Last updated: May 2026
When you create an account, we store your username, email address, and password (hashed). We also store the content you create on Kinorg: film lists, watched/liked/watchlist records, and any reviews you write.
Your data is used solely to provide the Kinorg service — logging you in, showing your lists, and enabling collaboration with other users. We do not sell your data or use it for advertising.
We use Bugsnag for error monitoring. If an error occurs, technical details (such as the URL and error message) may be sent to Bugsnag. No personal data is deliberately included. Film data is provided by TMDB — we do not share your data with them.
The For You tab on your films page is powered by vector embeddings — numerical representations of each film's tone, style, themes, and metadata that let us find films similar in feel to ones you've liked.
We generate these once per film, at the point a film is imported into our database. Two third-party services are involved, and both receive only public film metadata (no user data):
Both calls are one-off, film-level operations — they happen once per film, ever, regardless of which user triggered the import. None of your personal data is included. Your taste vector is computed locally on our server from the embeddings of films you've already rated or liked, and the similarity search that produces your recommendations runs entirely in our database — no third-party call is made when you view the For You feed.
The Watch Together feature uses Anthropic's Claude API to interpret your prompt and pick films from both members' tastes. Each time a prompt is submitted in a room, the following is sent to Anthropic:
Usernames are not sent. When the AI needs to refer to a specific member (e.g. "who submitted this prompt", "who dismissed that film"), we use anonymous labels like "User A" and "User B" — never the real username. The label-to-username mapping stays on our server. The text of the prompt itself is sent as you typed it, so if you reference someone's name within the prompt, that text is included verbatim.
Your email address, password, watchlist, and any data from outside the room — other lists, your full watch log, films from other watchrooms — are never sent to Anthropic. We do not use the AI for anything beyond this feature.
Data sent to Anthropic is processed under their privacy policy and commercial terms. By default, Anthropic does not train its models on API data and retains inputs and outputs for a limited period for abuse monitoring only.
The prompts, recommendations, and any dismissal reasons you generate are stored in our database so the room has a memory of prior suggestions and can refine future picks. Deleting your account removes all of this.
We use a single session cookie to keep you logged in. No tracking or advertising cookies are used.
You can delete your account at any time from your profile page, which permanently removes all your data. You can also request a copy of your data or ask any questions by emailing [email protected].
Data is stored on servers in the EU (DigitalOcean, Amsterdam region). We take reasonable steps to keep it secure.
For any privacy-related queries, email [email protected].
