This Privacy Policy explains how Moventra ("Moventra", "we", "our", "us") collects, uses, shares and protects your personal data when you use the Moventra website, applications, APIs and related services (the "Service").

We are committed to protecting your privacy and to complying with applicable data-protection law, including the EU General Data Protection Regulation (GDPR) and the Dutch implementation thereof. This policy should be read together with our Terms of Service.

By using the Service you acknowledge that you have read and understood this Privacy Policy.

Moventra is the controller responsible for the processing of your personal data described in this policy.

Website: https://moventra.app. For any privacy-related question or to exercise your rights, you can reach us through our contact page.

Account information: username, email address and a securely hashed password.

Profile information: avatar, biography and your profile-visibility choice (Public, Friends or Private). Your biography is stored encrypted at rest.

Communications: the contents of messages you send us (for example through the contact form or support requests), including your name and email address.

Payment information: where paid plans are offered, payments are handled by third-party payment processors; we do not store full card details on our servers.

Tracking and usage data: your watch history, watchlists, ratings, reviews, viewing statistics, follows and followers, and the interactions you have with the Service.

Technical data: IP address, browser type and version, device and operating-system information, language and timezone, referrer information and session data.

Returning-visitor recognition: when you sign in we store a one-way, salted hash of your IP address (never the address itself) so that, if you later visit a film or series page while signed out, we can offer to sign you in rather than create a duplicate account. The hash is only ever compared, never displayed, and is overwritten on your next sign-in.

Cookies and similar technologies: small files and identifiers used to keep you signed in, remember preferences, secure the Service and measure aggregate usage (see "Cookies" below).

If you connect a third-party account (for example to import your viewing history), we receive information from that service as authorized by you, such as your profile and watch data. We process it to provide the features you request.

If you choose to sign in with Google (“Continue with Google”), Google shares a limited set of profile information with us: your name, email address, profile picture URL and a unique Google account identifier. We use this only to create, secure and sign you into your Moventra account. We never receive your Google password and request no access to any other Google data. Google’s handling of your information is governed by Google’s own Privacy Policy.

We also obtain catalog metadata, artwork, trailers and ratings from third-party content providers; this is not personal data about you.

We use personal data to: create and manage your account and authenticate you; operate, maintain and provide the Service; personalize your experience and generate recommendations; build your viewing statistics; communicate with you about the Service, security and support; detect, prevent and investigate abuse, fraud and security incidents; improve and develop the Service; and comply with legal obligations.

We process personal data on the following legal bases under the GDPR: performance of a contract (to provide the Service you have requested); our legitimate interests (such as securing the Service, preventing abuse and improving our product), balanced against your rights and freedoms; your consent, where required (for example for certain cookies or optional features), which you may withdraw at any time; and compliance with legal obligations.

Strictly necessary cookies: required to sign you in, maintain your session, protect against cross-site request forgery and operate core functionality. These cannot be switched off.

Preference cookies: remember choices such as language and theme.

Analytics: we use Google Analytics 4 with Google Consent Mode. It is on by default; it sets analytics cookies (such as _ga and _ga_*) unless you turn analytics off in “Cookie settings”, in which case Consent Mode keeps it cookieless and only aggregated, non-identifying signals are sent. See the Analytics section.

Marketing cookies: the Meta (Facebook) Pixel is on by default and sets Facebook cookies used to measure our advertising and reach relevant audiences (see the Analytics section). You can turn “Marketing” off at any time in “Cookie settings”.

You can control or delete cookies through your browser settings; disabling strictly necessary cookies may prevent parts of the Service from working.

We use Cloudflare, including Cloudflare Turnstile, to protect sign-in, registration and password forms and to defend the Service against automated abuse and attacks.

For these purposes Cloudflare may process your IP address, browser information, request metadata and security-related signals. Cloudflare acts as our processor and also provides content delivery (CDN), caching, DDoS protection and performance optimization.

We use Google Analytics 4, a service provided by Google Ireland Limited, configured with Google Consent Mode v2. It helps us understand, in aggregate, how the Service is used — for example page views, referrer information, browser and device type, approximate (country-level) location and on-site interactions such as searches and outbound clicks. Analytics is on by default; Google Analytics sets first-party cookies (such as _ga and _ga_*) on your device unless you turn analytics off, in which case Consent Mode keeps it cookieless and only aggregated, non-identifying consent signals are sent. Your IP address is used by Google to derive approximate location; in Google Analytics 4 it is not logged or stored. Google acts as our processor for this analytics data.

When you are signed in, we attach a pseudonymous identifier — a salted, one-way hash of your account identifier (never your name or email, and not reversible) — together with your plan tier (free or Plus) as the Google Analytics user-id and a user property. This lets us understand product usage at an account level (for example retention) without identifying you personally; we do not use it to build advertising profiles and we do not sell data.

You can turn analytics off at any time through “Cookie settings” in the footer, and we honour your browser's "Do Not Track" signal. Browsing by our own staff and administrators is excluded from analytics.

Advertising measurement (Google Ads enhanced conversions): only while "Marketing" is enabled in "Cookie settings", we provide Google, through Google Analytics, with a hashed (SHA-256), non-reversible version of your email address so that conversions from our advertising can be measured. We never send your raw email address, and nothing is sent when "Marketing" is turned off or when your browser signals "Do Not Track".

