Privacy Policy & Cookie Policy

Carnival of Masks Effective Date: 1/1/2025 Last Updated: 8/15/2026

Carnival of Masks ("we," "us," or "our") operates the website carnivalofmasks.com (the "Site") in connection with our documentary film and related community, sponsorship, and outreach activities. This Privacy Policy and Cookie Policy ("Policy") explains what personal information we collect, how we use and share it, and the choices you have. It applies to the Site and to information we collect through forms, newsletters, and tools linked from the Site.

By using the Site, you agree to the collection and use of information as described in this Policy. If you do not agree, please do not use the Site.

1. Information We Collect

1.1 Information You Provide Directly

  • Contact form (carnivalofmasks.com/contact): name, email address, and message content.

  • Interview submission form (Google Form linked from the Site): this form lets you voluntarily submit yourself for consideration to appear in the documentary. If you choose to fill it out, we collect your name, contact information, and any details, photos, or other media you choose to share about your Carnevale story. Submitting this form does not guarantee you will be featured or contacted. Because the form is hosted by Google, Google's own privacy policy also applies to your submission — see Section 4.

  • Newsletter signup (Substack): your email address, collected when you subscribe. This is collected and stored directly by Substack, not by us — see Section 4.

  • Donations: If you donate through our fiscal sponsor, the International Documentary Association (IDA), or through Allyra Fundraising, your payment and donor information is collected and processed by those third parties under their own privacy policies — see Section 4. We do not receive or store your full payment details.

  • Sponsorship and partnership inquiries: business contact information you submit through the Sponsor or Partner pages.

  • Trip Planner tool (tripplanner.carnivalofmasks.com): this is a separate tool built on the Lovable platform. The only information we save from this tool is your email address.

1.2 Information Collected Automatically

When you visit the Site, we and our service providers may automatically collect certain information through cookies and similar technologies, including:

  • IP address and approximate location

  • Browser type and device information

  • Pages visited, time spent on the Site, and referring/exit pages

  • General usage and interaction data

This is collected via Squarespace's built-in analytics and, where installed, Google Analytics. See Section 3 (Cookies) for details.

1.3 Information from Social Media

Links and embedded content from Facebook, Instagram, TikTok, and YouTube may allow those platforms to collect data about your interaction with embedded content, subject to their own privacy policies.

2. How We Use Your Information

We use the information we collect to:

  • Respond to inquiries and process story submissions, sponsorship, and partnership requests

  • Send newsletters and updates about the documentary (via Substack, based on your consent to subscribe)

  • Process donations through our fiscal sponsor and payment partners

  • Understand how visitors use the Site and improve its content and functionality

  • Comply with legal obligations and protect our legal rights

We do not sell your personal information.

3. Cookies and Similar Technologies

Cookies are small text files placed on your device that help websites function and collect usage data. We use the following categories:

  • Essential/Functional cookies: required for basic Site functionality (e.g., Squarespace platform cookies, shopping cart functionality if applicable). These cannot be disabled without affecting the Site.

  • Analytics cookies: used to understand visitor behavior, including Squarespace's built-in analytics and Google Analytics (if enabled). These help us see aggregate trends like page views and traffic sources.

  • Third-party/social cookies: may be set by embedded content from Facebook, Instagram, TikTok, YouTube, and Substack when you interact with those embeds.

Managing cookies: You can control or delete cookies through your browser settings. Note that blocking some cookies may affect Site functionality. If you are located in the UK/EEA, Squarespace offers a built-in cookie consent banner (available in Website Settings) that can be enabled to request consent before non-essential cookies load — we recommend turning this on if you expect visitors from the UK or EU, given the film's Italy/EU focus.

4. Third-Party Services

Several tools linked from or embedded on the Site are operated by third parties and governed by their own privacy policies, not this one. These include:

ServicePurposePrivacy PolicyGoogle FormsVoluntary interview/casting submissionspolicies.google.com/privacySubstackNewsletter hosting and deliverysubstack.com/privacyAllyra FundraisingDonation processingallyrafundraising.comInternational Documentary Association (IDA)Fiscal sponsorship / tax-deductible donationsdocumentary.orgFacebook, Instagram, TikTok, YouTubeSocial community and contentrespective platform policiesGoogle Analytics (if enabled)Site usage analyticspolicies.google.com/privacyTrip Planner (built on Lovable)Saves your email address onlyapp built for Carnival of Masks; underlying platform: lovable.dev

We encourage you to review those policies before submitting information through those services.

5. How We Share Information

We do not sell your personal information. We may share it with:

  • Service providers who help us operate the Site, send communications, or process donations (e.g., Squarespace, Substack, Google, Allyra Fundraising, IDA)

  • Our production team, solely as needed to follow up on story submissions or sponsorship inquiries

  • Authorities, if required by law, or to protect our rights, users, or the public

6. Data Retention

We retain personal information for as long as reasonably necessary to fulfill the purposes described in this Policy, respond to your requests, or comply with legal obligations, after which it is deleted or anonymized.

7. Your Choices and Rights

  • Newsletter: you may unsubscribe at any time using the link in any Substack email.

  • Access/deletion requests: you may contact us at info@carnivalofmasks.com to request access to, correction of, or deletion of personal information we hold about you. We will respond within a reasonable time.

  • California residents: you have rights under the California Consumer Privacy Act (CCPA/CPRA), including the right to know what personal information we collect and to request its deletion. We do not sell or "share" personal information as those terms are defined under California law.

  • EU/UK/EEA visitors: if applicable law grants you rights (such as under the GDPR) — including access, correction, deletion, restriction, or objection to processing — you may exercise these by contacting us at the email above.

8. Children's Privacy

The Site is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact us and we will delete it.

9. Data Security

We use reasonable measures to protect personal information, but no method of transmission or storage is completely secure. We cannot guarantee absolute security.

10. Changes to This Policy

We may update this Policy from time to time. The "Last Updated" date at the top will reflect the most recent revision. Continued use of the Site after changes constitutes acceptance of the updated Policy.

11. Contact Us

Questions about this Policy or your personal information can be directed to:

Carnival of Masks Email: info@carnivalofmasks.com