Privacy Policy

Last updated 30 September 2026

1. Why Kinoon exists

Kinoon.fi exists to make planning a movie night as easy as possible, and to bring films, film fans and cinemas closer together.

We want finding an interesting film, choosing the right screening and planning a movie night together to be as effortless as possible, so you can focus on what matters: experiencing on the big screen what screenwriters, directors, actors and whole production teams have worked so hard to create.

To do that, Kinoon.fi brings together cinema showtimes and films from third-party sources, along with film information such as posters, summaries and ratings from third-party film databases.

2. In short

We want Kinoon to be pleasant and safe to use. We handle data with care and explain here openly what we process and why.

The theatres, searches and settings you choose mostly stay on your own device, and analytics start only once you give your permission.

Below we explain in more detail what we process, why and for how long, which partners we use, and who is responsible. If anything puzzles you, write to us. We're happy to answer.

3. Analytics only with your permission

We want to understand how the site is really used, spot what's broken or confusing, and make your experience better. If you accept analytics, two tools help us do that: Google Analytics and Microsoft Clarity. They record how the site is used: which pages are viewed, how people move around, and what gets done along the way (the searches you type, the films you open, the theatres you pick), along with general device and browser details and your approximate location (from your IP address), all tied to a random identifier, not to you by name. Clarity also helps us see where people get stuck, through heatmaps and replays of on-page activity (such as clicks and scrolling); in these recordings Clarity's masking hides what you type into text fields. We use this to develop the site. The legal basis is your consent, so nothing loads until you accept. If you accept partway through a visit, events from earlier in that same visit are sent along too.

Google and Microsoft may also use the data they collect for their own purposes, such as improving their services; for Microsoft this can include advertising. Learn more: the Google Privacy Policy, how Google uses information from partner sites, and the Microsoft Privacy Statement.

4. What your browser remembers

We keep a few small things in your browser so the site works and remembers your choices: your cookie decision, the theatres you've picked, recent searches, display preferences, and which films you've already voted for. None of this is used to track you, and almost all of it stays on your device. One practical exception: your selected theatres travel with requests to our server so pages can load with your theatres already picked. We use them for nothing else. If you've accepted analytics, what you do (like running a search or picking a theatre) shows up in the analytics events described above, even though the lists stored in your browser stay where they are. These items are strictly necessary to provide the service.

5. Nearby theatres (optional)

If you choose to see theatres near you, your browser uses your location on your device to sort them by distance. Your precise location never leaves your device, and we don't receive or store it. If your browser can't provide a location and you haven't refused it, we use a rough, city-level estimate that our host Vercel derives from your IP address. It is sent back only to your browser, and we don't store it.

6. Voting

When you vote for a film, the vote is added to the film's count. Your browser remembers that you've voted, and to prevent abuse our server counts votes per IP address as described below.

7. Keeping the site running and safe

The site's server code runs in the EU (Stockholm), and a content-delivery network serves pages from the server nearest to you. Our hosting and content-delivery providers handle basic technical data such as your IP address to deliver the site and keep it secure.

We protect the service from automated abuse with Cloudflare Turnstile. It processes technical data such as your IP address and browser signals to judge whether a request comes from a bot. Learn more: the Cloudflare Turnstile privacy notice.

To prevent overload and vote abuse, our server counts requests per IP address. The counters are kept in Upstash's memory for at most two days and then expire on their own.

The legal basis for all of this is our legitimate interest in a reliable, secure and fair service.

8. Trailers and YouTube

Trailers play in YouTube's embedded player, and the site uses YouTube API Services to find and show them. The player loads only when you start a trailer, and YouTube (Google) then processes data under its own policies. Learn more: the Google Privacy Policy.

9. Cookies and browser storage

Necessary (always on): your consent choice and the preferences described above. These do not track you.

Analytics (set only after you accept): cookies and similar storage set by Google Analytics and Microsoft Clarity.

10. Who receives data

Analytics data you have consented to is processed by Google and Microsoft. Site delivery and protection are handled by our hosting partners Vercel, Cloudflare and Upstash, some of which may process data in the United States. Such transfers rely on the EU-US Data Privacy Framework and the EU Standard Contractual Clauses.

11. How long data is kept

Google keeps analytics event data for up to 14 months, and Microsoft for a limited period under its own policy. Abuse-prevention counters expire within two days. Items stored in your browser remain until you clear them yourself; some (such as caches and per-visit choices) expire on their own when you close the tab.

12. Withdrawing or changing consent

You can change or withdraw your choice at any time: re-opens the consent window, where you can switch analytics off. You can also clear this site's data in your browser. Withdrawing stops further analytics; it does not undo processing already carried out.

13. Your rights

Under the GDPR you can ask to access, correct, delete, restrict, or transfer your data, object to processing based on legitimate interest, and withdraw consent at any time. Contact kinoon.fi@gmail.com. You also have the right to lodge a complaint with the Office of the Data Protection Ombudsman in Finland (tietosuoja.fi).

14. Who is responsible

The controller is Kinoon Oy (business ID 3645452-2), PL 13, 00561 Helsinki, Finland. For any privacy matter, including the rights above, contact us at kinoon.fi@gmail.com.

The same address also works for content. If you're a rightsholder and have an idea for improving the material, such as a better poster, a sharper summary or a wish for how your film is shown, drop us a line. We're happy to update it, and if you'd like something removed, we'll take care of that promptly too.

15. Children

The site is not directed at children. In Finland the age of consent for information-society services is 13.

The Shining (1980)

19.10.–1.11.2026

Halloween WeeksSee the programme