Advertising and measurement (Meta Pixel): the Meta Pixel from Meta Platforms Ireland Limited is on by default. It sets Facebook cookies and shares limited information, such as the pages you view on Moventra, your IP address and browser/device information, with Meta to measure the performance of our advertising and to reach relevant audiences. You can turn it off at any time by switching "Marketing" off in "Cookie settings", after which the Pixel does not load and no further data is sent to Meta; we also honour your browser's "Do Not Track" signal. Meta processes this data under its own Data Policy.

We share personal data with carefully selected processors who act on our instructions and are bound by appropriate confidentiality and data-protection obligations. These may include: hosting and infrastructure providers; Cloudflare (CDN, security, bot protection); Google Ireland Limited (Google Analytics); and email delivery providers (Brevo).

Gravatar (Automattic): only if you opt in to a Gravatar avatar. Your browser then requests an avatar image from Gravatar using a one-way hash of your email address, and Gravatar receives your IP address. This is off by default and can be disabled at any time in your display settings, after which a generated avatar is served with no third party involved.

Google (Google Ireland Limited): used only if you choose “Continue with Google” to sign in or link your account. The sign-in exchange takes place directly between you and Google; we receive the basic profile fields described in section 5 to authenticate you. If a Google profile photo is shown as your avatar, your browser loads it directly from Google, which receives your IP address. You can disconnect Google at any time in Settings → Connections.

Meta (Meta Platforms Ireland Limited): the Meta Pixel is on by default and shares limited interaction and technical data with Meta for advertising performance and audience measurement, as described in the Analytics section. You can switch it off at any time via “Cookie settings”.

We do not sell your personal data. Other than the Meta Pixel and Google Ads enhanced conversions described above (which you can switch off via “Cookie settings”), we do not share your data for third-party advertising.

We may disclose personal data: to the processors described above; to comply with applicable law, legal process or enforceable governmental requests; to enforce our Terms and protect the rights, property or safety of Moventra, our users or others; and in connection with a merger, acquisition or sale of assets, in which case we will continue to protect your data and notify you where required.

Information you choose to make public (such as a public profile, reviews or activity you share) may be visible to others.

Your profile page has three visibility levels that you control in Settings → Profile: Public (anyone with the link can view it, and search engines such as Google may index it), Friends (only people connected to you by a follow can view it, and it is excluded from search engines) and Private (only you can view it, and it is excluded from search engines). Profiles are Private by default.

Your data may be processed in countries outside your country of residence, including outside the European Economic Area. Where we transfer personal data internationally, we implement appropriate safeguards such as the European Commission's Standard Contractual Clauses or rely on an adequacy decision, as applicable.

We retain personal data only for as long as necessary for the purposes set out in this policy: for the lifetime of your account and as needed to provide the Service, and thereafter as required for legal compliance, dispute resolution, fraud prevention and security.

When data is no longer needed, we delete or anonymize it. Backups are retained for a limited period and then overwritten.

Inactive accounts follow a wind-down: after roughly 90 days of inactivity we email you a reminder; if there is still no activity, the account is deactivated after a further 30 days; and after a further 90 days it is soft-deleted and the associated personal data is anonymized. A deactivated account can be restored through a reactivation link until it is deleted. Administrator and demo accounts are excluded from this process.

We use your tracking data and stated interests to generate content recommendations and personalized statistics. This profiling is used only to improve your experience within the Service and does not produce legal or similarly significant effects on you. You can influence it by changing your interests or activity.

You may delete your account at any time. Upon deletion, your personal profile data will be removed or anonymized, except where we are required or permitted by law to retain certain records.

You can also review and update much of your information directly in your account settings, and disconnect connected accounts at any time.

Subject to applicable law, you have the right to: access your personal data; rectify inaccurate or incomplete data; erase your data ("right to be forgotten"); restrict or object to certain processing; data portability; and withdraw consent where processing is based on consent.

To exercise these rights, reach us through our contact page. We will respond within the timeframes required by law. You will not have to pay a fee unless your request is manifestly unfounded or excessive.

If you believe we have not handled your personal data lawfully, you have the right to lodge a complaint with a supervisory authority. In the Netherlands this is the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl). You may also contact the supervisory authority in your EU country of residence.

We would, however, appreciate the chance to address your concerns before you approach a regulator, so please contact us first.

We implement appropriate technical and organizational measures to protect your data, including HTTPS encryption in transit, hashing of passwords, encryption of sensitive fields at rest, access controls, rate limiting, security monitoring, regular security updates and infrastructure hardening. Optional email-based two-factor authentication is available to add a second layer of protection to your sign-in.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we become aware of a personal-data breach that is likely to result in a risk to your rights, we will notify the relevant supervisory authority and, where required, affected users.

The Service is not directed to children under 13, and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, please contact us and we will take appropriate steps to delete it.

We may update this Privacy Policy from time to time. When we make material changes we will update the "Last updated" date and, where appropriate, provide additional notice. We encourage you to review this policy periodically.

Moventra is also available as an Android application distributed through the Google Play Store (https://play.google.com/store/apps/details?id=com.moventra). The app is a secure, trusted wrapper around the Moventra website and is governed by this same Privacy Policy.

When you install or use the app through Google Play, Google acts as the distributor and processes data under its own policies, including installation, device and crash information, and any in-app or store transactions. Please refer to Google Play's Terms of Service and Google's Privacy Policy for details on that processing.