Privacy Policy

bdkino is a movie search service that identifies films from a single frame or description. We aim to collect as little data as possible and stay transparent about what we do with what we collect.

1. What we collect

1.1 Without an account

• IP address hash (sha256) — for rate-limiting (5 searches/hour)
• Uploaded frames — processed and deleted immediately after the search
• Text queries — kept in search_logs for statistics (90 days)
• User-Agent + language — for device analytics and localization

1.2 With an account

• Email (for sign-in and notifications)
• Profile name and emoji-avatar
• Your search history (yours only, can be cleared anytime)
• Subscription and crypto tx_hash records
• (Optional) USDT donation wallets

2. What we do NOT collect

• Credit card data (we don't accept cards — USDT only)
• GPS geolocation
• Advertising / cross-site trackers and Facebook Pixel — none. Analytics (Google Analytics 4 and Yandex.Metrika) load ONLY with your cookie consent, with session recording (Webvisor) disabled — see §5.

3. Who we share data with

Third-party AI processing services — only the query/frame for search (without your personal data). Our movie-metadata provider — only the numeric movie identifier (not personal data). Analytics services (Google Analytics 4, Yandex.Metrika) — anonymized visit data, and only if you consented to cookies. No one else.

4. Your rights (GDPR/CCPA)

• Access: request a data export — support@bdkino.com
• Deletion: in /profile — "Delete account" button
• Correction: change name/avatar in /profile
• Portability: email export within 30 days

5. Cookies

• Auth cookie (JWT) — for session; 30-day lifetime
• localStorage for language preference and your cookie choice (never sent to server)
• Cloudflare may set technical cookies for bot protection
• Analytics cookies — Google Analytics (_ga, _ga_*) and Yandex.Metrika (_ym_uid, _ym_d). Set ONLY after you click "Accept" in the consent banner; until then no trackers load. Session recording (Webvisor) is off. To change your choice, clear the site's cookies/data and the banner reappears.

6. Retention

• Searches: 90 days
• Frames: deleted immediately after processing
• Notifications: 180 days
• Accounts inactive for more than 1 year: warning + deletion after 3 months

7. Security

HTTPS everywhere. Passwords hashed with bcrypt. JWT with expiration. fail2ban on SSH.

8. Children

The service is not intended for users under 13 years old.

9. Policy changes

We notify users of significant changes by email and a banner on the homepage 14 days in advance.

10. Contact

Any privacy questions: support@bdkino.com