Privacy & Data Protection

Privacy & Data Protection Policy

Effective Date & Last Updated: October 27, 2026

Core Privacy Commitments

We Never Sell Your Data

We never monetize, rent, or sell your personal details or movie watchlists to third-party ad brokers.

Bcrypt & TLS Encryption

Passwords are protected with salted Bcrypt hashing, and all sessions run on secure modern TLS encryption.

Full User Control & Deletion

Toggle profile privacy modes, modify your settings, or permanently delete your account at any time.

1. Introduction & Scope

LisLas (LisLas.net) is committed to protecting the privacy and personal data of its users and visitors. This Privacy Policy details the types of information we collect, how it is processed and secured, and your rights to manage or delete your data. Our policies align with modern international privacy standards, including the General Data Protection Regulation (GDPR) and regional frameworks such as the Saudi Personal Data Protection Law (PDPL).

2. Information We Collect

A. Account Data

Upon sign-up: email address, username, display name, and securely hashed password. Optional profile details: avatar, bio, country, and gender.

B. Cinema Activity Data

Watched movie history, watchlist entries, custom curated lists, 1-to-5 star ratings, film reviews, community comments, and actor favorites.

C. Technical & Log Data:

IP address, browser user-agent, device metadata, and request timestamps, collected solely for security auditing, DDoS prevention, rate-limiting, and spam moderation.

3. Information We Do NOT Collect

100% Free Core Service & Zero Sensitive Profiling:

We never solicit or store credit card numbers, CVVs, or bank account details.
We do not collect biometric identifiers, national IDs, or passport numbers.
We do not track precise live GPS device locations.

4. How We Use Your Data

We use the collected information exclusively to power your cinematic experience and provide core features:

Authentication: Verifying your identity, session security, and account management.
Personalized Recommendations & Taste Match: Suggesting films suited to your tastes and calculating taste compatibility percentages with friends.
Platform Integrity: Detecting fraud, mitigating spam bots, and enforcing safe community standards.
Transactional Notifications: Dispatching password reset instructions and essential system security alerts.

5. Cookies & Local Storage

We use strictly necessary and functional cookies essential to running the application:

Session Token Cookie: A secure encrypted cookie (HttpOnly, Secure, SameSite=Lax) ensuring persistent login and preventing CSRF exploits.
Local Storage: Used locally on your device to remember UI theme (Dark/Light) and language preference.
Advertising Trackers: We do NOT utilize third-party cross-site advertising cookies or behavioural trackers.

6. Third-Party Service Providers

LisLas integrates with verified third-party partners strictly to provide core features:

The Movie Database (TMDB): Supplies film metadata and artwork (LisLas never shares user profiles with TMDB).

YouTube API Services: Embeds official trailers via YouTube players subject to Google Privacy Policy and YouTube ToS.

7. Data Security Safeguards

We employ technical and organizational safeguards to ensure data integrity and confidentiality:

One-way salted password hashing via modern industry-standard Bcrypt.
Full transport encryption across all endpoints via HTTPS / TLS 1.3.
Isolated database instances with strict firewall rules and scoped environment variables.

8. Your Legal Rights & Choices

Under applicable regulations (including GDPR & PDPL), you retain full rights over your data:

Right to Access:

Inspect your full activity, ratings, and lists directly from your profile.

Right to Rectification:

Update your profile details, avatar, or password anytime via settings.

Privacy & Visibility Controls:

Toggle your profile visibility between Public, Limited, or Private modes.

Right to Erasure (Account Deletion):

Permanently erase your account, ratings, and activity via settings or email.

9. Children's Privacy

LisLas is not intended for children under the age of 13. We do not knowingly collect personally identifiable information from children under 13. If we discover that personal data of a minor under 13 has been submitted without verified parental consent, we will promptly delete the data and account from our servers.

10. Contact Us & Data Protection Inquiries

If you have any questions, requests for data export/erasure, or concerns regarding this Privacy Policy, please contact our Data Protection team at:

privacy@lislas.net|contact@lislas.net

Response within 24 - 48 hours

Official website: https://lislas.net

Read Terms of Service