Privacy Policy

2026-11-06

This policy explains what data is processed when you use the Cinemova mobile app and cinemova.app. In short: we collect what is needed to run your account and taste profile, we never sell data, we use no ad networks, and we never store your location coordinates.

Who is responsible

Cinemova is operated by an independent developer. For any question or data request: ulasisbl@gmail.com

What we collect

Account: email address, username, first and last name, profile photo or the avatar you pick, short bio, app language and, if you signed up on the site, which part of it you joined from (e.g. the chat). If you sign in with Google, Google only verifies your identity; your password never reaches us.

Content and activity: titles you mark as watched/favorite/watchlist, your lists, duel choices, follow relationships, community memberships, messages you send, feed posts and comments, and the reports and blocks you make.

City (optional): only the NAME of a city and country. If you choose to use device location, the coordinates are turned into a city name in your phone's memory only; they are never sent to the server, stored or logged. You can remove your city at any time or hide it from others in Settings.

Notifications: your device push token, so we can deliver notifications.

Email: account emails (verification codes, password resets) are always sent. Beyond these we may occasionally send announcements and reminders, plus a weekly digest on Monday mornings: movie and TV picks for you, titles on your watchlist that hit cinemas or became available to stream this week, what people you follow have marked and (when enabled) your daily matches on Global Discover. The digest only goes to members with a verified email who have used Cinemova in the last 60 days, and only when there is something to tell. You can turn the weekly digest off in the app under Profile › Settings › Notifications or on the site under Settings › Notifications; the “Unsubscribe” link in every email stops all announcement, reminder and digest emails. Posters in emails load from TMDB; we use no open or click tracking. The “utm_source=digest” tag in links is only used to count email as the source in the site’s anonymous visit statistics.

Usage measurement: screen name, time spent on screen, event names (e.g. "title added"), session id, a random id generated on your device, platform and app version; on Android also the device model and a screen smoothness summary (frames drawn and frame durations per screen, not screen content). Message content, free text and location coordinates are NOT measured. No third-party analytics SDK is used; records stay on our own server.

Website measurement: on cinemova.app we keep anonymous visit statistics without cookies: the page viewed, only the domain of the referring site, device type and operating system, language, the country inferred from your browser’s time zone, time spent on the page, the words you type into the site search, actions such as signing up, signing in or adding to a list and, when you click a link within the site, which section of the page it was in (which title is not recorded). Your IP address is not stored; visitors are counted with an identifier that changes every day and cannot be reversed, so you are not recognised the next day. These statistics are not combined with your account (the only exception is described under “App install” below) and are deleted after 90 days. To tell automated crawls apart, we also note whether there was a tap, click, key press or mouse movement on the page (not what you did). After your first interaction on a page, the site sets a signed technical cookie with a random value (cm_h, 30 days): it lets us answer your page requests ahead of automated crawlers; its value is not stored or combined with your account, and measurement only checks whether it is valid in order to tell automated visits apart.

App install (Android): on first launch the Android app reads Google Play’s install referrer once and records where you installed the app from: a store source such as Google Play search or, if you came from cinemova.app, where on the site the Google Play button you tapped was. If you came from the site, only the entry page of that visit, the page where you tapped the button, the source of the visit (e.g. search engine, social media) and its country are copied from the website measurement above to the install record. A random install identifier generated on your device, the install time and the app version are sent with it. The advertising ID is not read and your IP address is not written to this record. When you sign in or create an account in the app, the install is linked to your account; if you delete your account, this link is removed too. This information is used only to measure where the app is installed from; it is not used for advertising and is not shared with third parties.

Comments: you can comment on film and series pages on cinemova.app without signing up, and in the app as a member. Your comment, your optional rating and name (for members, your profile name; if your profile is public, also your photo and a link to your profile) are published publicly on that page (on the site and in the app) and may appear in search engines. Your comment may also be announced with a short excerpt in the public chat on the site (guest comments show “A visitor” instead of a name; comments with spoilers are not quoted). To prevent abuse we keep keyed hashes of your IP address and browser details (the IP itself is not stored): with the comment for 90 days, and for the length of a block (14 days) if the author is blocked. Comments are moderated; those that break the rules are hidden or deleted. A comment stays online until it is deleted; if you delete your account, the comments you wrote as a member are deleted too. You can ask for your own comment to be deleted at ulasisbl@gmail.com.

Parents guide votes: you can vote yes/no on the “Is it family-friendly?” questions on film and series pages without signing up. The same questions appear on film and series screens in the app; there only members can vote, and your vote on the site and in the app counts as one. Votes are not published with your identity; the page only shows the combined result of questions that have enough votes. To prevent repeat voting and abuse, member votes are stored with your account and guest votes with a keyed hash derived from your IP address and browser details; your IP address itself is not stored, and the network hash is deleted after 90 days. You can withdraw your vote by pressing the same button again.

