Privacy policy

Last updated: 4 June 2026

This policy explains how Cinemique processes your personal data when you use the app. The data controller is Wincea (Entreprise Individuelle), run by Vincent Ponsonnet, 200 Rue de la Croix Nivert, 75015 Paris, France. For any question about your data, contact us at contact@wincea.com.

Data we collect

We only collect what we need to run the service: • Account: your email address, and either a password (stored only as a secure hash, never in clear text) or, if you sign in with Google, the account identifier and email returned by Google. • Profile: display name, public username, preferred language, title-display preference and profile visibility. • Activity: your reactions to films (liked, not interested, watchlist), the affinity scores we compute from them, and your feed filters (excluded genres and languages, year range). • Social: your friend connections and the film suggestions you send or receive. If you invite someone by email, we store that email address to manage the invitation. • Technical: a session identifier, a guest identifier (used before you create an account), and language and display preferences stored in cookies (see below).

Why we use your data and on what legal basis

• Providing the service (account, feed, watchlist, friends): performance of the contract you enter into when you use Cinemique. • Personalised recommendations (affinity scores, feed filters): our legitimate interest in offering a relevant experience, and the contract. • Sign-in with Google: your consent, given through the Google authorisation screen. • Invitations and friend suggestions: our legitimate interest in the social features you choose to use. • Audience measurement (Umami): our legitimate interest in understanding aggregate, anonymous usage. Umami sets no cookies and does not collect personal data.

Cookies and local storage

Cinemique uses a small number of cookies and local-storage items, all strictly functional: • Session cookie (next-auth): keeps you signed in. • guest_id: lets you try the app and save reactions before creating an account. • NEXT_LOCALE and title_display: remember your language and how film titles are shown. • Invitation cookie: temporarily keeps a pending invitation link. • Local storage: remembers that you dismissed the feed tour and your custom watchlist order. We do not use advertising or third-party tracking cookies. Umami audience measurement works without any cookie.

Who we share data with

We never sell your personal data. It is shared only: • With other users, according to your visibility setting (private, friends only, or public): friends can see your profile and your film reactions. You control this in your settings. • With Google, if you choose to sign in with Google (authentication only). • With The Movie Database (TMDB), which provides film data and images; we send only film identifiers and your language, never your personal data. • With Railway, our hosting provider, which stores the database on our behalf. • With Umami, for anonymous, aggregate audience measurement. These providers act as processors or independent controllers and may be located outside the European Union; in that case, the transfer is governed by appropriate safeguards within the meaning of the GDPR, such as the European Commission's standard contractual clauses or, where applicable, the provider's certification under the EU-US Data Privacy Framework.

How long we keep your data

We keep your data for as long as your account is active. When you delete your account, your personal data — profile, reactions, affinity scores, friend connections and invitations you sent — is deleted. Guest data is kept until you create an account (it is then attached to it) or becomes obsolete. Invitations expire after 7 days.

Your rights

Under the GDPR, you have the right to access, rectify, erase and port your data, and to object to or restrict its processing. You can update your profile and delete your account at any time from your account settings in the app. For any other request, contact us at contact@wincea.com; we reply within one month. If you believe your rights are not respected, you may lodge a complaint with the French data protection authority, the CNIL.

Security

Access to the app is over an encrypted (HTTPS) connection, and passwords are stored only as secure hashes. We apply reasonable technical and organisational measures to protect your data against loss or unauthorised access.

Usernames and identifiers

Your username is freely chosen by you: a neutral username is assigned by default when the account is created and can be changed at any time in settings. The publisher is not responsible for the usernames and email addresses chosen by users, in particular where they are offensive, abusive, misleading or unlawful. The publisher reserves the right to modify or suspend, without notice, any account whose username or identifier is manifestly inappropriate.

Minors

Cinemique is not intended for children under 15. If you are a minor, please use the service only with the consent of the holder of parental authority.

Changes to this policy

We may update this policy to reflect changes to the service or the law. Any significant change will be announced within the app, and the date at the top of this page will be updated.