Privacy policy

Draft for Bamboo’s review · September 22, 2026

Age verification

AgeVerif performs the check in a separate window. Xfinters retains the result, date, original provider expiry, minimum age confirmed and a protected reference. We do not receive your selfie, identity document or date of birth.

A necessary cookie links the check to your browser for ten minutes. Temporary records use protected references rather than your email address and are removed by scheduled cleanup after expiry. The completed verification remains linked to your account; the original provider expiry is retained as a record and does not trigger another age check. When you open AgeVerif, its own privacy and cookie policies apply: AgeVerif privacy policy.

Bamboo Producciones S.A.S., Colombia, is responsible for processing Xfinters users’ personal data. This policy explains what the site collects during its catalogue and pre-registration stage.

Data we use and why

Your email address and a password stored in a form that cannot be read directly, to create and protect your account, confirm your email and recover access.
Your declaration that you are an adult, the date and version of accepted terms, and your choice about news emails, to keep a record of your decisions. Your chosen email language is also saved.
Trailer playback data, such as the file, start and pause times and observed viewing time, to understand usage and detect problems. If you are signed in, we associate playback with your account so authorized administrators can review the film, content type and account email. Without signing in, we record an anonymous visit that can only play trailers. These records are not a calculation of payments.
Technical failure information to correct errors. Filters exclude email addresses, passwords and playback details from reports sent to Sentry.

Form security

We use Cloudflare Turnstile to protect registration, sign-in and account recovery against automated requests. When you open these forms, your browser connects to Cloudflare for a security check under its privacy policy.

Google sign-in

If you choose to continue with Google, we receive your email address and account identifier to link it to Xfinters Films. We store these two details in the Supabase database to recognize your account when you return. We do not store your Google name or photo, or request access to Gmail, contacts, files or your date of birth.

We use these details to manage and protect your access. Your email also lets us send account messages and any news you have opted into. We do not sell Google data or use it for personalized advertising. Render and Supabase process it to operate the site; Mailjet receives the email address needed to deliver those messages. Deleting your account removes its Google link. A minimal record of the administrative action may be retained for security and handling requests.

Google does not replace age verification. A temporary cookie lasting up to 30 minutes protects this process. Opening this option connects your browser to Google, which handles data under its privacy policy.

Emails and your preferences

We send essential account messages, such as confirmation and password recovery. News about releases and subscriptions is optional. You can withdraw this permission and change your email language in My account without losing catalogue access.

Cookies and service providers

The site saves your adult confirmation for 24 hours. When you log in, a cookie maintains access for up to two hours. The player uses temporary identifiers to record a playback session. Personalized advertising is not enabled at this stage.

Render hosts the application; Supabase stores its data; Bunny stores and delivers images and videos; Sentry helps identify failures. These providers may process data outside Colombia. When a trailer loads, your browser connects to Bunny and shares necessary technical data, such as your IP address.

Mailjet delivers account emails and receives the data needed to send them, such as the destination address and requested message. We do not track opens or clicks in these emails.

Optional website analytics

Google Analytics is prepared but collection is currently paused. When enabled, it will load only if you allow it in Cookie preferences. You can decline or withdraw permission through the footer without losing access. Your choice is stored in this browser for up to 180 days and is separate from the adult declaration, age verification and news emails.

With consent, Google receives a browser identifier, technical information and general page and registration events to help us understand traffic sources and improve the site. Analytics cookies last up to 180 days. We exclude account identifiers, email addresses, verification results, film titles and individual playback details, and remove unapproved URL parameters. Advertising personalization is disabled. Administration, account maintenance, password recovery and film playback pages are excluded.

Google may process this information outside Colombia. Read how Google uses information from sites that use its services. Declining prevents our Analytics tag from loading. Withdrawal stops further collection and removes its cookies; it does not automatically erase data already received by Google. Bamboo must confirm the Analytics retention settings before launch.

Retention and requests

Information is retained for as long as needed to manage accounts, provide the service, respond to requests and meet applicable obligations. Bamboo must confirm retention periods before public registration opens.

You can request access to, updates or corrections to your data; ask how it is used; request proof of your consent; or request deletion and withdraw consent where applicable. Privacy contact: privacy@xfinters.net.

To protect your information, Bamboo may need to confirm your identity before responding. Do not send passwords or identity documents through unconfirmed channels.