Back to documents

CinePunks Privacy Policy

Last updated: May 8, 2026

1. Data controller

The controller for personal data relating to CinePunks is Proto Massimo. For privacy requests, contact max.magnus.dev@gmail.com.

2. What CinePunks is

CinePunks is a mobile app for browsing, organizing and syncing information about movies, TV series, episodes, lists, reviews, viewing activity and Trakt-linked social profiles. The app uses a Supabase Edge Functions backend and integrates third-party services such as Trakt, TMDB, OMDb, Fanart.tv and NewsAPI.

3. Data processed

Depending on the features used, CinePunks may process:

• authentication and session data, including CinePunks session tokens and tokens related to Trakt login;
• Trakt profile data, such as username, display name, avatar, location, VIP status, join date and public or authorized statistics;
• watchlist, favorites, history, progress, watched content, watched episodes and collection data;
• user-created lists, titles, descriptions, list items and share links;
• reviews, comments, replies, ratings and reactions submitted through the app;
• social relationship data, such as searched profiles, followed users, followers and following, when available through Trakt or the backend;
• local app preferences, such as language, theme and startup screen;
• technical data required for app and API operation, such as logs, IP address, user agent, errors and request metadata, where recorded by the backend or third-party providers.

4. Data stored on the device

CinePunks stores certain data locally on the device through AsyncStorage and the app SQLite database. This may include the session token, sync bootstrap state, language/theme/startup preferences, added shows, episodes, viewing state, sync queues and metadata needed for offline consultation or a better user experience.

On logout, the app removes session-related local data and clears the local tables used for shows, episodes and sync queues.

5. Purposes

Data is processed to:

• enable login, logout and session management;
• show profile, statistics, watchlist, favorites, history, progress and recent content;
• sync with Trakt the actions requested by the user, such as watched/unwatched, favorites, watchlist, reviews and comments;
• create, update, browse and share lists or collections;
• show social content and allow follow/unfollow actions;
• provide metadata, posters, backdrops, news, ratings, cast, providers and related content;
• maintain security, stability, abuse prevention, diagnostics and technical operation of the service.

6. Legal basis

For users in the European Economic Area, processing may be based on:

• performance of a contract or pre-contractual measures, to provide requested features;
• user consent or authorization, especially for linking a Trakt account;
• the controller's legitimate interest in security, abuse prevention, maintenance and technical improvement;
• legal obligation, where necessary to comply with applicable laws or lawful requests.

7. Third-party services and recipients

CinePunks may exchange data with third-party services required for app operation:

• Trakt, for authentication, profile, watchlist, history, favorites, lists, comments, reviews and social features;
• Supabase, for backend, API functions, session management and server-side app data;
• TMDB, for metadata, images and information about movies, TV series and people;
• OMDb, for media information and ratings;
• Fanart.tv, for images and media artwork;
• NewsAPI, for cinema and entertainment news;
• Expo/EAS, for builds, runtime and technical services related to app distribution.

8. Transfers outside the EU

Some providers may process data in countries other than the user's country, including outside the European Economic Area. In such cases, processing takes place according to the tools and safeguards provided by those providers and applicable law.

9. Retention

Data is kept for as long as necessary to provide the service, maintain the session, sync user actions, comply with legal obligations and protect app security and integrity. Session-related local data is removed or reduced on logout according to the app features.

Data sent to Trakt or other third-party services remains subject to those services' settings, retention periods and deletion tools.

10. Cookies and similar technologies

CinePunks is a mobile app and, based on the reviewed codebase, does not directly use advertising cookies. Some web flows, such as browser authentication or external services, may use cookies or similar technologies managed by their respective providers.

11. Minors

CinePunks is not designed to knowingly collect personal data from minors below the minimum age required by applicable law or by the terms of the integrated third-party services.

12. User rights

Where provided by applicable law, users may request access, rectification, deletion, restriction, objection, data portability and withdrawal of consent. Requests may be sent to max.magnus.dev@gmail.com.

For data managed directly by Trakt or other third-party services, users may also need to exercise their rights through the tools provided by those providers.

13. Security

CinePunks uses reasonable technical and organizational measures to protect processed data. However, no IT system can be considered absolutely secure; users should protect their accounts and devices.

14. Changes to this policy

This Privacy Policy may be updated to reflect technical, functional, legal or organizational changes. The updated version will be published on this page with the last updated date.

15. Contact

For questions or requests about this Privacy Policy, contact max.magnus.dev@gmail.com.