Privacy Policy

Effective April 13, 2026

1. What We Collect

We keep data collection minimal:

  • Technical data — IP address, browser and device type, pages viewed, and timestamps. Used to operate and secure the service.
  • Account data — If you create an account (optional, for the watchlist), we store your email and a hashed password. Google sign-in shares your name and email with us.
  • Playback progress— When you watch a title, we store where you left off (the timestamp, and for TV shows the season and episode) along with the title and poster so the "Continue Watching" row can render quickly. We never record the underlying video stream. If you're not signed in, this is kept locally in your browser only.
  • Communications — If you contact us, we process your message and any details you provide in order to respond.

2. How We Use It

  • Operate, maintain, and improve Kinoa.
  • Provide your watchlist and account features.
  • Detect abuse and maintain security.
  • Respond to inquiries and legal requests.

We do not sell your data. We share it only with infrastructure providers (hosting, authentication) under contractual obligations, or when required by law.

3. Cookies & Storage

We use essential cookies and browser storage for authentication, preferences like your theme, and (for signed-out visitors) your local playback progress. We don't use tracking cookies or third-party analytics.

Third-party hosters embedded in Kinoa may set their own cookies and tracking within their players. We have no control over this.

4. Third-Party Hosters

When you use an embedded player, that hoster receives your IP address, device information, and playback data directly. They operate under their own privacy policies as independent data controllers. We cannot monitor, access, or block their data collection. Review their policies before using their services.

5. Your Rights

Depending on your location, you may have the right to access, correct, delete, or export your data under laws like the GDPR or CCPA. To make a request, use our .

Kinoa is not directed at children under 13. If you believe a child has provided personal data, contact us and we'll delete it.

6. Security & Retention

We use HTTPS encryption, hashed passwords, and access controls. No service is 100% secure — if you find a vulnerability, please .

We retain data only as long as needed: server logs for up to 90 days, account data until you delete your account.

7. Changes & Contact

We may update this policy as practices or requirements change. Updates take effect when posted. For questions about your data, reach us via our .