Privacy Policy

Last updated: 2026-10-08

Alvina Creation · An AlvinAI Product · operated by AlvinAI Lab

This Privacy Policy explains how Alvina Creation (cinema.alvinailab.com, "Alvina", "we", "us"), a service operated by AlvinAI Lab, collects, uses and protects information when you use our website. By using Alvina Creation you agree to the practices described here.

1. Information we collect

Account information. If you create an account with email and password, we store your email address, the display name you choose and a securely hashed password through our authentication provider, Supabase. If you use Google Sign-In instead, we receive your name, email address, profile picture and a unique Google account identifier. We never receive or store your Google password.
My List and viewing history. When you are signed in, the titles you save to My List, the titles you watch and how far you got are stored in our database so they sync across devices. You can remove any entry from your dashboard.
Subscription records. Your plan, its status and renewal date, and records of any payments we log for your account (amount, date and reference). We do not collect or store card numbers.
Usage analytics. We record page views, plays and completed views, and which title is currently being watched, to show aggregate audience numbers. Each browser tab gets a random identifier; if you are signed in, events are also linked to your account so we can show when it was last active. We do not store your IP address with these events, and raw events are deleted after 90 days.
Data stored on your device. We use your browser's local storage to remember your volume, subtitle and quality choices, watch progress, likes, a guest My List, your cookie choice and your sign-in session.
Technical data. Our servers automatically log your IP address, browser type, requested pages and timestamps for security, debugging and abuse prevention.
Advertising data. If advertising is enabled, Google and its partners may collect cookie identifiers and device information as described in section 5.

2. How we use information

To provide the service: authenticate you, sync My List and viewing history, manage your plan and remember your preferences.
To understand, in aggregate, which titles people watch so we can improve the catalogue.
To keep Alvina Creation secure, prevent abuse and fix errors.
To show advertising that keeps Alvina Creation free, personalised only if you consent.
To comply with legal obligations and respond to lawful requests.

Where the GDPR or UK GDPR applies, we rely on performance of a contract (providing your account and list), our legitimate interests (security and service improvement) and your consent (personalised advertising cookies), which you can withdraw at any time.

3. Google OAuth data usage

Alvina Creation uses Google Sign-In only to let you create and access your account. We request the basic openid, email and profile scopes and nothing else. Specifically:

We use your name and picture only to show who is signed in, and your email only to identify your account and contact you about it.
We do not sell Google user data, use it for advertising or profiling, or share it with third parties except the service providers needed to run Alvina Creation (Supabase for authentication and storage).
No person reads your Google data unless you ask us to, it is needed for security, or the law requires it.
Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

You can sign out at any time, remove Alvina Creation's access at myaccount.google.com/permissions, and ask us to delete your account data by emailing support@alvinailab.com.

4. Cookies and local storage

Essential storage is always on because Alvina Creation cannot work without it:

flix-auth (local storage): your Supabase sign-in session, removed when you sign out.
flix:* (local storage): playback preferences, watch progress, likes, guest list and your cookie choice.
flix:sid (session storage): the random per-tab analytics identifier, deleted when you close the tab.

Advertising cookies are set by Google (for example __gads, __gpi and cookies on doubleclick.net) only if advertising is enabled. If you choose "Essential only", we ask Google to serve non-personalised ads, which still use cookies for frequency capping, aggregated reporting and fraud prevention.

You can change your choice at any time with the Cookie preferences link in the footer, and you can block or delete cookies in your browser settings.

5. Third-party advertising

Alvina Creation may display ads served by Google AdSense.

Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this website or other websites.
Google's use of advertising cookies enables it and its partners to serve ads to you based on your visits to Alvina Creation and/or other sites on the Internet.
You may opt out of personalised advertising by visiting Google Ads Settings, or opt out of some third-party vendors' use of cookies at aboutads.info.
Learn more in How Google uses information from sites or apps that use its services.

6. Service providers

Supabase: authentication and database hosting.
Google: Sign-In, web fonts and, if enabled, AdSense.
Internet Archive and W3C: host the video files. Your browser streams directly from them, so they can see your IP address.
jsDelivr and cdnjs: deliver open-source scripts and icons.
Our hosting provider: runs the Alvina Creation servers and stores server logs.

These providers may process data outside your country. Where required, transfers are protected by standard contractual clauses or equivalent safeguards.

7. Data retention

Account, My List, viewing history and subscription data are kept while your account is active and deleted within 30 days of a verified deletion request. Server logs are kept for up to 30 days. Data in your browser stays until you clear it or sign out.

8. Your rights

Depending on where you live (including Bangladesh, the EU/UK under the GDPR and California under the CCPA/CPRA), you may have the right to access, correct, export or delete your personal data, to object to or restrict processing, and to withdraw consent. We do not sell personal information. To opt out of personalised advertising, choose "Essential only" in Cookie preferences. To exercise any right, email support@alvinailab.com. You may also complain to your local data protection authority.

9. Children

Alvina Creation is not directed to children under 13, and we do not knowingly collect personal data from them. If you believe a child has given us personal data, contact us and we will delete it.

10. Security

All traffic is encrypted with HTTPS, database access is restricted per user by row-level security, and we limit who can access production systems. No method of transmission or storage is completely secure, but we work to protect your data.

11. Changes and contact

We may update this policy and will change the date above when we do. Significant changes will be announced on the site. Questions? Email support@alvinailab.com.