Privacy policy

1. Who controls the data

Cinejma is operated by Roman Sisik in Slovakia (referred to as “Cinejma”, “we”, “us”, or “our”). Roman Sisik is the controller of personal data described in this policy. For privacy questions or to exercise your rights, email roman@sisik.eu.

2. What stays on your device

The editor uses browser storage—including local storage, IndexedDB, Cache Storage, and the Origin Private File System—to provide features you request. Depending on the features you use, this can include:

This information is controlled by your browser and is not sent to Cinejma’s servers. You can remove it using Cinejma’s project controls or your browser’s site-data controls. Clearing site data, using private browsing, browser storage cleanup, or losing access to the device may delete it. Export important projects and finished videos regularly.

3. Data the service receives

Service and security logs

When your browser requests the site, our server and hosting infrastructure necessarily receive technical data such as your IP address, request date and time, requested URL, response status, transferred bytes, referrer (if supplied), and browser or device headers. We use this to deliver the service, diagnose failures, prevent abuse, investigate security incidents, and maintain reliable operation.

Limited diagnostics and usage measurement

Cinejma uses a first-party status connection to report whether the deployed editor version or service state has changed and to deliver an operator message. The server also uses the connection's ordinary request headers and lifetime to estimate when an editor is connected and count approximate daily visitors. Application JavaScript does not send a separate analytics, visibility, acknowledgement, IP, User-Agent, or geography payload, and there is no analytics HTTP fallback. This mechanism does not use an analytics cookie or advertising identifier.

For approximate deduplication and security, the server derives an internal keyed value from the requesting IP address and browser User-Agent. We may retain the source IP address, User-Agent, request times, connection state, and locally resolved GeoLite information including country, subdivision, city, postal code, approximate coordinates, timezone, and location accuracy. IP-derived locations are approximate and may represent a network provider, VPN, proxy, or shared connection rather than a person's actual location.

We may also collect first-party diagnostic events such as broad browser and device capabilities, coarse feature use, performance timings, error details, and security events. We use these records only to understand aggregate use, fix defects, plan compatibility work, communicate service status, investigate abuse, and protect Cinejma. We do not use advertising identifiers, build cross-site marketing profiles, or track you across unrelated sites.

Cinejma is designed not to transmit your imported media, project or file names, timeline content, captions, text layers, or exported media as part of logs or diagnostics. Please do not place confidential information in URLs or send confidential project material when contacting us.

4. Legal bases and purposes

We process the minimum technical data needed to deliver Cinejma at your request and to pursue our legitimate interests in operating, securing, debugging, and improving the service. These interests include detecting attacks and misuse, resolving compatibility failures, measuring reliability, and deciding which anonymous-use features need attention. Where law requires consent for a future feature, that feature will remain off unless and until valid consent is obtained.

5. Cookies and similar browser storage

Cinejma does not use advertising cookies, cross-site tracking cookies, or analytics cookies. It currently does not set HTTP cookies. The local browser storage described above is used only to provide editor functionality and remember choices you make, and downloadable resources may be kept in your browser cache for performance and offline reuse.

6. Service providers and external resources

Hosting and infrastructure providers may process technical request data for us under appropriate contractual and security obligations. We do not sell personal data.

If you choose a downloadable Google font, your browser requests the stylesheet or font file from Google Fonts and Google receives ordinary connection data such as your IP address and request headers. If the locally installed project-packaging module is unavailable and you request project import or export, Cinejma may load the pinned module from jsDelivr, whose infrastructure receives similar connection data. These providers process data under their own privacy terms. No project or media content is included in those requests.

If a provider processes data outside the European Economic Area, the transfer must rely on an applicable adequacy decision or legally recognised safeguards. We may also disclose data where required by law, to protect users or the service, or in connection with a lawful reorganisation of the service.

7. Retention

Ordinary identifiable server and diagnostic logs are retained only as long as reasonably needed for the purposes above and normally no longer than 30 days. Relevant records may be kept for up to 12 months where necessary to investigate a security incident, abuse, fraud, or a legal claim, and longer where law requires it. Aggregated statistics that no longer identify a person may be kept indefinitely. Data stored only in your browser remains until you or your browser removes it.

8. Your rights

Subject to the conditions and exceptions in applicable law, you may request access to, correction or deletion of, or restriction of processing of your personal data. You may object to processing based on legitimate interests and request data portability where applicable. You also have the right to lodge a complaint with the Personal Data Protection Office of the Slovak Republic or another competent supervisory authority.

Because there are no user accounts and we avoid persistent online identifiers, we may be unable to connect a particular log entry to you. We may ask for information reasonably necessary to locate records and verify that a request concerns you; we will not collect extra identification merely to preserve data we cannot otherwise identify.

9. Security

We use reasonable technical and organisational safeguards appropriate to the service. No browser, network, or storage system is completely secure, however. You are responsible for protecting access to your device, browser profile, local files, project packages, and exported media.

10. Children

Cinejma is a general-purpose creative tool and is not directed to children. We do not knowingly collect information from children for profiling or marketing. A child should use the service only with any consent or supervision required by the law that applies to them.

11. Changes to this policy

We may update this policy when Cinejma or applicable law changes. The date above identifies the current version. Material changes will be presented with reasonable notice in the service where practical. If accounts, cloud storage, user submissions, payments, or consent-based analytics are introduced, this policy will be updated before that processing begins.