Privacy Policy

Last updated: September 12, 2026

1. Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:
MyThirai
Stuttgart, Germany
Email: [enable JavaScript to see email]
Full contact details can be found in our Imprint.

2. General Information

Protecting your personal data is important to us. We treat your personal data confidentially and in accordance with the statutory data protection regulations (GDPR, German Federal Data Protection Act / BDSG) and this privacy policy.

3. Collection and Storage of Personal Data

a) When visiting the website
When you access this website, the browser on your device automatically sends information to our server. This information is temporarily stored in a so-called log file. The following data is collected without any action on your part and stored until it is automatically deleted:

  • IP address of the requesting device
  • Date and time of access
  • Name and URL of the file retrieved
  • Website from which access was made (referrer URL)
  • Browser used and, where applicable, the operating system of your device

This processing is carried out on the basis of Art. 6(1)(f) GDPR, arising from our legitimate interest in ensuring the smooth operation of our website and improving our service.

b) Contacting us
If you contact us by email, the data you provide (e.g. your email address and, where applicable, your name and phone number) is stored by us in order to process your inquiry. This data is deleted once storage is no longer necessary, or its processing is restricted if statutory retention obligations apply. The legal basis is Art. 6(1)(f) GDPR.

4. Cookies

This website may use cookies to enable certain functions (e.g. saving your language preference) and to make the site easier to use. Cookies are small text files stored on your device. You can configure your browser to notify you when cookies are set, to allow cookies only in individual cases, or to reject them generally. Disabling cookies may limit the functionality of this website.

When you respond to our cookie consent banner, we also record an anonymous, aggregate count of how many visitors accepted or declined (e.g. "42 accepted today"). This count is not linked to your IP address, device, or any other identifier, and is used solely on the basis of our legitimate interest pursuant to Art. 6(1)(f) GDPR in understanding how our consent banner is being used.

5. Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Analytics uses cookies and similar technologies that enable an analysis of your use of the website. The information generated (including your IP address, which is collected in a truncated/pseudonymized form via IP anonymization) is transmitted to and stored by Google on servers, which may include servers located in the United States.

Google uses this information on our behalf to evaluate your use of the website, to compile reports on website activity, and to provide us with other services relating to website and internet usage. Google may also transfer this information to third parties if required to do so by law, or where such third parties process the data on Google's behalf.

This processing is carried out on the basis of your consent pursuant to Art. 6(1)(a) GDPR. You can withdraw your consent at any time with effect for the future via the "Cookie Settings" link in the website footer, or by preventing the storage of cookies through your browser settings. You can also prevent Google from collecting and processing data generated by cookies and related to your use of the website (including your IP address) by downloading and installing the browser plug-in available at: https://tools.google.com/dlpage/gaoptout.

Further information on Google's data processing can be found in Google's privacy policy: https://policies.google.com/privacy.

6. Google Fonts

This website uses "Google Fonts" for the uniform display of fonts, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). When you visit a page on this website, your browser loads the required fonts directly from Google's servers, which involves transmitting your IP address to Google. Google does not store this data for any purpose other than delivering the fonts, and Google Fonts does not set cookies for this purpose.

This processing is carried out on the basis of our legitimate interest pursuant to Art. 6(1)(f) GDPR in a technically secure, maintenance-free, and efficient presentation of our website. Further information on Google Fonts can be found at https://developers.google.com/fonts/faq and in Google's privacy policy: https://policies.google.com/privacy.

7. Movie Ratings (Firebase / Google Cloud Firestore)

On movie pages, we offer a star-rating feature powered by Firebase Cloud Firestore, a database service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). When you submit a rating, your browser connects directly to Google's servers and stores the rating value together with the relevant movie and a randomly generated device identifier that we save in your browser's local storage so we can recognize and display your own rating on a later visit. This identifier is not linked to your name, email address, or any other information that would directly identify you.

This processing is carried out on the basis of our legitimate interest pursuant to Art. 6(1)(f) GDPR in providing this interactive feature. As with any Google service, this may involve a transfer of your IP address to Google servers, including servers located outside the EU/EEA. Further information can be found in Google's privacy policy: https://policies.google.com/privacy.

8. Location Data (Nearby Showtimes)

To show you cinemas and showtimes near you, this website may ask your browser for permission to access your device's location, using the standard geolocation prompt built into your browser. We only request this if you have not already made a choice, and your browser always asks for your explicit permission before sharing any location data with us — you may deny this request at any time without losing access to the rest of the website.

If you grant permission, your coordinates are used solely on your own device, in your browser, to sort and filter showtimes by distance. We do not transmit your location to our servers, store it permanently, or share it with any third party, including Google Analytics. Your coordinates are kept only temporarily in your browser's session storage and are automatically deleted once you close the browser tab.

The legal basis for this processing is your consent pursuant to Art. 6(1)(a) GDPR, given through your browser's permission prompt. You can withdraw this consent at any time via your browser's site settings.

9. Newsletter

If you subscribe to our newsletter via the form in the website footer, the email address you provide is transmitted to and stored by our newsletter service provider, CleverReach GmbH & Co. KG, Schafjückenweg 2, 26180 Rastede, Germany ("CleverReach"), which sends the newsletter on our behalf. We have concluded a data processing agreement with CleverReach pursuant to Art. 28 GDPR.

We use the double opt-in procedure: after submitting the form, you will receive a confirmation email with a link. Your email address is only added to our mailing list once you click this link. This is done to verify that you are the actual owner of the email address and genuinely wish to receive the newsletter. We record the time of registration and confirmation for evidence purposes.

