Privacy Policy

1. Data Controller and Contact

Kinoa provides and controls the Service. For the purposes of applicable data protection laws, Kinoa acts as the data controller for processing described in this policy. You can get in touch via our contact form.

2. Information We Collect

We design the Service to collect only the information we need:

• Technical and usage data: IP address (stored in truncated or hashed form where feasible), device and browser type, referring URL, language preference, pages viewed, search queries, timestamps, and interaction events used to operate and secure the Service.
• Diagnostics and logs: Error reports, performance metrics, and aggregated analytics that help us maintain availability and detect abuse.
• Communications: If you get in touch using our contact form or submit a rights request, we process the contents of your message and any contact details you provide in order to respond.

We offer optional user accounts to enable features like the watchlist. Registering for an account is not required to access the content on the Service. If you choose to create an account, we collect your email address and a password (hashed) to secure your profile.

3. How We Use Information

• Operate, maintain, and improve the Service and its features.
• Provide customer support and respond to enquiries or legal notices.
• Monitor usage patterns, detect fraud or abuse, and ensure security and stability.
• Generate aggregated analytics that do not identify you to understand which features are most useful.
• Comply with legal obligations, resolve disputes, and enforce our Terms of Service.

4. Legal Bases for Processing

We process personal data only when we have a legal basis to do so, including:

• Legitimate interests: to operate, secure, and improve the Service, prevent abuse, and maintain accurate records.
• Consent: for optional features such as theme preferences stored in local storage or non-essential cookies.
• Legal obligations: to respond to lawful requests, comply with retention duties, or defend legal claims.
• Contractual necessity: when we communicate with you about the Service you have requested.

5. Cookies, Local Storage, and Similar Technologies

We rely primarily on essential first-party cookies and browser storage to remember interface choices (such as theme selection) and to protect the Service against abuse. We use privacy-focused analytics that either do not rely on cookies or use pseudonymised identifiers.

The Service may also include advertisements (such as pop-unders or banners) delivered by us or third-party networks. These providers may use cookies, pixels, or similar technologies to measure ad performance or prevent fraud. We do not control these third-party technologies.

6. Sharing and Disclosure

We disclose personal data only to the extent necessary to operate the Service or comply with the law:

• Service providers: Hosting, infrastructure, security, and analytics vendors that process data on our behalf under contractual confidentiality and data protection obligations.
• Public authorities: When required by applicable law or a legally binding request from a competent authority.
• Business transitions: In the unlikely event of a restructuring, merger, or transfer of the Service, data may be disclosed subject to appropriate safeguards.

We do not sell or rent personal data.

7. Third-Party Streaming Hosters

Playback is delivered directly by independent third-party hosters that we surface within the Service. When you engage a third-party player, that hoster may receive your IP address, device information, playback events, and other data required to deliver the stream. Those hosters operate under their own privacy policies and act as separate data controllers. We do not monitor or control their processing, and your interactions with them are solely between you and the hoster. Please review their privacy notices before using their services. We cannot view, access, or block cookies or data collection initiated by these third-party players.

8. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes outlined in this policy, to comply with legal obligations, or to resolve disputes. Routine server logs are typically retained for up to 90 days unless longer retention is required for security or legal reasons. Correspondence related to support, legal, or privacy matters may be stored for the duration of the enquiry plus any mandatory retention period.

9. International Data Transfers

We may process and store information in the European Economic Area (EEA) or other countries where our trusted providers operate. When transferring personal data across borders, we rely on appropriate safeguards recognised by applicable data protection laws.

10. Security

We implement technical and organisational measures designed to protect information against unauthorised access, loss, or misuse, including HTTPS encryption, strict access controls, and continuous monitoring. No online service can guarantee absolute security, so we encourage you to notify us promptly using our contact form if you discover a vulnerability.

11. Your Rights

Depending on where you reside, you may have rights under local data protection laws (such as the GDPR or CCPA). These can include the right to request access, rectification, deletion, restriction of processing, data portability, and to object to certain processing activities. You may also withdraw consent where processing is based on consent. To exercise these rights, please submit a request via our contact form. We may request verification of your identity before fulfilling a request. You have the right to lodge a complaint with your local data protection authority if you believe your rights have been infringed.

12. Children’s Privacy

The Service is not directed to children under 13, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal information, please contact us and we will take steps to delete it promptly.

13. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices, technologies, or legal obligations. When we make material changes, we will post the updated policy on this page and update the “Effective date” below. Your continued use of the Service after the effective date signifies acceptance of the updated policy.

14. Contact

For questions about this Privacy Policy or to exercise your data protection rights, please reach out via our contact form.