Privacy Policy

1. Who is responsible

This privacy policy explains how CineAtlas ("CineAtlas", "we", "us") processes personal data when you visit https://www.moviesinfo.org or use our services. We act as the data controller. You can contact us about privacy at [email protected].

2. Data we collect

Usage data: when you visit the site our servers process technical data such as IP address, browser type, device, referring page, pages viewed and time of access. This is necessary to deliver the site securely.

Account data: if you register we process your name, username, email address, password (stored only as a secure hash), language, country and the optional profile information you choose to add (bio, avatar, favourite genres).

Content you create: comments, reviews, ratings, lists and private messages you send to other members.

Communication data: information you send us through the contact or copyright forms.

Cookie and similar data: see our Cookie Policy for details.

3. Why we process your data and our legal bases

To provide and secure the website (legitimate interest, Art. 6(1)(f) GDPR).

To create and manage your account and the community features you use (performance of a contract, Art. 6(1)(b) GDPR).

To measure audience and improve the site with analytics cookies, and to show personalised advertising through Google AdSense — only with your consent (Art. 6(1)(a) GDPR). You can withdraw consent at any time via "Cookie settings" in the footer.

To answer your requests and comply with legal obligations such as handling copyright notices (Art. 6(1)(c) and (f) GDPR).

4. Advertising (Google AdSense)

We use Google AdSense to display ads. Google and its partners may use cookies to serve ads based on your prior visits to this and other websites, if you consent. Google's use of advertising cookies enables it and its partners to serve ads based on your visits. You can opt out of personalised advertising at https://www.google.com/settings/ads and learn more at https://policies.google.com/technologies/ads.

We implement Google Consent Mode v2: until you make a choice, advertising and analytics storage is denied.

5. Sharing and processors

We share data only with service providers who process it on our behalf under contract (hosting, email delivery, analytics, advertising) and with authorities where legally required. We never sell your personal data.

Some providers (for example Google) may process data outside the EEA or Turkey. In such cases appropriate safeguards such as the EU Standard Contractual Clauses are used.

6. Third-party content

Trailers are embedded with YouTube's privacy-enhanced mode (youtube-nocookie.com) and only load after you click play. Images are loaded from TMDB's image servers, which receive your IP address as part of the request.

7. How long we keep data

Server logs are kept for up to 30 days. Account data is kept while your account exists; you can delete it at any time from your account settings. Contact and copyright messages are kept for up to 3 years. Legal obligations may require longer retention.

8. Your rights

You have the right to access, rectify, erase and port your data, to restrict or object to processing, and to withdraw consent at any time. Registered members can download their data and delete their account directly from the account settings page.

You also have the right to lodge a complaint with a supervisory authority, for example the data protection authority in your country or, in Turkey, the Personal Data Protection Authority (KVKK).

9. Children

Our services are not directed at children under 16. We do not knowingly collect personal data from children. Community features require users to be at least 16 years old.

10. Security

We use HTTPS encryption, hashed passwords, optional two-factor authentication, access controls and regular updates to protect your data.

11. Proof of consent

When you make a cookie choice we record a random consent ID, your choices, the version of this policy, whether your browser sent a Global Privacy Control signal, your language, your browser type and a one-way hash of your IP address. We never store the IP address itself. This record proves that consent was given (Art. 7(1) GDPR) and is deleted after three years.

12. We do not sell your data – Global Privacy Control

We do not sell personal information. If your browser sends a Global Privacy Control (GPC) signal, we treat it as an opt-out of the sale or sharing of personal information and keep personalised advertising switched off. California residents can also use the "Do not sell or share" option of our privacy request form.

13. How to exercise your rights

Use our privacy request form at https://www.moviesinfo.org/privacy-request. Signed-in members can also download their data or delete their account immediately in the account settings. We answer free of charge within 30 days and may first verify your identity. You also have the right to lodge a complaint with a supervisory authority, for example your national data-protection authority in the EU or the Turkish Personal Data Protection Authority (KVKK).

14. Moderation records

If we restrict your content or account, we keep a statement of reasons and any appeal so that you can contest the decision and we can meet our accountability duties under the Digital Services Act. If you delete your account, the link to you is removed and only anonymous figures remain in our transparency report.

15. Retention

Your account data is kept as long as your account exists. You can delete your account at any time in the account settings; your personal data is then erased. Notification and digest e-mails contain a one-click unsubscribe link that works without signing in.

16. Changes

We may update this policy to reflect changes to our services or the law. The current version is always available on this page.