Your privacy matters. Flixio is designed to respect your data and your freedom. The short version: we don't collect personal data, we don't run accounts, and we don't sell anything to anyone. The long version is below.

1. Overview

This Privacy Policy explains what information Flixio ("we", "us", "our") collects, why, and how we handle it. It applies to the website at flixio.app and all its language subdomains (e.g. es.flixio.app, fr.flixio.app).

By using Flixio, you agree to the practices described in this policy. If you do not agree, please discontinue use of the site.

2. Information we collect

We collect almost nothing about you. Specifically:

• Account data: none. We don't have accounts.
• Name, email, phone: none. We don't ask.
• Payment data: none. The service is free and has no paid features.
• Viewing history: not tracked. We don't log which movies you watch.
• Precise location: not collected. We see only the country your IP resolves to, and only for the brief moment an HTTP request is in flight.

Information we do receive, automatically, every time you load a page:

• Your IP address (transient — discarded by us once the request completes)
• User-agent string (browser, OS version)
• Referer header (the page you came from, if any)
• Requested URL and HTTP status

3. Cookies & local storage

Flixio uses the minimum storage necessary to make the site work. Specifically:

Cookies we set

• lang — remembers your language preference (e.g. es). Expiry: 365 days. Same-site: Lax. Secure-flag: depends on the connection used to set it. This cookie contains no personal data and cannot identify you across sites.

Local storage we use

• flixio-theme — remembers your light/dark theme preference. Stored on your device only; never sent to our servers.

Cookies we do not set

We do not use analytics cookies, advertising cookies, retargeting pixels, or any third-party tracking cookies. We do not embed Facebook, Google Ads, TikTok, or any other ad-tech.

4. Server logs & hosting

Like every web server, the infrastructure that runs Flixio temporarily writes request logs (IP, user-agent, URL, status code, timestamp). These logs are used for:

• Abuse detection and rate-limiting (e.g. blocking scrapers, DDoS mitigation)
• Debugging errors and outages
• Aggregate, non-identifying traffic statistics (e.g. "Spain has 12% of traffic this month")

Logs are rotated and purged on a rolling 30-day basis. They are never sold, never shared with advertisers, and never linked to a personal profile.

5. Third-party services

Flixio embeds content from one third party. When you press play, your browser connects directly to that provider — not through our servers.

YouTube / Google

All video playback is handled by YouTube (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland). When you click play on a movie, YouTube may:

• Set its own cookies and read existing ones
• Collect your IP, user-agent, and viewing behavior
• Show advertising on or around the player (for monetized uploads)
• Combine this data with your Google account if you are signed in

Flixio has no visibility into, and no control over, what YouTube collects when its player is loaded. We use YouTube's "nocookie" embed mode where supported to minimize data sharing before playback starts. For full details, see Google's Privacy Policy.

Fonts

The site loads the Inter font family from Google Fonts. Google may receive a request containing your IP. To avoid this, you can use a browser extension that blocks third-party requests (e.g. uBlock Origin) — the site falls back to a system font automatically.

6. Analytics

Flixio does not use Google Analytics, Plausible, Fathom, Matomo, or any other analytics platform. We do not count unique visitors. We do not build user profiles. We do not A/B test you.

7. Children's privacy

Flixio is not directed at children under 13 (or under the relevant age in your jurisdiction, such as 16 in the EU/UK). We do not knowingly collect personal information from children. All content on Flixio is publicly available on YouTube with age-gating handled by YouTube itself.

If you believe a child has submitted personal information to us (for example, through a contact form), please write to info@flixio.app and we will delete it promptly.

8. Your rights (GDPR / CCPA)

Depending on where you live, you may have the following rights regarding your personal data:

If you are in the EU, UK, EEA, or Switzerland (GDPR / UK-GDPR)

• Right of access — request a copy of the personal data we hold about you (we hold essentially none)
• Right to rectification — correct inaccurate data
• Right to erasure ("right to be forgotten") — request deletion
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to lodge a complaint with your local data protection authority

If you are in California (CCPA / CPRA)

• Right to know what personal data is collected (we collect effectively none)
• Right to delete personal data
• Right to opt out of sale or sharing — we do not sell or share personal data
• Right to non-discrimination for exercising your rights

How to exercise these rights

Email info@flixio.app from the address you want verified. We respond within 30 days. There is no fee. Since we don't hold personal data, most requests will result in us confirming that nothing is held.

9. Data retention

We retain the absolute minimum for the shortest time possible:

• Server logs: rolling 30 days, then deleted
• Language cookie: 365 days, or until you clear cookies
• Theme preference (local storage): until you clear site data
• Email correspondence: up to 24 months, then deleted, unless required to keep for legal reasons

10. Security

Flixio is served over HTTPS only. We use HSTS, modern TLS (1.2+), and a strict Content-Security-Policy. We do not store user passwords (there are no accounts). We do not store payment data (there are no payments). Our attack surface is therefore extremely small.

No system is 100% secure. If you discover a security issue, please report it responsibly to info@flixio.app with the subject line "Security". We will acknowledge within 72 hours.

11. International transfers

Flixio's servers are located in the European Union. If you access the site from outside the EEA, your data may be transferred to and processed in the EU. YouTube/Google, when you play a video, will process data according to their own policies in their own jurisdictions.

12. Changes to this policy

We may update this policy from time to time. When we do, we will change the "Last updated" date below. If the changes are material, we will display a banner on the homepage for at least 14 days. Continued use of Flixio after a change indicates acceptance of the new policy.

13. Contact us

For any privacy-related question, write to info@flixio.app. See the Contact page for the full list of ways to reach us.

Last updated: July 2026