Privacy Policy

Last updated 11 August 2026

1. Who is responsible

Kinoon.fi is the controller for personal data processed on this site. For any privacy matter, including the rights below, contact us at kinoon.fi@gmail.com.

The same address also covers content matters: if you are a rightsholder and would like some material removed, drop us a line and we will take care of it promptly.

2. What this policy covers

Kinoon.fi brings together cinema showtimes from third-party sources, along with film information such as posters, summaries and ratings from third-party film databases. It has no user accounts and sells nothing. This policy explains what personal data is processed and why.

3. What we collect and why

We want to understand how the site is really used, spot what's broken or confusing, and make your experience better. If you accept analytics, two tools help us do that: Google Analytics and Microsoft Clarity. They record how the site is used: which pages are viewed, how people move around, and what gets done along the way — the searches you type, the films you open, the theatres you pick — along with general device and browser details and your approximate location (from your IP address), all tied to a random identifier, not to you by name. Clarity also helps us see where people get stuck, through heatmaps and replays of on-page activity (such as clicks and scrolling); in these recordings Clarity's masking hides what you type into text fields. We use this only to improve the site, never to identify you, and the legal basis is your consent, so nothing loads until you accept. If you accept partway through a visit, events from earlier in that same visit are sent along too.

Google and Microsoft may also use the data they collect for their own purposes, such as improving their services; for Microsoft this can include advertising. Learn more: the Google Privacy Policy, how Google uses information from partner sites, and the Microsoft Privacy Statement.

To make the site work. We keep a few small things in your browser so the site runs and remembers your choices, such as your cookie decision, the theatres you've picked, recent searches, and display preferences. None of this is used to track you, and almost all of it stays on your device. One practical exception: your selected theatres travel with requests to our server so pages can load with your theatres already picked — we use them for nothing else. And if you've accepted analytics, what you do — like running a search or picking a theatre — shows up in the analytics events described above, even though the lists stored in your browser stay right where they are. These items are strictly necessary to provide the service.

Finding nearby theatres (optional). If you choose to see theatres near you, your browser uses your location on your device to sort them by distance — your precise location never leaves your device, and we don't receive or store it. If your browser can't provide a location, it asks the ipapi.co service for a rough estimate based on your IP address instead; that estimate, too, is used only on your device.

Keeping the site running. Our hosting and content-delivery providers handle basic technical data such as your IP address to deliver the site and keep it secure. The legal basis is our legitimate interest in a reliable, secure service.

4. Cookies and tracking

Necessary (always on): your consent choice and the preferences described above. These do not track you.

Analytics (set only after you accept): cookies and similar storage set by Google Analytics and Microsoft Clarity.

5. Trailers and YouTube

Trailers play in YouTube's embedded player, and the site uses YouTube API Services to find and show them. The player loads only when you start a trailer, and YouTube (Google) then processes data under its own policies. Learn more: the Google Privacy Policy.

6. Bot and abuse protection

We protect the service from automated abuse with Cloudflare Turnstile. It processes technical data such as your IP address and browser signals to judge whether a request comes from a bot. The legal basis is our legitimate interest in keeping the service working and secure. Learn more: the Cloudflare Turnstile privacy notice.

7. Performance measurement

We use Vercel Speed Insights to keep an eye on how fast the site is. It collects anonymous performance data per page load (such as browser, device type, country, and load times) without cookies or identifiers. The legal basis is our legitimate interest in a fast site.

8. Sharing and transfers outside the EU

Analytics data you have consented to is processed by Google and Microsoft, and site delivery and protection are handled by our hosting partners, such as Vercel and Cloudflare, some of which may process data in the United States. Such transfers rely on the EU-US Data Privacy Framework and the EU Standard Contractual Clauses. We do not sell personal data. If you look up nearby theatres without browser location, the ipapi.co service briefly processes your IP address to estimate a rough position (see 'Finding nearby theatres' above).

9. How long data is kept

Analytics data is retained by Google (event data for up to 14 months) and by Microsoft for a limited period under its own policy. Items stored in your browser remain until you clear them yourself; some (such as caches and per-visit choices) expire on their own when you close the tab.

10. Withdrawing or changing consent

You can change or withdraw your choice at any time: re-opens the consent window, where you can switch analytics off. You can also clear this site's data in your browser. Withdrawing stops further analytics; it does not undo processing already carried out.

11. Your rights

Under the GDPR you can ask to access, correct, delete, restrict, or transfer your data, object to processing, and withdraw consent at any time. Contact kinoon.fi@gmail.com. You also have the right to lodge a complaint with the data protection supervisory authority.

12. Children

The site is not directed at children. In Finland the age of consent for information-society services is 13.

13. Changes to this policy

We may update this policy. The date above shows the current version.