Privacy policy

1. Data controller

The data controller is Koinity, a personal project that is not an incorporated company. For any privacy request, write to koinity.cine@gmail.com.

2. What we collect

You can search films and cinemas on Koinity without an account. We process:

• Account data, if you sign up: your email address and, if you sign in with Google, the name and profile picture Google shares with us. We never receive your Google password.
• Preferences and taste profile: genres, favourite cinemas, films you pick as references, ratings and interest in films.
• Outings: events you create or join, and the messages written in them.
• Feedback you send us, and your search history if you have an account.
• Location: only if you allow it in your browser, to show cinemas near you. A city you pick by hand stays stored in your browser.
• Usage data: pages visited, clicks, device and browser type, and an IP address that our analytics providers shorten or approximate. We may record browsing sessions to see where the site breaks; text fields, emails and passwords are masked.

3. Why we use it and on what basis

• Providing the service (account, preferences, outings, recommendations): performance of a contract, Art. 6(1)(b) GDPR.
• Showing cinemas near you: your consent, given to the browser and revocable at any time.
• Analytics, improving the site, security: our legitimate interest, Art. 6(1)(f) GDPR.

We do not sell your data or use it for personalised advertising.

4. Who we share it with

We rely on providers that process data on our behalf:

• Supabase: database and authentication.
• Vercel: hosting and aggregate analytics.
• PostHog: usage analytics and session recording.
• Google: Sign in with Google and Google Analytics.
• YouTube: trailers are embedded from YouTube and load only when you open one.

When you book a ticket you are taken to the cinema’s or ticketing site, whose own privacy policy applies from then on.

5. Transfers outside the EU

Some providers are based in the United States. Transfers rely on the EU-US Data Privacy Framework or on the Standard Contractual Clauses approved by the European Commission.

6. How long we keep it

Account data is kept until you delete your account. Usage data is kept for the period set by our analytics providers and no longer than needed. When you ask us to delete your account, we delete the data linked to it.

7. Cookies and browser storage

We use cookies and local browser storage to keep you signed in, remember your city and language, and for analytics (PostHog, Google Analytics). You can delete or block them in your browser settings; the site keeps working, but you will need to sign in again.

8. Your rights

You can ask to access, correct or delete your data, restrict or object to its processing, and receive a copy of it (portability), by writing to koinity.cine@gmail.com. You can also lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it).

9. Changes

If we change this policy we update the date at the top. For significant changes we will tell you on the site.