Privacy Policy

Last updated: October 30, 2026

This policy explains how KinoNook ("we") processes your personal data when you use www.kinonook.com, including under Turkish Law No. 6698 on the Protection of Personal Data ("KVKK").

Data controller

The controller of your personal data is the operator of KinoNook. You can reach us at [email protected].

What we process

• Account data: email address, username, display name, password (stored only as an irreversible hash), and an optional bio and profile picture.
• Preferences: language, theme, country, time zone, spoiler hiding, notification choices and profile visibility settings.
• Activity content: your ratings, reviews and comments, watchlist, favourites, viewing diary, lists you create and the members you follow.
• Session and security data: session records (sign-in time, last use, browser information), failed sign-in attempts and technical logs used to prevent abuse (for example request time and IP address).
• For visitors without an account: only cookies that remember preferences such as language and theme (see the Cookie Policy).

Why we process it

• To create your account, verify your email address and manage your session.
• To provide member features such as ratings, reviews, lists and following, and to respect your visibility choices.
• To send service emails such as password resets and security notices, and, if you opt in, newsletters and release reminders.
• To keep the site secure, prevent abuse, spam and unauthorised access, and enforce the community rules.
• To meet our legal obligations and respond to legal requests.

Legal bases

We rely on performance of a contract (your membership), compliance with legal obligations, our legitimate interests (security and keeping the service running) and, where needed, your explicit consent (newsletter and reminder emails).

Who we share it with

We do not sell your data. We share it only as needed to run the service: with hosting and infrastructure providers, an email delivery service and, where legally required, competent authorities. If a provider is located abroad, transfers follow the applicable data protection rules.

You decide in your account settings who can see your profile, ratings, lists and viewing history (everyone, members only, or only you).

Retention

We keep your data while your account is open. When you delete your account, your personal data is deleted or anonymised, except where we must keep it by law.

Security

Passwords are stored irreversibly, sessions use secure cookies, sign-in attempts are rate limited and access to data is restricted by role. No system is entirely risk free, but we apply reasonable technical and organisational measures to protect your data.

Your rights

You have the right to learn whether your data is processed and obtain information about it, to know its purposes, to know the third parties it is shared with, to request correction, deletion or destruction, to object to results based solely on automated processing, and to claim compensation for unlawful processing.

How to use your rights

In your account settings you can download your data as JSON, change your preferences and visibility, and permanently delete your account. For other requests write to [email protected]. We answer as soon as possible and within thirty days at the latest.

Changes

We update this policy when needed. Significant changes are announced on the site, and the current version is always on this page.