Privacy Policy

This Privacy Policy explains how KhatraFlix ("we", "us", "our") collects, uses, and protects information when you use our website and services (the "Service"). By using the Service, you agree to the practices described below.

1. Information We Collect

1.1 Information you provide

• Account information — when you sign up we collect your username, email address, and a password hash.
• Google sign-in — if you use Google to sign in, we receive your Google account ID, email address, name, and profile picture. We do not receive your Google password.
• Profile data — anything you choose to save, such as your "My List" of titles.

1.2 Information collected automatically

• Usage data — pages viewed, titles opened, playback progress, session timestamps.
• Device data — browser type, operating system, screen size, language, and approximate region derived from your IP address.
• IP address — logged for rate-limiting, abuse prevention, and security auditing.

1.3 Cookies & local storage

We use a session cookie to keep you logged in, and browser local storage to remember preferences such as your chosen server or playback settings. We do not use advertising trackers. You may clear cookies and local storage at any time through your browser settings.

2. How We Use Your Information

• To create and maintain your account and authenticate you.
• To store and sync your "My List" and viewing progress.
• To improve the Service, fix bugs, and monitor performance.
• To detect, prevent, and respond to abuse, fraud, or security incidents.
• To comply with legal obligations where applicable.

We do not sell your personal information. We do not run ads and we do not share your data with advertising networks.

3. Third-Party Services

We rely on a small number of external services to operate:

• Google Sign-In — used solely for authentication if you choose that option. Google's privacy policy applies to the information Google collects.
• TMDB (The Movie Database) — used to fetch metadata, artwork, descriptions, and episode data. Requests are made server-side and do not include your personal information.
• Third-party stream sources — content embedded in the player is delivered by third parties. Their servers may log your IP when you play a title.

4. Data Retention

Account data is kept for as long as your account is active. Playback progress and "My List" entries are retained until you delete them or close your account. Security logs (including IP addresses) are retained for up to 90 days.

5. Your Rights

Depending on where you live, you may have the right to:

• Access a copy of the personal data we hold about you.
• Request correction of inaccurate information.
• Request deletion of your account and associated data.
• Object to or restrict certain processing.

To exercise any of these rights, contact us using the details at the bottom of this page.

6. Security

We take reasonable technical and organisational measures to protect your information, including password hashing, encrypted transport (HTTPS), and rate limiting on authentication endpoints. No system is perfectly secure — please use a strong, unique password and enable two-factor authentication on your Google account if you sign in that way.

7. Children

The Service is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with information, please contact us and we will delete it.

8. International Transfers

Our servers and third-party services may be located in countries other than yours. By using the Service, you consent to the transfer of your information to those locations.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be highlighted on this page with a new "Last updated" date. Continued use of the Service after changes constitutes acceptance of the revised policy.

10. Contact

Questions about this Privacy Policy? Reach us through the contact page or the email address listed in the site footer.