Legal

Privacy policy

Effective date: Effective date — being completed by the site operator

Browsing the public archive requires no account. This policy explains what happens when you create one.

1. Controller

The data controller is the publisher of Cainfinity: Controller name — being completed by the site operator. Privacy contact: Privacy contact email — being completed by the site operator. No Data Protection Officer has been appointed.

2. Data, purposes and legal bases

Category	Data	Purpose	Legal basis
Account	Email address, password (stored hashed by the authentication provider), sign-in records	Create and secure your account	Contract (Art. 6(1)(b) GDPR)
Profile	Name, username, first/last name, country/region, language, profile photo, cover image, stickers and cosmetics	Display your profile and personalise the service	Contract
Activity	Watched titles and episodes, dates, rewatches, ratings, notes, favourites, saved titles, statistics, badges	Provide tracking and statistics	Contract
Social	Followers / following, notifications, giveaway entries	Social features and events you choose to join	Contract
Feedback	Messages sent through the feedback form	Answer you and improve Cainfinity	Legitimate interest (Art. 6(1)(f))
Pro subscription	Subscription status, plan, period dates, Stripe customer reference. Card details are handled only by Stripe.	Sell and manage Cainfinity Pro	Contract; legal obligations for accounting records (Art. 6(1)(c))
Emails	Email address, message content	Account and subscription emails	Contract
Technical	IP address, browser data and logs processed by hosting providers	Security and operation of the service	Legitimate interest

Your profile and activity shown on your public profile page can be seen by other visitors. Cainfinity does not use advertising, does not sell personal data and does not run third-party analytics or tracking scripts.

3. Recipients and processors

Your data is accessible only to the operator and to the providers needed to run the service:

Lovable (deployment platform and Lovable Cloud) and Supabase (database, authentication, file storage).
Cloudflare (hosting runtime and content delivery).
Stripe (payments for Pro — Stripe acts as an independent controller for payment data).
Lovable's email service (account and subscription emails).

4. International transfers

Some of these providers are based in the United States or may process data outside the EU. Where this happens, the transfer relies on the safeguards those providers offer (EU–US Data Privacy Framework certification or Standard Contractual Clauses). Exact server locations: Provider region confirmation — being completed by the site operator

5. Retention

Account, profile and activity data are kept while your account exists. Billing records are kept for as long as French accounting law requires. Feedback messages and technical logs: Retention periods — being completed by the site operator

6. Account deletion

"Delete my account" in Settings immediately removes your profile, notes, ratings, favourites, saved titles, watch history, notification reads and badges. Your sign-in record (email address) is not removed by that button; to have it erased, contact us at the privacy address above. Billing records held by Stripe and any data in provider backups are removed according to those providers' own schedules. Cancel any active Pro subscription before deleting your account.

7. Your rights

Under the GDPR and French law you may request access, rectification, erasure, restriction, objection and portability, and give instructions about your data after death. Much of your data can be edited directly in Settings; for anything else, write to the privacy contact above. We reply within one month. You may also complain to the CNIL (www.cnil.fr, 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07).

8. Cookies and local storage

Cainfinity only uses strictly necessary storage (to keep you signed in and remember preferences). No consent banner is required for these. See the cookie information page.