Privacy Policy

Last Updated: February 08, 2026 01:25 PM

At Cynyma, we are committed to being transparent about how we collect, use, and safeguard your personal information. This policy explains our data practices in detail.

1. DATA WE COLLECT

1.1 Information You Provide Directly

  • Account Credentials: We collect your name, email address, and passwords. Passwords are encrypted using one-way salted hashing and are never stored in plain text.
  • Profile Information: You may choose to upload a profile picture or link a Gravatar.
  • Verification Data: To comply with our 18+ policy, we may collect your date of birth or require a self-declaration of age.
  • Contact Data: We may collect phone numbers for account recovery or 2FA (Two-Factor Authentication) purposes.
  • User Contributions: We store the reviews, ratings, celebrity bios, and movie lists you create to display them on the platform.

1.2 Information from Third-Party Logins (SSO)

When you use "Connect with Google," "Facebook," or other Social Logins, we receive:

  • Your primary email address and public profile information (e.g., name and profile picture).
  • Note: We do not request or collect your friends lists, private messages, or social feeds.

1.3 Automated Data Collection

For security, analytics, and regional content optimization, we automatically collect:

  • IP Addresses: Used for DDoS protection and to show you region-specific movie availability (e.g., "Where to watch in India").
  • Device Metadata: Browser type, operating system, and unique device identifiers.
  • Usage Patterns: Which movies you view and which lists you vote on.

2. COOKIES AND THIRD-PARTY TRACKING

2.1 Our Cookies

We primarily use Session Cookies to keep you logged in and remember your preferences during a single visit.

2.2 Third-Party Cookies (Ads & Analytics)

  • Google Adsense: We display ads provided by Google. These partners may use cookies to serve ads based on your prior visits to Cynyma or other websites.
  • Analytics: We use analytics tools to understand site traffic. These tools collect anonymized data about your journey through our platform.
  • Opt-Out Note: Cynyma does not directly control personalized ad settings. You can manage your ad preferences through your Google Account or by visiting www.aboutads.info.

3. DATA STORAGE AND PROCESSING

3.1 Hosting & Infrastructure

Your data is primarily hosted on AWS (Amazon Web Services).

  • Data Localization: Currently, we utilize servers in the India Region to ensure low latency and compliance with local data residency preferences.
  • Future Expansion: We may utilize international AWS nodes in the future to serve our global audience.

3.2 Security Measures

  • Encryption at Rest: Our databases and backups are encrypted to prevent unauthorized access.
  • Audits: We conduct periodic security audits and vulnerability scans to protect against SQL injection, XSS, and other digital threats.
  • Backups: We maintain timely backups to ensure data remains recoverable in the event of a system failure.

4. DATA SHARING AND DISCLOSURE

  • Service Providers: We share data with infrastructure providers (like AWS) only to the extent necessary to run the platform.
  • Affiliates: While we display "Watch Providers," we do not pass your personal identity or account data to these external platforms.
  • Legal Necessity: We may disclose data if required by Indian law or a valid court order from the jurisdiction of Kerala.

5. YOUR RIGHTS AND DATA RETENTION

5.1 Retention Policy

We believe in data minimization. We retain your personal data only as long as your account is active or as needed to provide you services.

  • Deletion Timeline: Upon account closure, we aim to delete or anonymize your personal data within 30 days, unless legal obligations require a longer retention.

5.2 User Rights

Under the DPDP Act, you have the following rights:

  • Right to Access: Request a summary of the personal data we hold about you.
  • Right to Correction: Update any inaccurate or incomplete information.
  • Right to Erasure: You can delete your account via the "Delete Account" button in your settings or by emailing our support team.

6. GRIEVANCE REDRESSAL

In accordance with the Information Technology Act and the DPDP Act, we have appointed a Grievance Officer to handle your privacy concerns.

Grievance Officer: Legal Dept, Cynyma

Email: legal[at]cynyma[dot]com

Location: Cochin, Kerala, India.

7. CHANGES TO THIS POLICY

We may update this Privacy Policy to reflect changes in our tech stack or legal requirements. We will notify you of any significant changes via a notice on our homepage or via email.