Privacy Policy

1. Our approach

We collect as little as we can and use it only to run the Service. We do not sell personal information, we do not share it for cross-context behavioural advertising, and we do not run advertising trackers. Your library is private working material and we treat it that way.

2. Who is responsible

cine.gallery, in Ontario, Canada. Our full postal address is provided on request to contact@cine.gallery. is the organisation responsible for the personal information described here (the controller, in European terms). Write to contact@cine.gallery for anything in this document, including to reach the person accountable for privacy at cine.gallery.

3. What we collect

• Account information — the name, email address and profile image your Google account gives us when you sign in, and your account identifier.
• Your content — the images, video, audio and 3D files you upload, their previews, the titles, tags and notes you write, and your galleries.
• Guest contribution information — if you upload through a public gallery link, the name and email address you enter, the file you contribute and when you contributed it. We send those details to the gallery owner; no account is created.
• Analysis data — numerical representations of your media generated so it can be searched, along with suggested tags and the corrections you make to them.
• Membership and payment data — your plan, status, renewal dates, and the billing records our payment processor returns to us. We never see or store your full card number.
• Service data — logs of requests, errors and security events, including IP address, browser type and timestamps, and basic aggregate usage counts.
• Analytics data — only if you allow it in the cookie banner: the pages you visit, how you arrived, your approximate location, device and browser, collected by Google Analytics under a random identifier.
• Messages you send us — support requests and feature requests, and what you write in them.

4. What we do not collect

We do not collect advertising identifiers, we do not build profiles about you for marketing, and nothing we use follows you across other websites for advertising. Google Analytics runs only if you allow it, with advertising features and Google signals switched off. Your assets are yours: we do not mine them, sell them or hand them to anyone you have not shared them with.

5. Why we use it, and on what basis

• To provide the Service you asked for — performing our contract with you.
• To deliver a guest contribution to the gallery owner and tell them who sent it — the contributor's request and our legitimate interest in providing a safe, accountable sharing feature.
• To analyse your uploads so they can be searched and tagged — performing our contract with you; this is a core feature of the Service.
• To take payment and keep tax records — performing our contract, and complying with legal obligations.
• To keep the Service secure and to prevent abuse — our legitimate interests in protecting members and the Service.
• To improve suggestion quality using the corrections members make — our legitimate interests; you may object at any time and we will exclude your account, as described below.
• To answer you when you write to us — performing our contract, and our legitimate interest in supporting members.
• To understand which pages are useful and where people get stuck, using Google Analytics — your consent, given in the cookie banner and withdrawn at any time from Cookie settings at the foot of every page.
• To send you service emails you cannot opt out of, such as receipts and security notices — performing our contract. Anything promotional is consent-based, follows Canada's anti-spam legislation, and can be unsubscribed from in one step.

6. Analysis, in the terms that matter

When you upload to the cloud, we generate representations of your media that let the Service match it to a description and to other assets, and we produce suggested tags. This is how search works. We do not use your media to provide a service to anyone else, we do not make it available to other members, and we do not sell it or licence it to third parties. If you would prefer that the corrections you make to tags not contribute to improving suggestions generally, write to us and we will exclude your account; the Service will continue to work exactly as before for you.

7. Who we share it with

Only with the service providers we need to run cine.gallery, each bound by contract to use it solely for us. They are listed, with what each receives and where it is processed, in Subprocessors. We also disclose information where the law genuinely requires it, and if we are ever part of a merger or sale we will tell you before your information moves and you will keep the rights described here.

8. Where it is processed

The Service is operated from Canada and uses infrastructure that may process and store data in Canada, the United States and the European Union. Where information leaves the region you are in, we rely on appropriate safeguards — including the European Commission's standard contractual clauses, the UK addendum where relevant, and our providers' certifications. You can ask us for details of the safeguards applying to your account.

9. How long we keep it

• Your content and analysis — until you delete it, or until thirty days after you close your account, allowing for backup expiry.
• Account records — for the life of the account, then up to twelve months.
• Billing and tax records — as long as Canadian tax law requires, currently six years.
• Security and request logs — usually up to ninety days, longer only where we are investigating a specific incident.
• Support and feature-request correspondence — up to twenty-four months.

10. Security

Access to your files is checked on every request against your account and your membership; storage is private and is not publicly addressable. Transport is encrypted, and data is encrypted at rest by our infrastructure providers. Administrative access is limited to the few people who need it and is logged. No system is perfect: if a breach ever affects you, we will notify you and the appropriate regulators as the law requires, and we will tell you what happened rather than the least we can get away with.

11. Your rights

Wherever you live, you may ask us to give you a copy of your personal information, correct it, delete it, restrict or object to a use, or provide it in a portable form, and you may withdraw consent where we relied on it. Most of this you can do yourself: download your originals at any time, edit your metadata, and delete your account from Settings. For anything else, write to contact@cine.gallery. We will respond within thirty days and will not charge you or treat you differently for asking.

12. If you are in Canada

We handle personal information in accordance with PIPEDA and applicable provincial law, including Ontario's. You may complain to us first — please do — and you may complain to the Office of the Privacy Commissioner of Canada at any time.

13. If you are in the European Economic Area or the United Kingdom

You have the rights set out in the GDPR and the UK GDPR, including the right to lodge a complaint with your supervisory authority. Where we rely on legitimate interests, you may object and we will stop unless we have compelling grounds that override your interests. We do not carry out automated decision-making that produces legal or similarly significant effects on you.

14. If you are in California or another US state with a privacy law

We do not sell personal information or share it for cross-context behavioural advertising, and we have not done so in the preceding twelve months. You have the rights to know, delete, correct and opt out described in your state's law, and you will never be discriminated against for using them.

15. Children

The Service is not for children. We do not knowingly collect personal information from anyone under 16, and if we learn we have, we will delete it promptly. Write to us if you believe this has happened.

16. Changes

We will post any change here with a new date, and for material changes we will notify you in the app or by email before they take effect.

17. Talking to us first

If anything in this document, or anything about how we have treated you, concerns you, write to contact@cine.gallery before taking a formal step. We reply within five business days and tell you what we can and cannot do.

Nothing here removes any right you have under Canadian law or the law where you live, including your right to complain to a regulator or, in Ontario, to bring a claim. We only ask for the chance to put it right first.