Privacy policy

Last updated: 15 October 2026.

1. Data we process

Registration requires your name, email address and password. Passwords are stored as salted cryptographic hashes, not readable text. We also store activation status, sessions and temporary activation or password-reset links.

When you use these features we store your library, favorites, watch statuses, likes and dislikes, streaming services, filters, theme, language and setup progress. Technical identifiers and attempt counters protect the service. Hosting and connection services may generate technical logs, including IP addresses and access dates.

2. Purposes and lawful bases

Registration, activation, sign-in, password recovery and synchronization provide the service you request (GDPR Article 6(1)(b)). Your name, email and password are required for an account; you can browse the catalog without one.

Personalized recommendations use the taste, library and filters you choose to provide as part of this service. You can change your taste and decide whether to use your streaming services. Recommendations combine related titles, genres, themes and filters. We do not make decisions producing legal or similarly significant effects on you.

Preventing unauthorized access, abuse and failures is based on the legitimate interest in service security (GDPR Article 6(1)(f)). PlanCine is currently free, contains no advertising and does not send commercial newsletters.

To improve PlanCine we record signed-in usage days, recommendation batches, suggested titles and titles saved from them, and voluntary ratings. These metrics do not include signed-out visits or add tracking cookies. These records are linked to the account ID, without copying names, emails, IP addresses or passwords; the private dashboard only shows aggregate statistics. They are cleaned up after 35 days during maintenance and deleted when the account is deleted.

3. Providers and external services

Hosting and the database use Hostinger, with the main server in Spain according to the configuration supplied by the owner. Hosting and email providers support operation, activation and recovery messages. The main server location does not determine where every backup, auxiliary service or subprocessor operates.

Our server queries TMDB without sending your name or email. Your browser loads images from TMDB and fonts from Google Fonts; these providers receive connection data such as your IP address. Links to YouTube, TMDB, JustWatch and streaming services lead to external sites with their own policies. Availability is supplied by JustWatch through TMDB. Website language does not change the availability country, which remains Spain.

Some providers may process data outside the European Economic Area. Information about locations and safeguards is available in the privacy terms of Hostinger, TMDB and Google. Contact the controller for information about service providers.

When enabled, we use Cloudflare Turnstile on account and suggestion forms to limit automated submissions. Cloudflare receives connection and browser data for the check; we do not send your name, email, password or suggestion content to it. Cloudflare.

4. Retention and deletion

Your account and preferences remain while you keep the account, until you request deletion. Activation links expire after 24 hours, reset links after one hour and sessions after a maximum of 30 days. Temporary security records expire and are cleaned up by maintenance tasks.

Deleting your account removes associated records from the active database and invalidates its sessions and links. The app also removes its account copy in the browser used for deletion. Local copies in other browsers and downloaded files must be removed from those devices.

Hosting backups are not edited individually on account deletion. Data leaves the active service and older copies disappear through backup rotation. Hostinger publishes a standard retention of 7 days for daily backups and 6 weeks for weekly backups; actual availability depends on the plan and existing copies. See Hostinger backup information. Contact the controller for the cycle applicable to this service.

Data needed for claims or legal obligations, if any, will be retained only for those purposes and applicable periods.

5. Cookies and browser storage

The technical pc_session cookie identifies your session for up to 30 days. It is HttpOnly, Secure and SameSite=Lax. Signing out invalidates it. The preference cookie pc_language remembers the chosen language for up to one year. Language is also remembered in browser storage and, when signed in, in your account.

Local storage keeps the library, preferences and changes waiting to sync in this browser. Without an account, it stores your local list. The pending activation email is temporarily kept in the tab session, without the password. Clear this data in browser settings; unsynced copies will be lost.

The app does not include advertising cookies or external analytics tools. External sites you choose to open manage their own storage.

6. Your rights

You can request access, rectification, erasure, restriction, objection and portability where applicable by emailing hola@plancine.com. Identify the account and your request. Additional identity information will only be requested when necessary; do not send passwords.

You can also export your library from My list and delete your account from My account. If you believe your rights have not been respected, you can complain to the Spanish Data Protection Agency (AEPD).

If you send a suggestion, its subject and content are emailed to us with your account name and email so we can evaluate it and reply as part of the requested service. It remains in the mailbox while needed to handle the proposal, the response or applicable obligations. It is not added to your library. Deleting your account does not automatically remove emails already received; you can request their deletion at hola@plancine.com.

7. Changes and contact

This information will be updated when features, providers or purposes change. Significant changes will be communicated through a suitable channel before any new processing requiring notice begins. Contact David García Perez at hola@plancine.com with questions.