Privacy policy

In short

• Kinora stores your account and the plan you make in it, so it is there on any device you sign in on.
• Your plan is private until you join a group, send someone a link, or make a private link for your own calendar app or phone. Your notes are shared only if you put them in a private link of your own.
• Kinora shows no advertising, sells no data and uses no tracking cookies.
• You can have your account and everything in it deleted by asking through the contact form.

What Kinora stores

Your account

Your name and email address. If you sign up with an email and password, the password is stored only in a scrambled (hashed) form that cannot be read back. If you sign in with Google, Google tells Kinora your name, email address and profile picture; Kinora does not receive your Google password.

Your plan

What you do in the app, for each festival: the films you mark Interested or High priority, the screenings you mark Maybe or Going, what you hide and the reason you give, your notes on films, screenings and the festival as a whole, the tags you create and apply, the hours you mark as busy, and which messages in your inbox you have read. Kinora also records whether you have seen the introduction, so it plays only once. When one of your busy times clears a Maybe or Going by itself (the festival moved a screening into it, say), Kinora leaves a message in your inbox that names the film and the busy time; only you can read it.

Groups and film discussions

The name you use in groups, the groups you create or join, and the messages and emoji reactions you post in a group’s film discussions.

Links you share

When you share screenings by link, Kinora stores which screenings the link shows. When someone opens a link you were sent, Kinora stores the name you enter, your answers for that link and any note you write beside an answer. Clearing an answer deletes its note. The person who made a link can change its screenings, its name and whether the people it was sent to see each other’s answers; turned on, that includes answers given before. They can answer the link themselves; on a link where people see each other’s answers, those who open it see the sender’s answers under the sender’s name. They can turn it off and on again, or delete it, which deletes every name, answer and note on it.

When someone answers a link, its sender gets a message in their Kinora inbox with that person’s name and how many screenings they answered each way. It is sent once they have stopped answering for a few minutes, so a sitting of answers is one message. The message is written from the answers each time it is shown, so changing or clearing an answer changes it, and deleting the link deletes it.

On a link you were sent, your name is what identifies you. A random identifier in a cookie keeps you signed in to it in one browser; in another browser, or after clearing cookies, entering the same name brings your answers back. That also means anyone who has the link and enters your name on it reaches your answers and notes for that link and can change them, including on a link where only the sender otherwise sees them. Use a name that tells you apart from the other people the link was sent to.

Feedback

What you write, the kind of feedback, and any film or screening you choose. Your name and email address go with it unless you choose to send it anonymously. For a wrong listing or a bug, the festival, the page you were on, your browser, your window size and your time zone go with it too, so the problem can be found. The form says so beside the Send button.

The contact form

What you write, the topic you choose, the email address you give for the reply and, if you give it, your name. A wrong listing reported from a festival’s page also carries that festival’s name. Nothing else about you or your account goes with it, whether or not you are signed in.

Technical information

• Like any website, the servers Kinora runs on record each request, including your IP address and browser, in short-lived logs used to keep the service working.
• The country your IP address points to is used to suggest festivals near you on the festival list. It is not stored.
• Your IP address is held in memory for about a minute when you send feedback or use the contact form, to stop the forms being flooded.
• Anonymous measurements of how quickly pages load (timings, the page, the type of device and browser) are collected through Vercel Speed Insights. They are not tied to your account and use no cookies.

What it is used for

To run Kinora: to show you your plan, save it as you change it, show your groups what you have chosen to share, deliver your feedback and messages, and keep the service fast and working. Kinora sends email only about your account, such as a link to reset your password, and in reply to a message you sent it. It does not send newsletters or marketing, show advertising, sell or rent information about you, or build a profile of you for anyone else.

Who can see your plan

Nobody but you, until you do one of the three things below.

When you join a group

Every member of the group can see:

• the name you use in groups;
• the films you mark Interested or High priority, and the screenings you mark Maybe or Going, for each of the four that your sharing choices for that group allow (all four are on until you turn them off);
• the Booked, Sold out, Standby and Attended tags on screenings you share;
• the start and end of the hours you mark as busy, without any label;
• the messages and reactions you post in the group’s film discussions.

Group members never see your notes, the reasons you gave for hiding something, your own tags, or anything you have not marked. Leaving a group stops its members seeing your plan from then on.

When you share screenings by link

Anyone who has the link can see the screenings you chose to put in it and the name you use in groups, or, if you have not set one, the first name on your account. Notes, hide reasons and tags are never included. The person who sent the link reads every answer and note given on it. Whether the people who open the link can see each other’s answers and notes is set when the link is made. You can revoke a link at any time, and it stops working at once.

