Privacy Policy

This Privacy Policy explains how Movie Box DramaPlay & Shows ("we", "our" or "us") collects, uses, shares and protects information when you use our mobile app for Android and iOS (the "App") and this website (the "Site"). By using the App or the Site you agree to the practices described here. If you do not agree, please do not use them.

Summary
Information the App collects
Information kept only on your device
What we do not collect
How we use information
Legal bases (EEA, UK, Switzerland)
How we share information
Advertising and your choices
How long we keep information
Your privacy rights
Children
International transfers
Security
The Site
Changes to this policy
Contact us

1. Summary

The App lets you browse and watch short drama series, trailers and reviews. You do not need to create an account, and we do not ask for your name, email address or phone number.
When you open the App it creates a random install ID so our servers can give you a guest session and stream videos to you.
We use Google Analytics for Firebase to understand how the App is used and Firebase Crashlytics to fix crashes.
The App is free and funded by ads from Google AdMob. Where the law requires it, we ask for your consent before ads are personalised, and you can change your choice at any time.
Your favourites and settings are stored only on your device.
We do not sell your personal information for money.

2. Information the App collects

2.1 Information you give us

The App has no sign-up or login. If you contact us, for example with "Report" in the player or in the Profile tab, the App opens your own email app with a pre-filled message to our support address. If you send it, we receive your email address, the report reason, any contact details you typed in and the message itself. We use this only to reply to you and to fix the problem you reported.

The App may show a short optional survey about your viewing habits. Your answers are recorded as anonymous analytics events (see 2.3) and are not linked to your name or email.

2.2 Information sent to our servers

To create a guest session and deliver content, the App sends the following with its requests to our servers and to the content-delivery network that streams videos:

a random install ID and a random session ID generated by the App when it is first opened (these are not your device's advertising ID);
the App's package name and version, your device brand and model, your operating-system version and the App language you selected;
your IP address and the date and time of each request, which every internet connection reveals;
the content you request, such as the dramas and episodes you open, search terms you enter, the genres and lists you browse and subtitle files you load.

The App also downloads configuration files (for example, ad settings) from our servers. These requests contain only standard connection information such as your IP address.

2.3 Analytics (Google Analytics for Firebase)

We use Google Analytics for Firebase, a Google service, to understand which features people use and to improve the App. It records events such as:

screens viewed, onboarding completed and the App language chosen;
dramas viewed, episodes started and completed, episodes unlocked, reels viewed, playback speed and subtitle choices;
searches, genre and list selections, favourites added or removed;
taps on Share, Rate and Report, survey answers, and ad impressions and ad taps.

Firebase also collects some information automatically, including an app-instance ID, your device's advertising ID where available and permitted, device model, operating-system version, approximate location (country, region or city, derived from your IP address), first open, session length and App updates. Analytics is not linked to your name or email address.

2.4 Crash reports (Firebase Crashlytics)

If the App crashes or hits a serious error, Firebase Crashlytics sends us a crash report containing the technical error details, a Crashlytics installation ID, device model, operating-system version, App version, the device's orientation, free memory and disk space, and the time of the crash. We use these reports only to find and fix bugs.

2.5 Advertising (Google AdMob)

The App shows banner, native, interstitial, app-open and rewarded ads through Google AdMob. Rewarded ads are optional: you can choose to watch one to unlock an episode. To serve and measure ads, Google may collect:

your device's advertising ID (Google Advertising ID on Android; on iOS, the IDFA only if you allow tracking);
your IP address and approximate location derived from it;
device and App information, such as model, operating system, language and App version;
ad interactions, such as which ads were shown, tapped or watched to the end.

Google uses this information to deliver ads, limit how often you see the same ad, measure ad performance, prevent fraud and, if you allow it, show ads based on your interests. Learn more in How Google uses information from apps that use its services.

The App may also show our own promotions ("house ads"). Tapping one opens a link in your browser or app store; no personal information is sent with it.

2.6 Device security checks

To protect our content and ad partners from abuse, the App checks on your device whether it is rooted or jailbroken, whether Android developer options are on and whether a VPN connection is active. These checks run only on your device to decide whether the App can run. The results are not sent to us, and the App does not look at your VPN traffic.

3. Information kept only on your device

The following stays on your device and is not sent to us:

your list of favourite dramas;
your App language and whether you have completed onboarding, the survey and in-app tips.

The random install ID from 2.2 is also stored on your device, in the secure system storage (Android Keystore or iOS Keychain). On Android, the App's data is excluded from device backups. Uninstalling the App deletes this data; on iOS the install ID may remain in the Keychain after the App is deleted.

4. What we do not collect

The App does not ask for, access or collect:

your name, phone number or email address (unless you email us);
your contacts, photos, videos, files, camera or microphone;
your precise (GPS) location;
payment or financial information. The App has no in-app purchases.

The only device permissions the App uses are internet access, network state and, on Android, the advertising ID permission. On iOS, it asks for App Tracking Transparency permission, which you can decline.

5. How we use information

To provide the App: create your guest session, stream videos and subtitles, show search results and remember your settings.
To fund the App with ads: show, limit and measure ads, and personalise them where you have allowed it.
To improve the App: understand which features and content are used, and find and fix crashes and errors.
To keep the App safe: prevent fraud, ad abuse, content scraping and misuse of our servers.
To support you: reply to your emails and handle your reports.
To meet legal obligations: comply with the law and respond to lawful requests.

