Privacy Policy

Scope of this policy

This policy describes the features implemented in this CineLoop PHP application. The site provides movie and TV discovery through TMDB, search, filters, title details and a browser-local watchlist. It does not provide user accounts, purchases, a message-submission form or video playback.

Searches, filters and page requests

Search terms and filter choices are placed in the page URL and sent to the server to produce results. These URLs may remain in browser history, appear in copied links and be included in server request logs. Avoid entering private or sensitive information in the search field.

The server forwards movie and TV search terms to TMDB’s API to retrieve results. Browsing also causes server requests to TMDB for lists, genres, title details and recommendations. API credentials remain on the server; browser-local favorites are not included in these API requests.

My List and local storage

My List stores catalog identifiers in your browser’s localStorage under cineloop-list. The application can import favorites from the older 2flix-list key on the same website origin without deleting that older key. Saved selections are read in your browser and are not submitted to the application server.

Remove individual titles with their save buttons, or use your browser’s site-data controls to remove stored data for this site, including any older key. Favorites remain tied to the browser and origin where they were saved; they are not an account backup or a cross-device service. Private browsing, browser settings and clearing site data can affect their persistence. If storage is blocked, the application warns that changes last only on the current page.

Cookies, analytics and advertising

The application code does not set its own cookies or start a PHP session. LocalStorage is used for favorites instead. No analytics tags, advertising scripts, advertising pixels or embedded video players are included in this version.

These statements describe the application, not every service involved in delivering it. Hosting, CDN or security services may process request data or use cookies depending on their configuration. Adding analytics, advertising or other integrations would require a review of this policy and any applicable choices for visitors.

Images, fonts and external links

Posters and featured artwork load from TMDB’s image service. Typography loads through Google Fonts and its font-serving domains. Your browser connects to those providers to retrieve assets, which exposes technical request information such as your IP address and browser details; referrer information depends on the browser and the site’s referrer policy. Those services handle their requests under their own policies.

See TMDB’s Privacy Policy and Google’s Privacy Policy. Following an external link takes you to a separate service whose practices CineLoop does not control.

Server logs and caching

Serving a page or file necessarily involves technical requests to hosting infrastructure. Hosting, CDN and security systems may record information such as IP addresses, timestamps, requested URLs and browser information for operation and troubleshooting. Their exact logging settings and retention periods are not established by this application, so no fixed retention period is promised here.

PHP page responses request revalidation with Cache-Control: no-cache; this does not mean nothing can be stored. Browsers and delivery services can cache public assets, and infrastructure rules may affect page caching. TMDB responses are cached in private server-side JSON files, including search responses keyed by a hash of the request. Cache freshness varies by request type; expiration of freshness is not a promise that a file is immediately deleted. This application does not create server-side user profiles or store watchlists in a database.

Questions and your choices

You can browse without saving favorites, remove saved titles and clear this site’s browser data. Visit Contact Us for the current availability of a contact channel. A public contact address and the operator’s hosting-specific data-handling details still need to be confirmed before the contact service is launched.