← Back to showtimes

Privacy Policy

Last updated: October 2026

What CinemaTimes is

CinemaTimes is a free website that helps you find cinema showtimes in Ireland, the United Kingdom, Australia and New Zealand (listings for the Netherlands, Portugal, Sweden, Poland, Italy, France, Germany, Belgium and Spain are paused since October 2026). We show screening times, movie info, and links to book tickets at your local cinema. More about who we are and how the data works is on the about and methodology pages.

Who we are

CinemaTimes is operated by Fuzzy Tech Limited, a company registered in Ireland (company number 812524). We're the data controller responsible for this website under EU GDPR and UK GDPR. You can reach us any time at [email protected] for data-protection questions or to exercise the rights listed below.

What we collect

We keep data collection to an absolute minimum. Here's what happens when you use CinemaTimes — with the legal basis under GDPR Article 6 in brackets:

  • Your location preference — When you choose a city (e.g. Dublin, London, Cork), we save it in your browser's local storage so you don't have to pick it again. This stays on your device and is never sent to us. (No legal basis required — processing happens solely on your device.)
  • Location search — If you search for a location, your search text and IP are sent to the Google Places API and/or OpenStreetMap's Nominatim service so they can return matching places. If you grant browser location access, your coordinates are sent to Nominatim to work out which area you're in; the coordinates themselves stay on your device. (Legitimate interest — Article 6(1)(f).)
  • Basic analytics — We use Plausible Analytics, a privacy-friendly service that counts page views without using cookies or collecting personal data. Plausible is EU-hosted. (Legitimate interest — Article 6(1)(f); aggregated, non-identifying data only.)
  • Your email address, if you sign up for the weekly email. We keep your email address, the city you picked, and the cinema or film page you signed up from, so the email can put what you care about first. Signing up is your consent, and we keep a record of it: the time, the page and your browser type. Every email has a one-tap unsubscribe, and if someone signs you up without asking, one tap removes your address. (Consent, Article 6(1)(a).)

What we don't collect

  • No accounts or logins
  • No email address, unless you sign up for the weekly email
  • No cookies
  • No personal profiles
  • No advertising or tracking pixels

Third-party services

CinemaTimes uses a few external services to run:

  • Google Places API — Powers location search. Google's privacy policy
  • OpenStreetMap Nominatim — Also powers location search and turns GPS coordinates into an area name when you grant location access. Operated by the OpenStreetMap Foundation (EU/UK-based). OSMF's privacy policy
  • Plausible Analytics — Privacy-first analytics, no cookies, EU-hosted. Plausible's data policy
  • Cloudflare: Sits in front of the site. Every request, including a weekly-email signup, passes through it on the way to us.
  • Vercel — Hosts the website. Your IP and basic request metadata (URL, user-agent) pass through Vercel to serve each page. Vercel also forwards weekly-email signups to our database host. Vercel's privacy policy
  • Resend: Sends the weekly email. It receives your email address and the email itself, and nothing else. Resend's privacy policy
  • Supabase — Hosts our cinema and showtime data, in Ireland (EU). If you sign up for the weekly email, it also holds your email address, the details listed under "What we collect" and your consent record.

When you click "Book" on a showtime, you're taken directly to the cinema's own booking website. That cinema's privacy policy applies from that point.

Where your data goes

We don't hold user accounts or profiles. If you sign up for the weekly email, we store your email address in the EU (Supabase, Ireland). A few of the services above do process data outside the EEA/UK — where they do, they rely on Standard Contractual Clauses (SCCs) as the legal transfer mechanism under UK GDPR Article 46 / EU GDPR Article 46:

  • Google (US) — Your location search text and IP reach Google servers in the US under Google's SCCs.
  • Cloudflare (US): If you sign up for the weekly email, your signup passes through Cloudflare's network on its way to us, under Cloudflare's Standard Contractual Clauses.
  • Vercel (US) — Our hosting provider serves pages from globally distributed edge nodes, some in the US, under Vercel's SCCs.
  • Resend (US): If you sign up for the weekly email, Resend processes your email address to deliver it, under Resend's Standard Contractual Clauses.
  • Plausible (EU) — EU-hosted; no transfer occurs.
  • Web fonts — We self-host our fonts from our own domain, so no third-party CDN is involved in font loading.

How long we keep data

  • Location preference — Stored in your browser's local storage until you clear it; we never see it.
  • Plausible analytics — Aggregated, non-identifying page counts retained indefinitely.
  • Server logs — Vercel's standard retention (short-window edge logs, a few days of build logs). No identifying personal data is retained by us.
  • Weekly email: We keep your email address until you unsubscribe. Ninety days after you unsubscribe, we delete your email address and keep only a hashed version of it, with the city and the dates of your signup, so we never email you again by mistake.

Local storage

We use your browser's local storage (not cookies) to remember your location preference. This data never leaves your device. You can clear it at any time by:

  1. Opening your browser's developer tools (F12)
  2. Going to Application > Local Storage
  3. Deleting entries starting with cinematimes_location_state (one per country you've used, e.g. cinematimes_location_state_ie, cinematimes_location_state_uk, cinematimes_location_state_fr and so on)

Or simply use your browser's "Clear site data" option.

If you sign up for the weekly email, we also save a small note called ct_newsletter so we stop showing you the signup form for 90 days. It holds only the date you signed up and never leaves your device.

Your rights

Under GDPR (both EU and UK), you have the right to:

  • Access — Ask what data we hold about you (in practice, nothing, unless you signed up for the weekly email).
  • Deletion — Ask us to delete any data relating to you.
  • Object — Object to processing that relies on our legitimate interest (Article 21), including the Plausible analytics and Google Places query flow.
  • Withdraw consent — Where we rely on your consent (for example, if you grant browser location access), you can withdraw it at any time through your browser settings; we stop processing on withdrawal. For the weekly email, use the one-tap unsubscribe link in any email, or write to [email protected].
  • Complaint — Lodge a complaint with the Irish Data Protection Commission (our lead supervisory authority), the Information Commissioner's Office (UK), or your own country's data protection authority anywhere in the EU.

UK and Northern Ireland users

If you access CinemaTimes from the UK (including Northern Ireland), your rights are governed by UK GDPR and PECR rather than EU GDPR. Both regimes apply equivalent rights, and the Information Commissioner's Office (ICO) linked above is the appropriate regulator for any concerns.

Children

CinemaTimes is a general-audience site. We don't knowingly process personal data from anyone under 13, and we don't offer accounts or profiles. The only personal data we hold is for the weekly email: the address, the city, cinemas and films it was signed up for, and the consent record. We mention this explicitly in line with the ICO's Age Appropriate Design Code.

The weekly email is for people aged 16 and over. If you are younger, please don't sign up.

Contact

Email us at [email protected] with any privacy questions or to make a data-subject request. We aim to respond to all requests within 30 days, as required by GDPR Article 12(3).

Changes

If we make significant changes to this policy, we'll update the date at the top of this page.