Privacy statement.

Who is responsible

CineHop is run by one person in the Netherlands, and that person is the controller for the personal data described here.

Controller: Maxim Smirnov.

Questions, requests and complaints go to contact@cinehop.nl. CineHop is not required to appoint a data protection officer and has not appointed one.

What is stored, and why

Everything CineHop holds about a visitor is in this list.

• Account details, if you sign in with Google — your email address and Google’s permanent identifier for your account, and nothing else. Your name and profile picture are shown in the account menu while you are signed in, but they are read from Google’s own session in your browser and are never stored by us. Basis: performing the agreement to give you the account you asked for (Art. 6(1)(b) GDPR).
• Saved cinemas — the cinemas you have starred. Kept in your own browser while you are signed out, and in our database once you sign in. Same basis.
• Sign-in cookies — `__Secure-cinehop.session-token` and the short-lived cookies used while signing in. Strictly necessary: without them an account cannot stay signed in. Basis: Art. 6(1)(b), and exempt from consent under Article 11.7a of the Telecommunicatiewet.
• Language preference — a `cinehop_locale` cookie remembering whether you read CineHop in Dutch or English, kept for a year. Functional, and likewise exempt from consent.
• Your location — only if you ask CineHop to use it, and only after your browser has asked your permission. The coordinates stay in your browser’s local storage and are used there to sort cinemas by distance. They are never sent to us. Basis: your consent (Art. 6(1)(a)), which you can withdraw at any time in your browser’s site settings.
• Technical logs — our hosting provider records ordinary request data, including your IP address, the page requested, the time and your browser’s user agent, to keep the site running and secure. Basis: our legitimate interest in a working, secure service (Art. 6(1)(f)).

What CineHop does not do

There is no advertising on CineHop and no advertising or analytics tracker of any kind — no tracking cookie, no pixel, no tag manager. That is why the site never asks you to accept cookies: the only ones it sets are the necessary and functional ones named above.

Nothing about you is sold, rented, or shared for anyone else’s marketing.

You are not profiled, and nothing here makes automated decisions about you.

Who else sees it

• Vercel Inc. — hosts and serves the site, and so processes requests and logs on our behalf.
• Neon Inc. — the database in which accounts and saved cinemas are stored.
• Google Ireland Ltd. — sign-in with Google. When you choose to sign in, Google confirms your identity to us. What Google itself does is described in Google’s privacy policy.
• Google Maps — the cinema map is loaded from Google, so opening a page that shows one sends your IP address and browser details to Google, which may set its own cookies. This use is likewise covered by Google’s privacy policy.
• The Movie Database and the cinemas’ own image servers — posters and stills are loaded straight from them, so their servers see your IP address and browser details.

Some of these providers are established outside the European Economic Area or run infrastructure there. Where that happens, the transfer rests on the European Commission’s standard contractual clauses or on the EU–US Data Privacy Framework.

How long it is kept

• Account details and saved cinemas — until you delete your account, and in any event removed within 30 days of your request.
• Technical logs — held briefly by our hosting provider for security and fault-finding, and used for nothing else.
• Cookies — the language cookie for one year; the sign-in cookies for as long as the session lasts.
• Location and signed-out favourites — these never leave your browser, and clearing your browser data removes them.

Your rights

Under the GDPR you may ask us to:

• give you a copy of the personal data we hold about you;
• correct anything that is wrong;
• erase your data, including by deleting your account entirely;
• restrict what we do with it, or object to processing that rests on our legitimate interest;
• hand you your data in a portable form;
• stop relying on consent you have given — which does not affect anything done before you withdrew it.

Write to contact@cinehop.nl to exercise any of these. We answer within one month. We may ask you to sign in with the same account first, so that we do not hand your data to somebody else.

To delete your account, write to contact@cinehop.nl. We remove the account and everything saved with it, and confirm when it is done.

If you believe we handle your data wrongly, you may complain to the Dutch supervisory authority, the Autoriteit Persoonsgegevens.

Children

CineHop is not aimed at children, and we do not knowingly create accounts for anyone under 16. If you believe a child has signed in, write to contact@cinehop.nl and we will remove the account.

Security

The site is served over HTTPS, access to the database is restricted to the application and its maintainer, and CineHop never collects payment details or any special category of personal data.

Changes

We may update this statement. The date at the foot of this page says when it last changed, and we will say so on the site if a change materially affects you.