Privacy Policy

1. Introduction

Welcome to CineMap ("we," "our," or "us"). We are committed to protecting your privacy and being transparent about how we collect, use, and share your information. This Privacy Policy explains our practices regarding data collection when you use our website at cinemap.app (the "Service").

2. Information We Collect

2.1 Information You Provide

When you use our feedback form, we collect:

• Full name (optional)
• Email address
• Feedback message content

2.2 Automatically Collected Information

When you visit our Service, we automatically collect:

• Usage Data: Pages visited, time spent on pages, clicks, scroll depth, search queries
• Device Information: Browser type, version, operating system, device model
• Network Data: IP address, approximate geographic location (country/region level)
• Referrer: How you arrived at our Service (previous website or direct)
• Identifiers: Cookies, local storage, and similar tracking identifiers

3. How We Use Your Information

We use the collected information to:

• Provide and improve our Service
• Respond to your feedback and support requests
• Analyze usage patterns and optimize user experience
• Display relevant advertisements through Google AdSense
• Comply with legal obligations

4. Third-Party Services

We use the following third-party services that may collect information about you:

5. Cookies and Tracking Technologies

5.1 Types of Cookies

Our Service uses the following categories of cookies:

5.2 Cookie Management

You can control cookies through your browser settings. You may refuse or delete cookies, but this may limit some functionality of our Service. Most browsers allow you to:

• See what cookies are stored
• Delete specific cookies
• Block cookies from specific sites
• Set your browser to reject all cookies

For more information, visit allaboutcookies.org.

6. Data Retention

We retain your personal information only as long as necessary for the purposes outlined in this Privacy Policy. Specific retention periods are:

• Feedback Submissions: 2 years (for support and improvement purposes)
• Analytics Data: 26 months (standard analytics retention)
• Essential Cookies: Until end of session or 1 year maximum
• Performance/Marketing Cookies: 13 months (Google AdSense standard)
• Log Files: 90 days

After the applicable retention period, we securely delete or anonymize your data. However, we may retain data longer if required by law or for legal dispute resolution.

7. Your Privacy Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your data
• Opt-out: Opt out of marketing communications
• Data Portability: Receive your data in a portable format

To exercise these rights, please use our contact form.

8. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA), we process your personal data under the following legal bases:

• Consent: For marketing cookies and personalized advertising (via Google AdSense)
• Legitimate Interest: For analytics to understand and improve our Service performance
• Legitimate Interest: For feedback collection to enhance user experience
• Legal Obligation: To comply with security and fraud prevention requirements

You have the right to withdraw consent at any time by adjusting your browser cookie settings or opt-out preferences with Google AdSense.

9. International Data Transfers

Our Service is hosted on Vercel (US-based infrastructure) and uses third-party services (Google, Web3Forms) that may transfer your data internationally. These transfers are safeguarded by:

• Standard Contractual Clauses (SCCs): Google, Vercel, and Web3Forms have SCCs in place for EU data transfers
• Data Processing Agreements: All processors have signed Data Processing Agreements (DPAs)
• Adequacy Decisions: Data transfers to the US benefit from the EU-US Data Privacy Framework
• Anonymization: Analytics data is aggregated and anonymized where possible

By using our Service, you acknowledge and consent to the processing of your information in countries other than your country of residence, which may have different data protection rules.

10. Regional Privacy Rights

For EU Users (GDPR)

If you are in the European Economic Area (EEA), you have additional rights under GDPR:

• Right to lodge a complaint with your local data protection authority

Contact information for supervisory authorities:

• United Kingdom: Information Commissioner's Office (ICO) - ico.org.uk
• Germany: Der Bundesbeauftragte für den Datenschutz
• France: Commission Nationale de l'Informatique et des Libertés (CNIL) - cnil.fr
• Other EU Countries: Visit European Data Protection Board for your local authority

For California Users (CCPA/CPRA)

California residents have rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• Right to request disclosure of data collected
• Right to request deletion of personal information
• Right to opt out of data sales (we do not sell personal information)
• Right to limit use of sensitive personal information

To exercise these rights, please use our contact form.

11. Do Not Track Signals

Some browsers include a "Do Not Track" (DNT) feature. Our Service does not respond to or honor DNT signals at this time. We continue to process analytics and serve personalized advertising as described in this Privacy Policy regardless of DNT settings. However, you can control tracking by adjusting your browser cookie settings or Google AdSense preferences.

12. Children's Privacy

Our Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please use our contact form immediately.

13. Data Security

We implement reasonable security measures to protect your information. However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

14. Data Protection Officer Contact

For privacy-related inquiries, data protection concerns, or to exercise your privacy rights, please use our contact form.

We will respond to all privacy requests within 30 days of receipt.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. Your continued use of our Service constitutes your acceptance of the updated Privacy Policy.

16. Contact Us

If you have any questions about this Privacy Policy, please use our contact form.