Effective date: 4 July 2026 · Last updated: 4 July 2026
1. Who We Are
Prakash Madhavan Nair, trading as NOVOBRIL (ABN 42 989 876 644), Point Cook, VIC, Australia, is the entity responsible for CinemaFreely (cinemafreely.com, the "Service") and acts as the data controller (GDPR) / APP entity (Australian Privacy Act) for any personal information processed through it.
Privacy contact: privacy@cinemafreely.com
2. No Account Required
CinemaFreely does not require you to sign up, register, or create an account to use the Service. We do not collect names, email addresses, passwords, or payment details, and no personal profile is created about you.
3. What We Collect
| Category | Examples | Source |
|---|---|---|
| Usage data | IP address, country (derived from IP), browser/user-agent, page viewed, search query, timestamp | Automatically, when you click Watch on a film or run a search |
| Page views | Page address, browser/user-agent, timestamp, and — on the first page of a visit only — the external site you arrived from and any campaign parameters in the link (utm_…). Your IP address is stored. No visitor identifier is set, so we do not follow you between visits, but page views recorded from the same address can be grouped. | Automatically, on every page you open |
| Reports & submissions | IP address, the YouTube URL submitted, broken-link reports, "still works" votes | You, when you use the submission, report, or voting features |
| Watchlist & watch history | Movie IDs you've added or watched | Stored only in your browser's localStorage — never sent to or stored by us |
| Communications | Any email you send to us | You, if you contact us |
We store your IP address. Until 14 September 2026 every IP was one-way hashed before it reached our database; it is now recorded as-is, so that we can tell genuine visitors apart from automated traffic, see which countries the Service is used in, de-duplicate reports and votes, and investigate abuse. An IP address is personal information, and we treat it as such: see your rights in §10 and §11, which changed as a result.
4. How We Use It
- Operate and improve the Service (e.g. understand which movies or searches are popular);
- Prevent abuse — de-duplicate reports and votes so the same visitor can't repeatedly flag or vote on the same item;
- Review and moderate user-submitted links;
- Serve ads, where enabled, and measure site traffic;
- Comply with legal obligations (e.g. responding to a lawful request from an authority).
We do not use your data for automated decision-making that produces legal or similarly significant effects, and we do not sell personal information.
5. AI Features
CinemaFreely does not currently include an AI assistant or any feature that sends your activity to a large-language-model provider.
6. Who We Share It With
| Recipient | Purpose | Location |
|---|---|---|
| YouTube | Video hosting — you are redirected there to watch | USA / global |
| The Movie Database (TMDb) | Movie metadata | USA |
| Google Cloud Platform | Hosting, database (Cloud SQL), infrastructure | Australia (australia-southeast1) |
| Cloudflare | DNS, CDN, request routing, bot/abuse protection | Global |
| Plausible Analytics | Cookieless traffic analytics | EU |
| Google AdSense (where enabled) | Advertising | USA |
| Google Analytics (where enabled) | Traffic analytics | USA |
| Law enforcement / regulators | Where required by law | As applicable |
We require providers we rely on to handle data to a standard consistent with this policy. We do not sell or rent personal information to third parties for their own marketing.
7. Overseas Disclosure
Some of the recipients in §6 (Google, and Cloudflare's global network) may process data outside Australia, primarily in the United States. Under Australian Privacy Principle 8, we take reasonable steps to ensure overseas recipients handle data consistently with the Australian Privacy Principles, including relying on providers with recognised compliance certifications (e.g. Google Cloud's ISO 27001/SOC 2 certifications).
8. Data Retention & Deletion
We retain usage data (views, searches, reports, votes) only for as long as needed to operate and improve the Service and to prevent abuse, and we review what we retain as part of our regular compliance reviews. Page views, searches, and watch clicks — including the IP address recorded with them — are deleted automatically after 90 days. Records kept for security and accountability live longer: security events such as failed admin logins are retained for 3 years, and our audit trail for 7 years, both of which include the IP address the action came from. You can ask us to delete records relating to you before those periods expire; see §10 and §11. Your watchlist and watch history live only in your own browser — you can clear them at any time via your browser's site-storage settings.
