Privacy Policy

Quanten Media is the company behind CONTRABAND, a VR screening room for independent films, AI cinema, and documentaries. This policy explains what personal information we collect when you use contraband.watch and its companion VR experience, why we collect it, and the choices you have.

We only collect what's needed to run scheduled screenings, sell tickets, and keep the room safe. Nothing beyond that:

• Account details: your name, email address, a securely hashed password (never stored in plain text), the VR headset you own (Quest 3, Quest 3S, Pico, Galaxy XR, another headset, or none yet), and your country.
• Screening & ticket activity: which screenings and showtimes you register for, your seat number, ticket type (one-time or wallet), confirmation code, and whether you showed up.
• Payment information: processed directly by Stripe, our payment processor. We store only a Stripe payment reference and receipt link; we never see or store your full card number.
• Wallet balance: if you top up a CONTRABAND wallet, the resulting balance.
• Votes: after a screening, we ask three questions (did you like it, would you watch it again, would you recommend it) and store your answers, to help decide which films earn more screenings.
• Guest tickets: if you invite guests, we generate confirmation codes for them. When a code is claimed, we log the IP address and time used, so one code can't be reused by strangers.
• Contact & filmmaker submissions: if you write to us or submit a film, we collect your name, email, and message, or film details (title, director, runtime, synopsis, and a link to your screener) and, for accepted films, the video file and rights/technical metadata you provide (music licensing, clearances, subtitle languages, flashing-light warnings).
• Notify-me requests: your email address, if you ask to be told when a specific screening opens.
• Usage data: standard web analytics collected through Google Analytics: pages viewed, approximate location derived from IP address, and device/browser type. See “Analytics” below.

• We do not collect or store your full credit card number. Stripe handles that directly; we only ever receive a payment reference and a receipt link.
• We do not record or store the live audience audio. During a screening, we connect you to other attendees over a live voice room so you can hear the room react, but that audio is never recorded or saved.
• We do not collect data from your headset itself. If you join through a VR headset, hand tracking, eye tracking, and room-scan data stay governed by your headset manufacturer's own privacy policy (e.g. Meta's), not this one; we never receive it.
• We do not use anything you submit (a message, a screener, a film) to train machine learning models.
• We do not sell your personal information to third parties. Ever.

• Create and maintain your account, and verify your email address.
• Process ticket purchases, refunds, and wallet top-ups.
• Seat you and any guests you invite together in the same audience room.
• Verify guest ticket codes and prevent one code from being reused beyond its intended guest.
• Send transactional email: verification links, receipts, password resets, and screening reminders.
• Respond to messages sent through the contact form and review filmmaker submissions.
• Look at aggregated vote data to decide which films get more screenings.
• Understand how visitors use the site, so we can improve it.
• Meet legal and accounting obligations, such as retaining payment records.

CONTRABAND does not set its own tracking cookies. When you sign in, your session token is stored in your browser's local storage, not a cookie; it's used solely to keep you signed in and is never shared with third parties. Google Analytics, described below, sets its own cookies to distinguish visitors and sessions.

We use Google Analytics to understand traffic to contraband.watch: which pages are viewed, how visitors arrive, approximate location derived from IP address, and device/browser type. This runs automatically for all visitors and is governed by Google's own privacy policy. If you'd rather not be tracked, most browsers let you block analytics scripts, or you can use a browser extension such as Google's Analytics opt-out add-on.

We rely on a small number of specialist providers, each processing only what it needs to do its job:

• Stripe: payment processing.
• Mux: video hosting and streaming for films and trailers.
• LiveKit: the real-time audience audio room during live screenings.
• Google Analytics: site analytics.
• Our transactional email provider: verification, receipt, and reminder emails.

Each of these maintains its own privacy policy governing how it handles data on our behalf.

• Account data is kept as long as your account is active. Ask us to delete it and we will, except where we're required to retain records, for example completed payment and ticket records for tax and accounting purposes.
• Verification and password-reset tokens expire automatically and are cleared once used.
• Guest-ticket claim IPs are retained for the run of that screening, then routinely cleared.
• Filmmaker submissions and correspondence are kept as long as reasonably needed to evaluate and communicate about them.

• Passwords are hashed; we never store them in plain text.
• All traffic to and from contraband.watch is encrypted (HTTPS/TLS).
• Payment details never touch our servers; they go directly to Stripe, a PCI-DSS-compliant processor.
• No method of transmission or storage is 100% secure, but we work to protect your information using industry-standard practices.

Regardless of where you live, you can ask us to:

• Give you access to the personal information we hold about you.
• Correct anything that's inaccurate.
• Delete your account and associated personal information.
• Restrict or object to how we use your data.
• Give you a copy of your data in a portable format.
• Withdraw any consent you've previously given us.

Use our contact form and we'll respond as quickly as we can.

Quanten Media is based in Singapore. Where the Personal Data Protection Act (PDPA) applies to you, the rights listed above are how we honor your PDPA rights. Direct PDPA-specific requests or complaints to the same contact above.

CONTRABAND is not directed at children under 13, and we do not knowingly collect personal information from anyone that age. Buying a ticket requires the ability to enter into a payment agreement; if you're under 18, you'll need a parent or guardian's permission to make a purchase.

Quanten Media operates from Singapore, and the service providers we rely on (Stripe, Mux, LiveKit, Google) operate globally. Your information may be processed in Singapore, the United States, or other countries where these providers maintain infrastructure. Each maintains its own safeguards for cross-border data transfer.

We may update this Privacy Policy as CONTRABAND grows. Material changes will be reflected by an updated “Last updated” date above, and where appropriate, we'll let you know by email or a notice on the site.

Questions, requests, or concerns about this policy or your personal information? Use our contact page.