Chat: only members can write in the public chat on cinemova.app; anyone can read the messages. Your profile name is shown with your message and, if your profile is public, your photo and a link to your profile as well. If you leave the box ticked in the last step of setting up your account (on cinemova.app or in the app) and your profile is public, your joining is announced in the chat. Messages are deleted after 30 days, and you can delete your own messages at any time. The chat is moderated: messages that members report or that break the rules are hidden, and members who break the rules can be blocked from writing. We keep no data derived from your IP address for the chat. If you delete your account, your chat messages are deleted too.

Error reports: when the app hits an unexpected error we record the error message, technical stack trace, the screen you were on and the app version.

Technical: IP address and request details in server logs (for security and abuse prevention).

Why we process it

To create and keep your account signed in; to build matches and recommendations; to run messaging and communities; to deliver notifications; to prevent abuse; to find and fix bugs and understand which features are used.

Legal bases: performance of a contract (providing the service), legitimate interest (security, debugging, product improvement) and your consent for optional data (location, notification permission).

Who we share it with

We do not sell your data and we do not share it for advertising. Only providers needed to run the service are used:

TMDB — movie and TV data. This product uses the TMDB API but is not endorsed or certified by TMDB. Google — Sign in with Google (authentication). Apple — Sign in with Apple (authentication) and iOS notification delivery (APNs). Expo Push Service — relays notifications to Firebase/APNs. Firebase Cloud Messaging — Android notification delivery. Resend — verification, password reset, announcement and weekly digest emails. Hosting: the app server and database are hosted in Germany (Frankfurt).

We may disclose data to authorities where legally required, to the extent the law requires.

What others see

If your profile is public, your name, username, bio, lists and (if you leave it visible) your city are visible to other users. If you make your account private, only followers you approve can see them. City visibility can also be turned off in Settings › Privacy. A public profile is also published on a public page at cinemova.app (name, username, photo, bio, lists and the titles you mark) and may appear in search engines such as Google when someone searches for your name. Private and suspended accounts are not shown to search engines. Your public profile's name and photo may also appear under “Cinemova members” on the cinemova.app pages of titles you have watched or favorited, and your posts about a title may appear on that title's page. List counts are shown only as anonymous totals.

Following on the web: on cinemova.app, following a member with a public profile needs no approval; private accounts receive a follow request. Follower and following lists of public profiles (name, username, photo) are public on cinemova.app. You can remove a follower at any time, and blocking someone removes follows in both directions.

Global Discover (cinemova.app and the app): public profiles of members who have finished setup and added at least 3 titles may be shown to members with similar taste as a daily match, on the site and in the app. A match card shows your name, username, photo, country, city (only if you made it visible), match score, and the titles and genres you share. Who was suggested to you and whether you followed them is stored with your account and deleted along with it. You can stop appearing in Discover by turning off “Show me in Global Discover” in Settings › Privacy or by making your account private.

Custom lists: custom lists you mark as public (list name, description and titles, together with your name and username) are visible to everyone on cinemova.app, and public lists with enough titles may also appear in search engines. Lists of private accounts are not shown publicly. You can unpublish a list by making it private or deleting it.

Member search: signed-in members can find other members by name or username; results show the name, username and profile photo. Private accounts can appear in search too, but their lists and marked titles stay hidden.

From people you follow: your followers see your list marks, your comments and your public lists on the site's "From people you follow" page; for a private account only followers you approved see this. People you blocked or who blocked you cannot find you in search.

How long we keep it

Account and content data are kept until you delete your account. Usage measurement records are deleted automatically after 180 days, error reports after 30 days. Database backups are kept for 14 days; traces of a deleted account disappear from backups within 14 days at the latest.

Your rights

Under GDPR and Turkish data protection law (KVKK) you may access, correct, delete or export your data, and object to processing. Send your request to ulasisbl@gmail.com; it is answered within 30 days at the latest. You may also complain to your supervisory authority.

Deleting your account

On the website: profile menu › Settings › Delete Account; in the app: Profile › Settings › Delete Account. Deletion is permanent; your profile, lists, messages and follow relationships are removed. If you cannot access your account, follow the steps on the account deletion page.

Children

Cinemova is not directed at children under 13 and does not knowingly collect their data. If we become aware of such an account we delete it.

Security

Connections are encrypted with TLS, passwords are stored irreversibly, and changing your password invalidates sessions on other devices. No system is 100% secure; if a breach is detected, affected users are informed.

Changes

This policy may be updated. Significant changes are announced in the app. The date at the top shows the last update.