KinoraРусский

Privacy policy

Effective October 8, 2026

Kinora (kinora-search.com and the Telegram app) picks films and series for your taste. This page explains what data we get, why we need it and what you can do with it.

What we collect

  • Sign-in data. Your email address if you sign in with an emailed code or a password (passwords are stored only as a one-way hash). Your Telegram ID and name if you sign in with Telegram. Your Google account ID, email address and name if you sign in with Google.
  • Your library and taste. Ratings, watch statuses, notes, hidden titles, recommendation requests and the taste profile built from them, plus your spark balance.
  • Technical data. IP address and browser details at sign-in, so you can see your sessions and we can look into a suspicious sign-in. A session cookie keeps you signed in, and Yandex Metrica cookies are used for statistics (see below); there are no advertising cookies.
  • Anonymous statistics. While you browse the site without signing in, your browser tells us only the step — opened the site, opened sign-in, picked a sign-in method — and the label of the link you came from (for example, Threads). In Telegram, before sign-in, we likewise note that the app opened and started, and on what: Android, iOS or desktop. No IP address, browser details or identifiers: this shows us where new visitors struggle. In the same way, without your Telegram ID, we count presses of “Start” in the bot by the link label. The link label is also kept in your account if you signed up through that link.
  • Steps in the app. Once you are signed in, your account notes which screens you opened and which buttons you tapped (a rating, “Haven’t seen it”, a pick, “Back”), when you left the app, whether it hit an error and what it runs on: Android, iOS, desktop or the website. In Telegram it also notes whether the “allow the bot to message you” window was shown and what you answered. Nothing you type is included: this shows us where the app is hard to use.
  • Time zone. If you turned on the weekend pick, we keep how many hours your time differs from Greenwich, so it arrives on Friday afternoon your time.

Google user data

When you sign in with Google we request only the basic profile: account ID, email address and name (openid, email and profile scopes). We use them to sign you in to your Kinora account and to show in settings which Google account is linked. We do not access Gmail, contacts, files or any other Google data, we do not share or sell Google user data, and we do not use it for advertising or to train models. You can unlink Google in settings at any time; its data is then removed from your account.

Yandex Metrica

To see where the site is hard to use, we use Yandex Metrica (Yandex LLC). It receives your IP address, browser and device details, the pages you open, clicks and scrolling, and its Webvisor tool records how you use a page. Webvisor does not record email addresses, sign-in codes or the contact field of the feedback form; Metrica does not run on one-time link pages or in the admin area. Yandex processes this data under its privacy policy. You can turn Metrica off by blocking its cookies or script in your browser.

Why we use it

  • to sign you in and keep your account secure;
  • to pick films and series for your taste and explain each pick;
  • to email you sign-in codes — we send no other mail;
  • to have the Telegram bot send your picks if you closed the app while they were being found, and remind you once the next day if you still haven't opened them — only if you allowed the bot to message you; you can turn this off in settings;
  • to have the bot send a weekend pick on Fridays — only if you turned it on yourself; you can turn it off in settings;
  • to find, from statistics, where the site is hard to use and fix it.

Who else processes it

We do not sell data. To run the service, some of it is processed by providers: an AI model receives your ratings and the text of a recommendation request (without your name or email), an email provider receives your address and the code letter, Telegram and Google handle sign-in in their own systems, and Yandex Metrica receives visit statistics. The film catalog comes from TMDB; none of your data is sent there.

How long we keep it

For as long as the account exists. Session records are kept for up to 37 days, sign-in codes for no longer than a day. When you merge two accounts, the second one's data moves into the first and the second account is deleted.

Your rights

You can export all your data in settings (Data → Export My Data), unlink any sign-in method except the last one, and ask us to delete the account entirely. For any question about your data, message us on Telegram.

Changes

If this policy changes, the new version will appear on this page with a new date.