Privacy policy

You can spin, search and use the Shortlist without signing up. Your filters, Shortlist, theme, “Seen it” marks and similar settings are kept in your own browser (local storage), not on our servers.

• Your email address, and a securely hashed password if you sign up with email.
• If you use “Continue with Google”: your Google account ID and email address. We don't get your Google password, contacts or anything else.
• Your country (for streaming availability) and the streaming services you tell us you have.
• Your Watchlist, Watching, Seen and spin History.
• If you contact support: your message and the email address to reply to.

Only to run Cynatra: signing you in, sending sign-up codes, showing your library, avoiding titles you've seen, showing what's streaming in your country, and answering your support messages. There are no analytics or tracking scripts, and no advertising cookies. Signing in stores a login token in your browser so you stay signed in.

• Oracle Cloud hosts the site and its database (in Canada).
• Cloudflare runs our domain's DNS and forwards email sent to support@cynatra.app.
• Brevo sends our emails (sign-up codes and support replies).
• Google handles “Continue with Google” if you choose it.
• TMDB (and JustWatch through TMDB) provides titles, posters and where-to-watch data, and IMDb provides ratings. We look titles up on your behalf; we don't send them anything about you.
• Trailers play from YouTube (privacy-enhanced mode) only when you press Trailer.

We keep your account until you ask us to delete it. To delete your account and everything linked to it, send us a message from the email on your account and we'll remove it within 30 days. You can also ask for a copy of what we hold about you. Data in your browser can be cleared at any time from your browser's settings.

Everything travels over HTTPS, passwords are stored only as salted hashes, and access to the server and database is restricted. No system is perfectly secure, but we take reasonable care to protect your data.

Cynatra isn't meant for children under 13, and we don't knowingly collect their data.

If this policy changes, we'll update the date at the top. For a significant change, we'll let account holders know by email.