6. Legal bases (EEA, UK and Switzerland)

If you are in the European Economic Area, the United Kingdom or Switzerland, we rely on these legal bases:

Performance of a contract: to provide the App you asked to use (sections 2.2 and 3).
Legitimate interests: to keep the App secure, fix crashes, understand usage and show non-personalised ads that fund a free service. We have balanced these interests against your rights.
Consent: for personalised advertising and for storing or accessing information on your device where the law requires consent. You can withdraw consent at any time (see section 8).
Legal obligation: where we must keep or disclose information by law.

We share information only as described here:

Google (Firebase Analytics, Firebase Crashlytics and AdMob), which processes information as described in section 2 and in the Google Privacy Policy and Firebase privacy information. When AdMob serves ads, Google's certified ad partners may also receive ad-related information.
Hosting and content-delivery providers, including Cloudflare, that run our servers and stream videos on our behalf. They may only use the information to provide their services to us.
Apple and Google when you use their features from inside the App, such as rating the App, the share sheet or your email app. Their own privacy policies apply.
Legal and safety reasons, when required by law or to protect the rights, property or safety of our users, the public or us.
Business transfers, if we are involved in a merger, acquisition or sale of assets. We will tell you before your information becomes subject to a different privacy policy.

We do not sell your personal information for money. Under some US state laws, letting ad partners use device identifiers for personalised ads can count as "sharing" for cross-context behavioural advertising; you can opt out as described in section 8.

8. Advertising and your choices

EEA, UK and Switzerland: on first launch the App shows Google's consent form, where you can accept or refuse personalised ads. You can change your choice at any time with Profile → Privacy choices.
iOS: the App asks for permission to track through App Tracking Transparency. If you decline, the App cannot access your IDFA. You can change this in Settings → Privacy & Security → Tracking.
Android: you can delete or reset your advertising ID in Settings → Privacy → Ads (or Settings → Google → Ads, depending on your device).
Google ad settings: you can manage ad personalisation at My Ad Center.

If you opt out of personalised ads you will still see ads, but they will be less relevant. Google may still use limited information to serve ads, limit repeats, prevent fraud and produce aggregate reports.

9. How long we keep information

Server and delivery logs (section 2.2): only as long as needed to run and secure the service, then deleted or anonymised.
Analytics data: kept by Google Analytics for Firebase for the period set in our Analytics settings, at most 14 months for user-level data. Aggregated reports do not identify you.
Crash reports: kept by Firebase Crashlytics for 90 days.
Emails you send us: for as long as needed to handle your request and any follow-up, then deleted.
On-device data: until you clear the App's data or uninstall the App.
Advertising data: kept by Google under its own retention policies.

10. Your privacy rights

Depending on where you live, you may have the right to:

know what personal information we hold about you and get a copy of it;
ask us to correct or delete it;
object to or restrict how we use it, including for direct marketing;
withdraw consent at any time, without affecting earlier processing;
receive your information in a portable format;
opt out of "sale" or "sharing" of personal information and of targeted advertising;
not be treated differently for using these rights;
complain to your local data-protection authority.

To use these rights, email us at the address in section 16. Because the App has no accounts, the information we hold is linked only to a random install ID, not to your name or email, so we may be unable to find records that relate to you. Deleting or resetting your advertising ID and uninstalling the App break the link between your device and that data. We may need to verify your request, and we will reply within the time the law requires. An authorised agent may make a request for you where local law allows it.

California residents: in the past 12 months we have collected these categories of personal information: identifiers (install ID, advertising ID, IP address), internet or other network activity (App usage and ad interactions), approximate geolocation, and device information. We collect them for the purposes in section 5 and disclose them to the recipients in section 7. We do not use or disclose sensitive personal information.

11. Children

The App and the Site are not directed to children under 13, or under the minimum age for digital consent in your country, and we do not knowingly collect personal information from them. If you believe a child has given us personal information, please contact us and we will delete it.

12. International transfers

We and our service providers, including Google and Cloudflare, process information in the United States and other countries whose data-protection laws may differ from yours. When we transfer personal information out of the EEA, UK or Switzerland, we rely on safeguards such as the European Commission's Standard Contractual Clauses or an adequacy decision.

13. Security

The App communicates with our servers over encrypted HTTPS connections and keeps its install ID in the secure system storage. We limit access to the information we hold and use reputable service providers. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

14. The Site

If you contact us through the Site, we collect your name, email address and message so we can reply. We do not sell this information.

The company that hosts the Site keeps standard server logs, such as IP address, browser type, pages visited and the time of each visit, to run and secure the Site. The Site loads fonts from Google Fonts, so your browser sends your IP address to Google when you visit.

The Site does not use advertising or analytics cookies. If the host sets a strictly necessary cookie for security or load balancing, it is used only to operate the Site.

15. Changes to this policy

We may update this policy from time to time, for example when we add features or when the law changes. We will change the "Last updated" date above and, for significant changes, let you know in the App or on the Site. Please review this policy regularly.

16. Contact us

For questions about this policy or to exercise your rights, contact us at support@movieboxdramaplayandshows.com or contact@movieboxdramaplayandshows.com, or use our contact page.