Your Privacy,
Our Responsibility
This policy explains exactly what we collect, why we collect it, and — critically — what we never do with it.
Zero Data Sales
We never sell, rent, or trade your personal information to any third party.
Encrypted at Rest
All personal data is encrypted in transit and at rest using AES-256 standards.
GDPR Compliant
EU users have full data portability, right to erasure, and access rights.
Information We Collect
When you create an account, we collect your name, email address, and chosen preferences. If you sign up via a social login, we receive only the basic profile information you permit.
As you use the Platform, we gather usage data including: film swipe history and reactions (Love, Like, Dislike, etc.), watchlist and watched entries, reviews and star ratings you submit, and device information such as browser type, operating system, and anonymised IP address.
How We Use Your Information
Your information powers the CineMatch experience. Specifically, we use it to: personalise your film recommendations through our AI taste engine, sync your watchlist and watched library across devices, send important service communications (account security, policy updates), analyse usage patterns in aggregate to improve the Platform, and detect and prevent fraudulent or abusive behaviour.
We do not use your data to show third-party advertising. Ever.
Information Sharing
CineMatch does not sell or rent your personal information. We may share limited data with:
- Cloud hosting providers (e.g., AWS, Vercel) to operate the Platform
- Analytics providers (anonymised aggregate data only)
- Payment processors, if you subscribe to a premium plan
- Law enforcement, only when required by applicable law
All third-party providers are bound by strict data processing agreements and may not use your data for their own purposes.
Data Security
We implement technical and organisational measures to protect your data, including AES-256 encryption at rest, TLS encryption in transit, role-based access control for internal systems, and regular third-party security audits.
While we take every reasonable precaution, no method of transmission over the internet is 100% secure. If you discover a security vulnerability, please disclose it responsibly to admincinematch@gmail.com.
Your Rights
You have the right to: access the personal data we hold about you, correct inaccurate information, request deletion of your account and all associated data, export your data in a portable format, and opt out of non-essential communications.
EU and UK users have additional rights under the GDPR and UK GDPR, including the right to restrict processing and to lodge a complaint with your national data protection authority.
To exercise any of these rights, contact us at admincinematch@gmail.com or use the settings in your profile.
Data Retention
We retain your data for as long as your account is active. If you delete your account, we will delete or anonymise your personal information within 30 days, except where we are required to retain it by law (e.g., financial records).
Anonymised aggregate data (e.g., which genres are most popular) may be retained indefinitely as it cannot be linked to any individual.
Third-Party Links
The Platform contains links to third-party streaming services and film databases. We are not responsible for the privacy practices of these external services. We encourage you to review their privacy policies before providing any personal information.
Streaming platform availability data is sourced from licensed providers and does not involve sharing your personal data with those platforms.
Contact for Privacy
For any privacy-related requests or questions, contact our Data Protection team at admincinematch@gmail.com. We aim to respond to all requests within 72 hours.