What Kinolog collects, why, and who processes it.
Draft — this document requires attorney review before launch.
Last updated: [DATE — set at launch]
Three things, and only these:
Everything above is processed for exactly four purposes: to sign you in and send you the emails the service needs, to store and show you your diary, to generate taste profiles and recommendations from your library, and to keep the service secure and reliable. Nothing is processed for advertising or profiling beyond your own movie taste.
Kinolog relies on a small set of service providers. Each one sees only what its job requires.
Hosting provider [HOST — to be finalized]
Runs the application servers that serve the site to you.
Neon
The Postgres database where your account and diary live. Hosted in the United States.
Anthropic
Provides the language model that turns library summaries and taste profiles into recommendations, under the founder's API key. Per Anthropic's API terms, inputs and outputs are not used to train models.
TMDB
Movie metadata lookups — the titles you search for and log. This product uses the TMDB API but is not endorsed or certified by TMDB.
Resend
Delivers transactional email: magic sign-in links and account notices. Nothing promotional.
Sentry
Receives opt-in error reports containing an error type and message only — never your notes, reviews, or email address.
PostHog
Product analytics as described above: pageviews and feature events only, with no session recording and no stored IP addresses.
Cloudflare
Runs the Turnstile bot check that protects sign-up and sign-in from automated abuse.
Your account data is kept for as long as your account exists. When you delete your account, deletion is immediate and complete — your email, diary, notes, and taste profile are removed from the live database right away, not flagged and kept. Database backups exist for disaster recovery only and age out automatically on a short rolling schedule, taking deleted data with them.
You do not need to email anyone to exercise the basics — they are built in. You can export everything as JSON and delete your account at any time from Settings. These cover the access, portability, and erasure rights in GDPR- and CCPA-style laws, and Kinolog honors those rights for everyone, wherever you live. For correction requests or anything else, email support@kinolog.app.
Kinolog sets one cookie: an httpOnly session cookie that keeps you signed in. There are no third-party advertising cookies and no cross-site tracking.
Kinolog is for people aged 13 and over. We do not knowingly collect data from children under 13. If you believe a child under 13 has an account, email support@kinolog.app and it will be deleted.
If this policy changes in a meaningful way — a new provider, a new kind of data — the change will be flagged in the app before it takes effect, and the date at the top of this page will be updated. Quiet edits limited to wording do not get a banner.
Questions about privacy? Email support@kinolog.app.