Effective date: 4 July 2026 · Last updated: 4 July 2026
1. Who We Are
Prakash Madhavan Nair, trading as NOVOBRIL (ABN 42 989 876 644), Point Cook, VIC, Australia, is the entity responsible for CinemaFreely (cinemafreely.com, the "Service") and acts as the data controller (GDPR) / APP entity (Australian Privacy Act) for any personal information processed through it.
Privacy contact: privacy@cinemafreely.com
2. No Account Required
CinemaFreely does not require you to sign up, register, or create an account to use the Service. We do not collect names, email addresses, passwords, or payment details, and no personal profile is created about you.
3. What We Collect
| Category | Examples | Source |
|---|---|---|
| Usage data | Hashed IP address, country (derived from IP), browser/user-agent, page viewed, search query, timestamp | Automatically, when you view a movie or search |
| Reports & submissions | Hashed IP address, the YouTube URL submitted, broken-link reports, "still works" votes | You, when you use the submission, report, or voting features |
| Watchlist & watch history | Movie IDs you've added or watched | Stored only in your browser's localStorage — never sent to or stored by us |
| Communications | Any email you send to us | You, if you contact us |
We do not store raw IP addresses. Every IP address is one-way hashed (HMAC-SHA256) before it touches our database, so we cannot reverse it back to your actual IP. Hashing is deterministic, which lets us de-duplicate reports, votes, and views from the same visitor without knowing who they are.
4. How We Use It
- Operate and improve the Service (e.g. understand which movies or searches are popular);
- Prevent abuse — de-duplicate reports and votes so the same visitor can't repeatedly flag or vote on the same item;
- Review and moderate user-submitted links;
- Serve ads, where enabled, and measure site traffic;
- Comply with legal obligations (e.g. responding to a lawful request from an authority).
We do not use your data for automated decision-making that produces legal or similarly significant effects, and we do not sell personal information.
5. AI Features
CinemaFreely does not currently include an AI assistant or any feature that sends your activity to a large-language-model provider.
6. Who We Share It With
| Recipient | Purpose | Location |
|---|---|---|
| YouTube | Video hosting — you are redirected there to watch | USA / global |
| The Movie Database (TMDb) | Movie metadata | USA |
| Google Cloud Platform | Hosting, database (Cloud SQL), infrastructure | Australia (australia-southeast1) |
| Cloudflare | DNS, CDN, request routing, bot/abuse protection | Global |
| Plausible Analytics | Cookieless traffic analytics | EU |
| Google AdSense (where enabled) | Advertising | USA |
| Google Analytics (where enabled) | Traffic analytics | USA |
| Law enforcement / regulators | Where required by law | As applicable |
We require providers we rely on to handle data to a standard consistent with this policy. We do not sell or rent personal information to third parties for their own marketing.
7. Overseas Disclosure
Some of the recipients in §6 (Google, and Cloudflare's global network) may process data outside Australia, primarily in the United States. Under Australian Privacy Principle 8, we take reasonable steps to ensure overseas recipients handle data consistently with the Australian Privacy Principles, including relying on providers with recognised compliance certifications (e.g. Google Cloud's ISO 27001/SOC 2 certifications).
8. Data Retention & Deletion
We retain hashed usage data (views, searches, reports, votes) only for as long as needed to operate and improve the Service and to prevent abuse, and we review what we retain as part of our regular compliance reviews. Because no account exists, there is no personal profile to delete on request, and hashed IP addresses cannot be reversed to identify you. Your watchlist and watch history live only in your own browser — you can clear them at any time via your browser's site-storage settings.
9. Security
We apply technical measures appropriate to the limited data we hold, including TLS encryption in transit, encryption at rest (Cloud SQL default encryption), one-way hashing of IP addresses before storage, and access controls on our admin panel. No system is completely secure; if we become aware of a data breach affecting you, we will notify affected individuals and the OAIC without undue delay, where required by the Notifiable Data Breaches scheme.
10. Your Rights (Australian Privacy Act)
Because CinemaFreely does not hold identifiable personal information about you (IP addresses are hashed, not reversible), there is generally no personal profile for us to provide access to or correct. If you have a specific concern about information we may hold, contact us at privacy@cinemafreely.com. If you believe we have mishandled your information and are unable to resolve it with us directly, you may complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
11. Additional Rights for EU/UK/EEA Users (GDPR / UK GDPR)
If you are in the EU, EEA, or UK, our legal basis for processing hashed usage data is legitimate interests (operating the Service, preventing abuse, and understanding usage) — we do not rely on consent for this processing, and we do not run cookie-based tracking that would otherwise require it (see §14). Because we hold no identifiable data, requests for erasure, restriction, or portability will generally return "no data held" — contact privacy@cinemafreely.com if you have a specific concern. You may lodge a complaint with your local supervisory authority at any time.
12. Additional Rights for California Users (CCPA/CPRA)
We do not sell or share personal information as defined by the CCPA/CPRA, and we do not hold identifiable personal information about California residents beyond what is described in §3. To ask a question about this, contact privacy@cinemafreely.com.
13. Other Jurisdictions
Our jurisdiction-by-jurisdiction compliance assessment (including Canada/PIPEDA, Brazil/LGPD, India/DPDP, China/PIPL, Singapore/PDPA, and Japan/APPI) is maintained internally and reviewed quarterly. If we determine we cannot comply with a region's law, we will geo-block access from that region rather than operate non-compliantly.
14. Cookies & Tracking
We do not use tracking or advertising cookies of our own. Our analytics (Plausible) is cookieless by design. Where Google AdSense or Google Analytics are enabled on the Service, those providers may set their own cookies for ad personalisation or analytics — see Google's advertising policy and manage your preferences at Google Ad Settings.
15. Affiliate Links
Some pages — primarily movie detail pages — contain affiliate links to Amazon. As an Amazon Associate, CinemaFreely earns from qualifying purchases: if you click an affiliate link and buy something, we may earn a commission at no extra cost to you. These links are clearly marked, are separate from the free "Watch" options, and never affect the content we show or the order we show it in. Clicking one takes you to Amazon, whose own privacy policy then governs your visit.
16. Children's Privacy
The Service is not directed at children under 16, and because no account or personal information is required to use CinemaFreely, we do not knowingly collect personal information from anyone, including children. If we become aware that we have inadvertently collected identifiable data from a child, we will delete it promptly.
17. Changes to This Policy
We may update this policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision.
18. Contact Us
Prakash Madhavan Nair, trading as NOVOBRIL
ABN: 42 989 876 644
Address: Point Cook, VIC, Australia
Email: privacy@cinemafreely.com
To lodge a complaint with the Australian regulator: Office of the Australian Information Commissioner — oaic.gov.au