Privacy Policy

1. What we collect

• Your account: username, email address, and your password, which is stored only as a bcrypt hash (never the password itself).
• What you do in KinoCut: your ratings and likes, comments, your list, and the titles you mark as watched.
• Sessions: a session cookie on the website; on the apps, a sign-in token kept in your device's secure storage (the server keeps only a hash of it).
• Server logs: for security and to prevent abuse (such as rate limiting), our servers log requests, including your IP address.

We don't collect your location, contacts, photos or any other data from your device.

2. What others can see

Your comments and your username are visible to everyone. The titles you mark as watched appear on your public profile. Your list, your ratings and your email address are private. Watch Party chat goes only to the people in the room and isn't stored.

Comments must be civil. You can report any comment, or block its author to hide all their comments, from the menu next to it. We review reports and remove comments that break these rules.

3. Services we rely on

• TMDB and OMDb provide movie and series data and images. Your personal data is not sent to them. This application uses TMDB and the TMDB APIs but is not endorsed, certified, or otherwise approved by TMDB.
• Groq powers the AI assistant: the messages you send it (and the page you're on) are sent to Groq to generate an answer. We don't store these conversations. Don't share personal information with the assistant.
• YouTube plays the trailers. When a trailer plays, YouTube (Google) may collect data under its own privacy policy.
• Oracle Cloud hosts our servers and database (United States).

4. How long we keep it

We keep your data while you have an account. When you delete your account, it is removed at once. Database backups are kept for 14 days, so deleted data disappears from them within 14 days. Server logs are kept only for a limited time.

5. Deleting your account

You can delete your account at any time: in the app or on the website, open Profile and choose Delete account, then confirm with your password. This permanently removes your account, your sessions, your ratings, comments, list and watched titles. It can't be undone.

6. Security

All traffic is encrypted (HTTPS). Passwords are hashed with bcrypt, sign-in tokens are stored only as hashes, and our database is not reachable from the internet.

7. Children

KinoCut is not directed at children under 13, and we don't knowingly collect their data.

8. Changes and contact

If this policy changes, we'll update it here and change the date above. Questions or requests about your data: github.com/furkanpatat/MovieApp/issues.