Privacy Policy

The data controller is [COMPANY_LEGAL_NAME], operating Movie Gress, based in Bangladesh. Registered address: [REGISTERED_ADDRESS]. Privacy contact: [DPO_OR_PRIVACY_CONTACT] (or [SUPPORT_EMAIL]).

• Account data — email, name, password hash (we never store your plain password), and basic Google profile details if you use Continue with Google.
• Profile data — profile names, avatar choices, Kids mode flags.
• Watch history & progress — what you watch and where you left off (when Watch history cookies / consent allow it for the relevant features).
• Device & log data — browser type, approximate IP, and technical logs needed to run and secure the service.
• Cookie & consent data — your cookie choices and necessary session cookies.
• Support messages — what you send us when you ask for help.
• Payment status — when paid plans launch, we may store plan and subscription status. Full card details are handled by [PAYMENT_PARTNER] and are not stored by us on our servers.

We use personal data to:

• Provide streaming, accounts, and profiles
• Power Continue Watching and recommendations (with history consent where required)
• Secure the service and prevent abuse
• Respond to support requests
• Run first-party analytics if you allow Analytics cookies
• Meet legal obligations

We rely on: (a) your consent (for example optional cookies); (b) performance of a contract (providing the service you asked for); (c) legitimate interests such as security and improving the library, balanced against your rights; and (d) legal obligations where they apply. You can withdraw cookie consent anytime via Cookie settings.

We share data only as needed with:

• Google — if you use Google sign-in
• Hosting and infrastructure providers (for example our app host and database provider)
• Video streaming / CDN providers that deliver playback
• Catalog metadata / image providers used to show posters and titles
• First-party analytics processed on our systems (not sold to ad networks)
• [PAYMENT_PARTNER] — when paid plans launch
• Authorities when required by law

We do not sell your personal data.

Necessary cookies (sign-in, security, remembering this consent, guest preview limits) always run. Optional categories — Preferences, Watch history, Analytics, and Advertising — are off until you accept them. We do not currently show ads or load third-party advertising trackers. Open Cookie settings anytime to Accept all, Reject optional, or Save my choices. Details are also in the settings panel.

We keep account and profile data while your account is active. After you close your account, we delete or anonymise personal data within a reasonable period, except where we must keep records for security, disputes, or law. Watch progress and similar data follow the same approach. Exact retention windows for cancelled paid plans: kept for [X] days after cancellation (to be confirmed when plans launch).

We use industry-common safeguards such as encrypted connections (HTTPS), hashed passwords, access controls for admin tools, and careful handling of session cookies. No method of transmission or storage is perfectly secure.

Our providers may process data outside Bangladesh (for example hosting, database, auth, or CDN regions). Where that happens, we rely on appropriate contractual and technical safeguards offered by those providers.

Depending on applicable law, you may ask to:

• Access your data
• Correct inaccurate data
• Delete your data
• Restrict or object to certain processing
• Withdraw consent
• Receive a copy of data you provided

Email [SUPPORT_EMAIL]. We aim to respond within [RESPONSE_TIME].

Movie Gress is not directed at children creating their own accounts. Minors should use the service with parental consent and Kids profiles where appropriate. We do not intentionally use Kids profiles for advertising or interest-based profiling. Parents can contact us to request deletion of a minor’s data.

If we become aware of a personal data breach that risks your rights, we will investigate, take steps to contain it, and notify affected users and authorities where required by law.

We may update this Privacy Policy. The “Last updated” date will change, and we will post the new version here. Material changes may also be announced on the site or by email.

Privacy questions: [DPO_OR_PRIVACY_CONTACT] or [SUPPORT_EMAIL]. See also Contact. You may also have the right to complain to a competent authority in Bangladesh [CONFIRM WITH LAWYER].