9. Security
We apply technical measures appropriate to the limited data we hold, including TLS encryption in transit, encryption at rest (Cloud SQL default encryption), access controls on our admin panel, and masking of IP addresses in admin views by default. No system is completely secure; if we become aware of a data breach affecting you, we will notify affected individuals and the OAIC without undue delay, where required by the Notifiable Data Breaches scheme.
10. Your Rights (Australian Privacy Act)
CinemaFreely holds no account, name, or email address for you, but it does hold your IP address alongside the pages you viewed and the searches you ran. That is personal information, so you can ask us for a copy of it, ask us to correct it, or ask us to delete it — email us from the connection you used, or tell us the IP address and approximate dates, and we will search for it. If you have any concern about information we may hold, contact us at privacy@cinemafreely.com. If you believe we have mishandled your information and are unable to resolve it with us directly, you may complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
11. Additional Rights for EU/UK/EEA Users (GDPR / UK GDPR)
If you are in the EU, EEA, or UK, our legal basis for processing usage data — including your IP address — is legitimate interests (operating the Service, preventing abuse, and understanding usage). We do not rely on consent for that processing. Separately, Google Analytics does set cookies on your device — and if you are in the EU, EEA, UK or Switzerland we ask you first: it is not loaded at all unless you accept (see §14). Because an IP address is personal data under the GDPR, your rights of access, erasure, restriction, objection, and portability apply to these records and we will act on them: give us the IP address and approximate dates and we will find, export, or delete the rows. Contact privacy@cinemafreely.com if you have a specific concern. You may lodge a complaint with your local supervisory authority at any time.
12. Additional Rights for California Users (CCPA/CPRA)
We do not sell or share personal information as defined by the CCPA/CPRA, and we do not hold identifiable personal information about California residents beyond what is described in §3. To ask a question about this, contact privacy@cinemafreely.com.
13. Other Jurisdictions
Our jurisdiction-by-jurisdiction compliance assessment (including Canada/PIPEDA, Brazil/LGPD, India/DPDP, China/PIPL, Singapore/PDPA, and Japan/APPI) is maintained internally and reviewed quarterly. If we determine we cannot comply with a region's law, we will geo-block access from that region rather than operate non-compliantly.
14. Cookies & Tracking
We set no tracking or advertising cookies of our own, and our primary analytics (Plausible) is cookieless by design — it runs for everyone and identifies nobody.
Google Analytics does set Google cookies. If you are in the EU, EEA, UK or Switzerland, we ask for your consent before it loads and it does not run unless you accept — nothing is set on your device while the prompt is showing. Elsewhere it loads by default. To withdraw consent, clear this site's data in your browser; you will be asked again on your next visit. See Google's advertising policy and Google Ad Settings.
Google AdSense is not currently enabled. If it is switched on in future, it may set its own cookies for ad personalisation.
15. Affiliate Links
Some pages — primarily movie detail pages — contain affiliate links to Amazon. As an Amazon Associate, CinemaFreely earns from qualifying purchases: if you click an affiliate link and buy something, we may earn a commission at no extra cost to you. These links are clearly marked, are separate from the free "Watch" options, and never affect the content we show or the order we show it in. Clicking one takes you to Amazon, whose own privacy policy then governs your visit.
16. Children's Privacy
The Service is not directed at children under 16, and because no account or personal information is required to use CinemaFreely, we do not knowingly collect personal information from anyone, including children. If we become aware that we have inadvertently collected identifiable data from a child, we will delete it promptly.
17. Changes to This Policy
We may update this policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision.
18. Contact Us
Prakash Madhavan Nair, trading as NOVOBRIL
ABN: 42 989 876 644
Address: Point Cook, VIC, Australia
Email: privacy@cinemafreely.com
To lodge a complaint with the Australian regulator: Office of the Australian Information Commissioner — oaic.gov.au