CineIndex Return to CineIndex
Your data, under your control

Privacy Policy

This policy clearly explains what information CineIndex uses, why it needs it, and how you can download or delete it.

Last update: September 13, 2026.

1. Data controller

CineIndex is a project developed by Alejandro Roda. For privacy issues you can write to alejandrorodadeveloper@gmail.com.

2. Data we process

  • Account: Email, user ID, and optional display name.
  • Film library: movies, lists, ratings, comments, views, likes and saved decisions.
  • Preferences: country for platforms, visual theme and recommendation settings.
  • Searches: the terms necessary to search for movies and people; They are not added to your profile.
  • Essential technical data: encrypted session in the app's secure storage, web session cookies and locally saved preferences. Limited technical logs—such as queried route, date, status, IP, and user agent—may be generated during requests to provide and protect the service.

3. What do we use them for?

The data allows you to create and protect your account, synchronize your film library, personalize recommendations, show availability by country and recover your preferences between devices. They are not used for behavioral advertising nor are they sold.

4. Services used

Supabase provides authentication and database, and logs access events with IP and user agent for security. Vercel hosts the website and the secure routes consulted by the mobile application, with temporary technical records of the requests. Cloudflare Turnstile processes signals such as IP, TLS fingerprint, user agent, sitekey and origin during access to prevent abuse and improve detection. TMDB provides movie information and receives only queries necessary to find movies or people; CineIndex does not send your password. Platform availability comes from JustWatch through TMDB. Have I Been Pwned allows you to check if a new password appears in known leaks: the query is performed anonymously by sending only the first five characters of your SHA-1 fingerprint, never the password or your entire fingerprint. The SMTP provider that is configured will process your address exclusively to deliver access and security emails.

5. Conservation and security

The data linked to the account is kept as long as it remains active. Technical and security records are kept for the limited terms of the service and plan contracted by each provider. The tables apply per-user isolation and the private TMDB credentials remain on the server. When you delete your account from “Account and Settings”, the account and its associated data are deleted from CineIndex; Records that must be retained temporarily for security or compliance are deleted upon expiration.

6. Your controls

You can download a full JSON copy and a readable CSV from “Account & Settings”. From the same place you can correct your name, log out or permanently delete your account and its data. If you no longer have the application installed, you can start the process from the public page of account deletion.

7. Cookies, local storage and measurement

CineIndex uses the necessary mechanisms to maintain the session, remember preferences and allow offline operation. It also uses Vercel Analytics and Speed ​​Insights to understand aggregated usage and performance of the site. It does not incorporate advertising cookies or sell this data.

8. Minors

The version distributed on Google Play and its account functions are aimed at people 16 years of age or older. CineIndex is not designed for minors of that age.

9. Changes

If data processing changes significantly, the date of this policy will be updated and informed within the application when necessary.