The legal basis for this processing is your consent pursuant to Art. 6(1)(a) GDPR. You may withdraw your consent and unsubscribe at any time, either via the unsubscribe link contained in every newsletter email or by contacting us using the details in Section 1. The lawfulness of processing carried out prior to withdrawal remains unaffected. Your data will be deleted from the mailing list once you unsubscribe, unless further storage is required to comply with statutory retention obligations.

Further information on how CleverReach processes data can be found in its privacy policy: https://www.cleverreach.com/en/privacy-policy/.

10. WhatsApp Channel

We operate a WhatsApp Channel, which you may follow voluntarily to receive one-way broadcast updates from us (e.g. showtimes and event announcements). WhatsApp Channels are provided by WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, part of the Meta group ("WhatsApp"/"Meta").

Following our channel takes place entirely within the WhatsApp app and is governed by WhatsApp's own privacy policy and terms. According to WhatsApp, channel admins (including us) cannot see the phone number, profile photo, or "About" information of anyone who follows the channel, and followers are not visible to each other. We only see an aggregate follower count. We do not receive, collect, or store any personal data about you as a result of you following our channel.

WhatsApp itself, as the provider of the app, processes data relating to your use of WhatsApp (e.g. your phone number, device information) in accordance with its own privacy policy, available at: https://www.whatsapp.com/legal/privacy-policy. This processing is outside our control and responsibility.

11. Embedded Third-Party Content (e.g. YouTube, Social Media)

This website may embed third-party content, such as videos from YouTube or links to social media platforms (Facebook, Instagram, X/Twitter). Accessing such content may establish a connection to the respective provider's servers, allowing the provider to obtain your IP address and potentially other data. For information on how these providers process data, please refer to their respective privacy policies.

12. Content Sources

a) Movie Posters and Artwork (TMDB)
Movie posters, artwork, and related metadata displayed on this website and in our app are provided by The Movie Database (TMDB). This product uses the TMDB API but is not endorsed or certified by TMDB. No personal data is exchanged with TMDB as part of this integration; only publicly available movie metadata is retrieved. Further information: https://www.themoviedb.org/privacy-policy.

b) Trailers (YouTube)
Where we show movie or event trailers, we embed the official YouTube player rather than hosting or re-uploading any video file ourselves. Playback is served directly from YouTube/Google; see Section 11 above and YouTube's own terms for details.

c) Showtimes and Event Listings
Cinema showtimes and event details shown on this website and in our app are sourced directly from the respective cinemas, film distributors, and event organizers, and are sometimes compiled and entered by us manually from information they provide. We do not stream, host, or provide access to any film or event content itself — we only publish schedule and listing information to help our community find where and when to watch or attend.

13. Our Mobile App

We also offer a mobile app ("mythirai App") for Android and iOS. When you use the app, the following additional data processing takes place, on top of anything already described above that also applies to the app (e.g. Firestore-based movie ratings).

a) Firebase Analytics
The app uses Firebase Analytics, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"), to understand how the app is used. This includes events such as screen views, app opens, content selected (e.g. movies, events, trailers), searches performed, ratings submitted, calendar entries added, and content shared, together with technical identifiers such as your app instance ID. This data may be processed on Google's servers, including outside the EU/EEA. This processing is carried out on the basis of our legitimate interest pursuant to Art. 6(1)(f) GDPR in understanding and improving the app. Further information can be found in Google's privacy policy: https://policies.google.com/privacy.

b) Push Notifications
If you allow it, the app registers a device push token with Apple/Google's push notification services and with Firebase, so that we can send you notifications (e.g. about showtimes or events). The push token is a technical identifier for your device/app installation and is not linked to your name or other identifying information. You can disable push notifications at any time in your device's system settings. The legal basis is your consent pursuant to Art. 6(1)(a) GDPR, given via the notification permission prompt.

c) Location
If you grant permission, the app accesses your device's precise GPS location to show cinemas and showtimes near you. Your coordinates are sent to a third-party service, OpenStreetMap's Nominatim API, in order to translate them into a city name; they are otherwise processed only on your device to sort and filter results by distance and are not stored by us. The legal basis is your consent pursuant to Art. 6(1)(a) GDPR, given via your device's location permission prompt, which you can withdraw at any time in your device settings.

d) Movie Ratings and Device Identifier
The app's star-rating feature uses a device identifier obtained from your operating system to store and recognize your rating in Firebase Cloud Firestore, in the same way described in Section 7 above for the website. This identifier is not linked to your name, email address, or any other information that would directly identify you.

e) Calendar Access
If you choose to add a showtime or event to your calendar, the app requests permission to write that single entry to your device's calendar. We do not otherwise read or access your calendar data. The legal basis is your consent pursuant to Art. 6(1)(a) GDPR, given via your device's calendar permission prompt.

f) Sharing
If you use the app's share function, your device's native share sheet is opened, allowing you to send movie or event details to an app of your choice (e.g. messaging or social media apps). This is handled entirely by your device's operating system; we do not receive any information about what you share or with whom.

14. Your Rights

You have the right at any time to:

  • request information about the personal data we process about you pursuant to Art. 15 GDPR,
  • request the correction of inaccurate data pursuant to Art. 16 GDPR,
  • request the deletion of your data stored with us pursuant to Art. 17 GDPR,
  • request the restriction of processing pursuant to Art. 18 GDPR,
  • receive your data in a portable format pursuant to Art. 20 GDPR,
  • withdraw any consent given at any time pursuant to Art. 7(3) GDPR,
  • object to the processing of your personal data pursuant to Art. 21 GDPR,
  • lodge a complaint with a supervisory authority pursuant to Art. 77 GDPR.

15. Data Security

We take appropriate technical and organizational security measures to protect your data against loss, misuse, and unauthorized access.

16. Changes to This Privacy Policy

We reserve the right to amend this privacy policy to ensure it always complies with current legal requirements, or to reflect changes to our services. The revised policy will apply on your next visit.