When you make a private link for your calendar app or phone

For each festival you can make two private links to your own screenings: one to add to a calendar app, and one to open on your phone. Kinora stores each link’s address and what you chose to put in them. Anyone who has an address can see the screenings you marked with the choices you made (Going, Maybe, or both), with each one’s film, synopsis, time, venue and links to its tickets, trailer and pages; the hours you marked as busy, with their labels, if you chose to include them; and your film and screening notes if you chose to include them. Hide reasons and tags are never included, and neither link says whose it is. If you add the calendar link to a calendar service such as Google Calendar, Apple’s iCloud or Outlook, that company’s servers read the link and keep their own copy of what they read, under their own privacy policy. You can replace either link with a new one or turn it off at any time; its old address stops working at once, though a calendar service may keep showing the copy it already has until you remove the calendar there.

Services Kinora uses

These companies process information on Kinora’s behalf, only to provide their part of the service:

• Vercel hosts the website and collects the anonymous page-speed measurements.
• Neon hosts the database where your account and plan are stored, runs sign-in, and stores poster images.
• Google, only if you choose to sign in with your Google account.
• Formspree delivers feedback and contact-form messages to Kinora’s inbox.
• jsDelivr serves the list of emoji when you open a film discussion, so it sees your IP address. Your messages are not sent to it.

If you choose to support Kinora, you do it on Buy Me a Coffee’s own site, which handles the payment under its own privacy policy. Kinora links to that page and loads nothing from it, so Buy Me a Coffee learns nothing from your visits to Kinora. Kinora never sees your card details; it sees the name, email address and message you give Buy Me a Coffee, and the amount.

Some film posters are not stored by Kinora. Those load straight from the festival’s own image server, or the image service the festival uses, so your browser asks that server for the picture. Like any website your browser contacts, it receives your IP address and the ordinary details a browser sends with a request, and it handles them under the festival’s own privacy policy. Kinora sends it nothing else about you.

Film trailers play in YouTube’s or Vimeo’s own video player, inside Kinora. Nothing from either company loads until you press a trailer’s Play button. When you do, your browser connects to that company, which receives your IP address and the ordinary details a browser sends, and handles them under its own privacy policy. Kinora asks YouTube for its privacy-enhanced mode and Vimeo not to track the viewing, and sends neither company anything about you or your plan. The trailer stops, and the player is removed, when you close it.

These services may store and process information in countries other than yours, including the United States.

Cookies and browser storage

• Sign-in cookie. Keeps you signed in. It is shared across kinora.app’s festival addresses so that one sign-in works for every festival.
• Shared-link cookie. Set only when you open a link someone sent you. It holds a random identifier so this browser stays signed in to the name you entered, and lasts a year. “Use a different name” on the link removes it.
• Browser storage. Remembers display choices on this device, such as which view you last used and how many days the calendar shows. It never leaves your browser.
• Trailer players. Once you press Play on a trailer, the YouTube or Vimeo player may keep its own data in your browser, such as your volume or caption settings, under that company’s policy. Nothing of theirs is loaded before you press Play.

Kinora sets no advertising, analytics or tracking cookies, which is why it does not ask you to accept any.

How long it is kept

Your account and plan are kept for as long as you have an account. When you ask for your account to be deleted, it is deleted with everything in it within 30 days. Messages you posted in a group’s film discussions are deleted with your account. Feedback and contact-form messages stay in Kinora’s inbox for as long as they are useful for answering them or fixing what they reported.

So that a plan changed or deleted by mistake can be put back, Kinora keeps the previous version of an entry you change or delete (a mark, a note, a tag, a busy time, a link, an answer or note on a link) for up to 30 days, and then deletes it. Nobody else can see these copies.

Seeing, changing and deleting it

Wherever you live, you can:

• see and change your plan in the app at any time, and change the name you use in groups from the account menu;
• ask for a copy of everything Kinora stores about you;
• ask for anything that is wrong to be corrected;
• ask for your account and everything in it to be deleted.

Ask through the contact form, giving the email address on your account. You will get an answer within 30 days. If you are not satisfied with the answer, you can complain to the data protection authority where you live.

Children

Kinora is not meant for children under 13, and does not knowingly store information about them.

Changes to this policy

When this policy changes, the date at the top changes with it. If a change affects who can see your plan or what is stored, you will be told in the app before it takes effect. See also the Terms of use.

Contact

Questions about this policy or your information: use the contact form.