process data on our behalf and only for the service they provide us, under their own terms. Today they are:

Provider	What it does	What it receives	Where
Server provider	Hosts the site, the films and the jobs	Everything on the platform	European Union
Language-model provider	Processing the film's text and images: translations, subtitles, novel, screenplay, dubbing lines	The film's text, frames, lines you write	China
Computing services	Processing the film's audio: transcription, voice separation, dubbing voices	The film's audio, pieces of the characters' original voices, lines to be spoken	USA
Google	Sign-in with Google, if you choose it	Your Google account data listed above	USA
Stripe	Payments	Payment data, email	Ireland / USA
Meta (Meta Platforms Ireland)	Ad measurement with the Meta Pixel, only if you accept marketing cookies. For the collection and transmission to Meta we are joint controllers with Meta; the rest is decided by Meta, under its privacy policy	Pages visited (without film titles), sign-up, start and amount of purchases, first film; IP address and browser data. Never name, email or film content	Ireland / USA
Google (Google Ireland), for Google Ads	Ad measurement on Google with the Google Ads tag, only if you accept marketing cookies (since 4 November 2026). Google processes the data it receives as an independent controller, under the Google Ads controller-controller data protection terms and its privacy policy; no personalised advertising	Landing page (without film titles), ad click code, sign-up with a new account (only once); IP address and browser data. Never name, email or film content	Ireland / USA

We send artificial-intelligence providers the film's content, not your account data (name, email). The service's emails are sent from our own mail server. The fonts of the pages are on our server: when you open MovieCineLab your browser doesn't contact other sites, except when you choose to sign in with Google or to pay and, if you accept marketing cookies, Meta and Google Ads.

The MovieCineLab administrator can see all users' films and products: this is done only for support, security and to check reports.

We may disclose data to the authorities when the law requires it, for example in the presence of illegal content.

5. Data outside the European Union

Some providers work outside the European Union:

United States: the transfer is based on the EU-US Data Privacy Framework for companies that have joined it and, for the others, on the standard contractual clauses approved by the European Commission.
China (the language-model provider): there is no adequacy decision of the European Commission for China, and data protection there is not equivalent to European protection. We send only the film's text and frames and the lines you write, never your account data, because it is necessary to provide the service you ask for (Art. 49(1)(b) GDPR). If you don't want a film's content to reach China, don't upload it.

6. How long we keep it

What	For how long
Account	As long as it exists. You can delete it whenever you like from the Account page, with the "Delete your account" button: the account, the films and everything in them, and the remaining minutes disappear straight away. We send you a confirmation email. Only purchases and declarations remain, for the periods shown below. In backup copies the account remains for at most the number of days shown below.
Original film (the file you upload or we download)	Deleted automatically after 48 hours without use: any work on the film restarts the 48 hours.
Products (subtitles, novel, screenplay, dubbing)	Until you delete them. The "Delete the film" button removes the film and everything in it straight away and for good.
Backup copies of account data	3 days; those made by hand before work on the service, at most 30 days. Films are not in the backup copies.
Minute purchases	Payments are recorded and kept by Stripe, as the law requires. We keep only one line per purchase (date, amount, reference), for at most 10 years, even after the account is deleted. The other minute transactions disappear with the account.
Accepted declarations (Terms, clauses, film rights)	At most 10 years from the declaration, even after the account is deleted: they serve to prove what was declared, in case of disputes.
Support requests	As long as the account exists; they disappear when you delete it.
Ad campaign you came from	In the session cookie until you sign in or close the browser; in the account as long as it exists: it disappears when you delete it.
Ad click code (`fbclid`, `gclid`, `gbraid`, `wbraid`), signing in with Google	In the session cookie only during the Google sign-in (a few seconds), then removed.
Account blocked for breaking the terms	The time needed to assess any unblocking request and to defend ourselves in case of disputes, at most 12 months.
Server technical logs	14 days.

The providers listed above may keep what they receive for a limited time, under their own terms.

7. Automated checks

Lines written with "Change the words" go through an automatic filter that rejects sexual content involving minors. We may also use automated checks on uploaded films that flag cases for the administrator to look at. No decision about your account is taken by automated means alone: blocks and suspensions are decided by a person.

8. Your rights

You can ask us at any time to see your data, correct it, delete it, restrict its use, receive it in a machine-readable format or object to processing based on legitimate interest. Write to contatti@moviecinelab.com: we reply within one month.

If you think we are processing your data unlawfully you can lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali, or with the authority of the EU country where you live.

9. Age, changes, cookies

MovieCineLab is reserved for adults (18 and over). If we find an account belonging to a minor we close it.

If we change this page in an important way we'll tell you at your next sign-in. The date at the top shows the last change.

For cookies see the cookie page: technical ones always, Meta's and Google's marketing ones only if you accept them. You can change your choice from “Cookie preferences”, at the bottom of every page or on the Account page.