Privacy Policy

Information we collect

• Account data — email address, username, password (stored hashed by our authentication provider), optional display name, biography, avatar and favourite genres.
• Community content — ratings, reviews, comments, likes, collections, follows, watchlist entries and reports you submit.
• Search history — searches made while signed in, so you can revisit them. You can clear it from the search page.
• Technical data — IP address (stored only as a salted hash for abuse prevention and rate limiting), browser type and cookies described in our Cookie Policy.
• Messages — information you send through our contact or copyright forms.

How we use it

• To provide your account and community features (contract).
• To keep the platform safe: preventing spam, fake accounts and manipulation of ratings (legitimate interests).
• To measure usage and fund the service through advertising, where you have consented (consent).
• To respond to your enquiries and legal requests (legal obligation / legitimate interests).

What is public

Your username, display name, avatar, biography, join date, ratings, reviews, comments, favourites, public collections and follower counts are visible to everyone. Your email address and watchlist are private.

Service providers

We use trusted processors to run the service, including our database and authentication provider (Supabase), our hosting provider, Google (YouTube embedded player and, if enabled, Google AdSense and Google Analytics) and optional CAPTCHA (Cloudflare Turnstile). Embedded YouTube videos load in YouTube's privacy-enhanced mode and are subject to the Google Privacy Policy. Our trailer feature uses the YouTube API Services; see also YouTube's Terms of Service. You can review how Google uses data from partner sites at policies.google.com/technologies/partner-sites, and revoke access via Google security settings.

Advertising

When advertising is enabled, Google and its partners may use cookies to serve ads based on prior visits to this and other websites. Personalised advertising is only used if you accept advertising cookies; otherwise non-personalised ads are requested. You can opt out of personalised advertising at Google Ads Settings.

Retention

We keep account data while your account is active. Security logs are kept for up to 30 days. Data obtained from the YouTube API is refreshed or deleted within 30 days.

Your rights

Depending on where you live (including under the GDPR, UK GDPR and US state privacy laws) you may access, correct, export or delete your data, object to or restrict processing, and withdraw consent. You can edit your profile and permanently delete your account at any time from Settings. For other requests, contact us. You may also complain to your local data-protection authority.

Children

MoviesFreeOnline is not directed to children under 13 and we do not knowingly collect their data. Users must be at least 13 (or the minimum age in their country).

International transfers

Our providers may process data outside your country. Where required, transfers are protected by appropriate safeguards such as Standard Contractual Clauses.

Changes

We will post changes to this policy here and update the date above. Contact: contact@moviesfreeonline.site.