Samam

Privacy

Last updated November 2026

Samam was made independently and is given away freely. We keep a light record of how the site is used so we can tell whether the film is reaching people, and where our limited effort is worth spending. That is the whole purpose of what is described below. We do not sell your data, we do not run advertising, and we do not try to work out who you are. Some of what happens on this site is done by other companies' code rather than ours; each of them is named here.

When you visit a page

We store a short record of the visit:

• the page, the date and time, and the website that linked you here (its name only, never the full address);
• your country and, where it is available, your state or region, as reported by Cloudflare; and your browser, operating system and device type in broad categories;
• your IP address only as a one-way hash that is re-scrambled every day — our own records never hold the address itself, and the hash cannot be used to recognise you from one day to the next;
• a short code if you arrived through a link we tagged (for example one in a newsletter), so we can see which of our own efforts brought people in;
• a few things you do on the page: how far down you scroll, playing the trailer, downloading the film, opening the screenplay, opening the payment box, signing up for email, following a link out.

Separately, the site is delivered through Cloudflare and hosted by GoDaddy. Like any web server, they keep standard access logs, and those do contain IP addresses.

Cookies we set

Three small first-party cookies. sam_vid tells a new visit from a returning one and lasts about thirteen months. sam_sid groups the pages of a single visit and lapses after thirty minutes. sam_attr remembers which link first brought you, for ninety days. They hold random identifiers only, nothing tied to who you are. The site works normally if you block or clear them.

Cookies and code from others

• PostHog, a product-analytics tool, shows us which pages and links get used and whether the trailer gets played. It records page views and clicks, sets one cookie of its own and keeps the same identifier in your browser's storage. Its data is processed in the United States. We load it anonymously — we never ask it to identify you, and there is no session recording. It is not loaded at all if your browser sends a Do Not Track or Global Privacy Control signal.
• Razorpay, which takes card and UPI payments. Its checkout code loads with the homepage so that paying works the moment you choose to, and it sets a cookie (rzp_unified_session_id) and keeps a device identifier in your browser's storage, whether or not you pay.
• YouTube. The trailer is YouTube's own player, loaded from youtube.com when you scroll near it. Google may set its own cookies when it does.
• GoDaddy, our hosting company, adds a script of its own to every page to measure how the site performs. We did not put it there. It sets three cookies: _tccl_visitor, _tccl_visit and _scc_session.

If you leave your email

We keep the address, the date, which form you used, your country, the same daily hash of your IP address described above, and the tagged-link code if you arrived through one. The address, the country and that code are passed to Brevo, the service we send email with. We write only when there is real news about the film. To come off the list, use the unsubscribe link in the email, or write to [email protected].

If you pay what you want

Payments are handled by Razorpay (cards and UPI) and NOWPayments (crypto). We never see your card or wallet details. We keep a record of the amount, the currency, the provider's reference numbers, anything you chose to write in the note, and an email or phone number only if you entered one. Beside it we keep where the visit came from — your country, the site that linked you, the tagged-link code, the first page you landed on — and the random identifiers from the cookies above, so we can tell which of our efforts led to support. These are financial records and are kept as such.

Your choices

• Turning on Do Not Track or Global Privacy Control in your browser stops PostHog from loading and stops the page reporting what you do on it. The plain record of a page visit or a download is still kept, and the code from Razorpay, YouTube and GoDaddy still loads.
• Clearing or blocking cookies in your browser removes every cookie named above; the site still works.
• The visit records contain no name and no account. We keep them for as long as they are useful for understanding the site.
• To have your email address or a payment note removed, write to us.

Contact

Questions about any of this: [email protected].

Back to home