Last updated: May 2026
Cinevex ("we", "our", "us") is committed to protecting your privacy. This policy explains what data we collect, how we use it, your rights regarding that data, and how we comply with GDPR, CCPA, NDPR, and other applicable privacy regulations.
When you register: username, email address, bcrypt-hashed password (we never store plain-text passwords), date of birth (used only to verify you meet minimum age requirements), date of registration, and account role. If you register via Google OAuth, we receive your Google ID, name, email address, and profile picture from Google.
Watch history, watchlist contents, movie ratings and reviews, content context contributions (Before You Watch answers), search queries, continue-watching progress, notification preferences, and movie request submissions. This data is tied to your account and used solely to provide and improve your experience.
If you use the Filmmaker Portal: uploaded film files, film metadata, licensing agreement acceptance records (including timestamp and IP address), and payout information.
IP address (used for geo-trending and DMCA records, not stored permanently for regular users), browser type, device type, and approximate country-level location derived from IP address.
We do not sell, rent, or trade your personal data to third parties for marketing purposes. We share data only with the following service providers, and only to the extent necessary to provide the Service:
We use a single HttpOnly cookie to maintain your login session (your encrypted refresh token). This cookie is not accessible by JavaScript and cannot be stolen by cross-site scripts. We also store your access token in browser memory (not localStorage) during your session. We use localStorage only to save your cookie consent preference and UI preferences such as your selected language and playback settings. We do not use advertising tracking cookies.
YouTube and Archive.org players embedded on our platform may set their own cookies. We do not control this behaviour. You can manage your cookie preferences through your browser settings.
Depending on your location, you may have the following rights regarding your personal data:
To exercise any of these rights, visit your Profile settings or email privacy@cinevex.tv. We will respond within 30 days.
All data is transmitted over HTTPS/TLS encryption. Passwords are hashed using bcrypt with a cost factor of 12 — we never store your actual password. Access tokens expire after 15 minutes and are rotated automatically using a secure refresh token mechanism. Refresh tokens are hashed before storage and expire after 30 days. We conduct regular security reviews and follow industry best practices including OWASP guidelines.
Cinevex is not directed at children under the age of 13. We do not knowingly collect personal data from children under 13. If you believe a child has created an account, please contact us immediately and we will delete the account and all associated data within 24 hours. Users must be 18 or older to access adult content.
Your data may be processed in countries outside your own, including the United States and the European Union, by our cloud service providers (MongoDB Atlas, Cloudflare, Google). These providers maintain appropriate safeguards including Standard Contractual Clauses where required by GDPR.
We may update this Privacy Policy from time to time. We will notify registered users of material changes via email or in-app notification at least 7 days before the changes take effect. The "Last updated" date at the top of this page indicates when it was last revised.
Privacy questions and data requests: privacy@cinevex.tv