Legal

Privacy Policy

Last updated: September 11, 2026

This Privacy Policy explains how personal data is processed when you use the website Donno.io (the "Site"). The Site is operated by the team behind Donno ("Donno", "we", "us", or "our"), based in Barcelona, Spain.

It should be read together with our Terms of Use. If you do not want your data processed as described here, do not use the Site.

1. Who is responsible

We are the controller of the personal data described in this Policy. Contact: hello@donno.io.

2. What we collect

You can use the Site without an account. We do not ask for your name, email, or payment details.

Information you provide

Search prompts and filters (for example genre, region, time period, or free text), so we can return recommendations.

Information collected when you visit

When you use the Site, we may collect:

  • IP address and approximate country derived from it;
  • browser and device information, language, and time of the visit;
  • a device identifier derived from standard technical properties of your browser (this is not a unique ID of a person: many devices look the same, and the same device can look different if settings change).

We do not collect precise geolocation, payment data, or a user profile.

3. Why we use this data, and on what basis

PurposeDataLegal basis
Search and recommendationsPrompts, filters, and visit data needed to run the SiteNecessary to provide the Site
Security and more relevant resultsIP address, approximate country, browser/device information, languageOur legitimate interests

We do not sell your data. We do not use it for advertising. We do not build marketing profiles.

Where we rely on legitimate interests, you may object by emailing hello@donno.io. Search and visit data needed to run the Site cannot be switched off while you use it.

4. Cookies

We do not currently set cookies.

Some information is stored in your browser only for the current visit, so the Site can remember your search and keep working. That storage is strictly necessary for the Site.

If we later add cookies, an account, or non-essential analytics, we will update this Policy first and, where the law requires it, ask for your consent.

5. Who we share data with

We do not share a user profile with film catalogs.

We use service providers who process data only on our instructions, including:

  • infrastructure providers (hosting, database, and file storage);
  • AI infrastructure used to turn a search prompt into a recommendation.

We may also disclose data if required by law, or to protect the Site against abuse.

6. Transfers outside the EEA

Some service providers may process data outside the European Economic Area. Where that happens, we use safeguards recognised under the GDPR, such as the European Commission's Standard Contractual Clauses, unless the destination is covered by an adequacy decision.

7. How long we keep data

We keep this information only as long as needed for the purposes in Section 3, and no longer than 24 months, unless we must keep it longer to deal with abuse, a legal claim, or a legal obligation.

Closing the tab or clearing site data removes what is stored in your browser. It does not by itself delete the copy already stored on our servers. To request deletion, use Section 9.

8. Security

We take reasonable measures to protect personal data. No transmission over the internet is completely secure, and we cannot guarantee that unauthorised access will never occur.

9. Your rights

If you are in the EEA, you can ask us to: access your personal data; correct it; delete it; export it; restrict certain processing; or object to processing based on legitimate interests.

Because the Site has no account, we may need enough information to find your records (for example when you used the Site, and if possible an IP address from that visit). Email hello@donno.io. We will respond within the time required by law.

You can also lodge a complaint with the Spanish data protection authority (AEPD) or with the authority in your country of residence.

10. Automated recommendations

The Site uses AI to suggest films. This is not automated decision-making with legal or similarly significant effects about you. You can ignore a recommendation or try another search.

11. Changes

We may update this Policy. We will change the "Last updated" date. If we start collecting a new category of personal data, we will update this Policy before that collection starts.

12. Contact