Privacy & Cookies

Last updated: 6 August 2026.

Who we are

Kino (getkino.tv) is an independent product operated by Giovanni Clemente Monna, based in Italy (the “data controller”). Kino is not affiliated with, endorsed by, or connected to TV Time or Whip Media. Questions or requests: privacy@getkino.tv.

What we collect and why

  • Account data — your email address (used for passwordless sign-in via magic link and service notifications), an optional display name, a public username (chosen when you first post a comment), your preferred language, and your theme preference. Legal basis: contractual necessity to provide the service.
  • Waitlist data — if you join our pre-launch waitlist (before creating an account), we store your email address and preferred language to notify you when Kino launches and send you a welcome email sequence. Legal basis: your consent. You can unsubscribe at any time via the one-click unsubscribe link in every email.
  • Watch history & library — episodes and movies you've marked as watched (with dates), tracking status (watching, completed, watchlist), ratings (1–5 stars), and custom lists you create. Legal basis: contractual necessity.
  • Imported data — if you import a TV Time data export (official GDPR export or “TV Time Out” format), Kino stores the watch history, ratings, comments, reactions, watchlist entries, favorites, and lists contained in your file. The import is voluntary; we process only what is in your export. Legal basis: contractual necessity at your request.
  • Public comments — if you choose to comment on an episode or movie, your comment and your username are visible to all authenticated users. Legal basis: your consent. You can delete your comments at any time.
  • Comment reports — when you report a comment, we store your user ID alongside the report to handle abuse and prevent misuse of the reporting system. Legal basis: our legitimate interest in community moderation.
  • Technical & log data — when you visit Kino, our hosting provider (Vercel) automatically processes IP addresses and standard request logs needed to run the site and keep it secure. Legal basis: our legitimate interest in operating and protecting the service. Retention is short and determined by the provider.
  • Aggregate usage statistics via Vercel Web Analytics — aggregate page views, with no cookies and no cross-site tracking. Legal basis: our legitimate interest in a working site.
  • Product Analytics (only if you consent) — PostHog receives your stable Kino/Supabase account UUID and allowlisted behaviour events about authentication outcomes, Home utility, import lifecycle and aggregate results, library additions, watch actions, rating actions, and comment-publication metadata. We do not send email, username, display name, search query, filenames, media titles or IDs, comment text, imported text, free-form errors, or client IP for geolocation. We use no PostHog browser SDK, PostHog cookie or local storage, autocapture, heatmaps, session replay, surveys, feature flags, console capture, Web Vitals capture, or performance capture. $process_person_profile=false prevents person-profile creation for this stream. Legal basis: your consent.
  • Advertising cookies (only if you accept) — Meta (Facebook/Instagram), TikTok, and Google Ads pixels, to measure and improve our ads. These load only after you opt in through the cookie banner. Legal basis: your consent.

We do not sell your data, build advertising profiles beyond the above, or make automated decisions about you.

User-generated content & visibility

  • Public comments you write are visible to all authenticated users, along with your chosen username and the date of posting.
  • Comments can be reported by other users; an administrator may remove comments that violate our terms.
  • Data imported from TV Time (comments, reactions, ratings) remains private — visible only to you — unless you choose to publish it separately in the future.
  • Your email address is never shown to other users.

Discovery personalization

Purpose and legal basis: Kino uses your viewing history, library, ratings, favorites, rewatches, and aggregate impressions and opens from Popular to make future discovery more relevant. The legal basis is our legitimate interest in improving this first-party tracking service.

Data minimization and retention: Kino stores only per-title aggregate counts, latest timestamps, and titles you explicitly ignore. We do not store search queries, viewport details, exact positions, or a raw navigation history for this purpose. Implicit aggregates remain until you opt out or close your account; ignored titles remain until you restore them or close your account.

Your control: Personalization is active by default. You can disable it in Settings. Opting out immediately deletes aggregate impression and open counts and timestamps, while keeping your library, viewing history, lists, ratings, favorites, rewatches, and ignored titles. Re-enabling starts those aggregates again from zero.

Right to object: You can object at any time through Settings or by contacting us. This feature adds no new cookie, browser storage, advertising use, or third-party sharing, and no new provider; cookie and Product Analytics choices remain separate.

Cookies

  • Essential: a Supabase authentication cookie (keeps you logged in; stored for up to 400 days, unless you sign out or it is deleted earlier), a cookie that remembers your cookie choice (kino_consent, 180 days), a cookie that stores your preferred language (kino_lang, 365 days), and a cookie that stores your theme preference (kino_theme, 365 days). Always on; required for the service to function.
  • Analytics: Vercel Web Analytics is cookieless — nothing is stored on your device.
  • Product Analytics (optional): authenticated, server-side Product Analytics uses the existing request context only after consent. It adds no PostHog browser storage.
  • Advertising (optional): Meta, TikTok, and Google Ads pixels set cookies for ad measurement and retargeting. Off by default; on only with your consent.

Who processes your data

PostHog processes Product Analytics data for Kino as a processor in its selected Cloud EU environment hosted in Frankfurt.

We share data only with providers that run the service for us: Supabase (authentication, database hosting, and file storage for import processing), Vercel (hosting and cookieless analytics), TMDB (TV and movie metadata for the catalog — receives search queries, not your personal data), and Resend (email delivery). With your consent, Meta, TikTok, and Google process advertising measurement data. Some providers process data outside the EU; those transfers rely on applicable safeguards (e.g. EU Standard Contractual Clauses / the EU–US Data Privacy Framework).

How long we keep it

  • Account: until you request deletion.
  • Waitlist data: until you unsubscribe or the waitlist closes.
  • Watch history, ratings, lists, imported data: until you delete the individual item or close your account.
  • Public comments: until you delete them or an administrator removes them.
  • Comment reports: until the reported comment is resolved or removed.
  • Technical & log data: short retention determined by our hosting provider (Vercel).
  • Product Analytics events: no more than 12 months.
  • Cookie choice: 6 months, then we ask again.
  • Uploaded import files: deleted from storage after processing.

Your rights

You can withdraw Product Analytics consent at any time through “Cookie preferences”; this does not affect prior lawful processing.

Under the GDPR you can access, correct, delete, restrict, port, or object to the processing of your data, and withdraw consent at any time. Every email has one-click unsubscribe, and you can change your cookie choices with “Cookie preferences” above.

  • Portability: you can download all your data (watch history, ratings, comments, lists, library) as a JSON file from the export page when logged in.
  • Deletion: email privacy@getkino.tv to delete your account and all associated data.

You also have the right to lodge a complaint with your data protection authority — in Italy, the Garante per la protezione dei dati personali.

Children

Kino isn't directed at children under 16, and we don't knowingly collect their data.

Changes

If our practices change we'll update this page and revise the date above.