Privacy
The air-gapped pledge.
Kino is built so the AI never has to know what you watch. By default, your viewing habits, library scans, and household conversations don't leave the box. Here's exactly what does and doesn't.
The default is silence.
Out of the box, the only outbound network traffic from your Kino is a daily HTTPS HEAD to check for OTA updates. You can disable that in Settings → Privacy → Updates. Everything else — Qwen3-7B inference, semantic search, metadata scraping, subtitle translation, upscaling — runs entirely on the device's NPU.
Contents
1. What stays on the box
The following is processed locally by the on-device AI engine. None of it is transmitted to Kino, our servers, or any third party.
- Your media library inventory (Plex, Jellyfin, Emby, Kodi, NAS file paths)
- Your streaming-service login state (encrypted in each app's own store)
- Voice queries to the assistant (transcription & LLM inference both on-device)
- Viewing history and "continue watching" state
- Metadata scraping caches (TMDb, IMDb, Letterboxd, AniDB, MusicBrainz)
- Subtitle files and AI-translated subtitle outputs
- Upscaled frames produced by the SR-INT4 model
If you pull the ethernet cable, all of the above keeps working. That is the design.
2. What leaves the box (and when)
There are exactly three categories of outbound traffic, each disclosed and controllable:
| Category | Frequency | Disclosed | Off switch |
|---|---|---|---|
OTA update check (HEAD only) | Daily | Yes | Settings → Privacy → Updates |
| Crash report (opt-in only) | On crash, with prompt | Yes | Off by default |
| Streaming-service traffic | While playing | Yes — direct to provider | By using each service |
That is the complete list. We publish a quarterly transparency report at kino.prizmox.com/transparency listing every outbound packet category with byte counts.
3. Email collection (this site)
If you reserve a unit on this site, we collect your email address. We use it for exactly three things: confirming your reservation, telling you when shipping opens, and sending OTA notes after launch. We do not sell, share, or rent it.
The waitlist email is stored in our reservation database (Cloudflare D1, hosted in the closest region to you). When you receive your unit, the email is no longer needed; you can request deletion at any time.
UTM tracking on this site
We capture UTM parameters from ad campaigns (utm_source, utm_medium, utm_campaign, utm_content, utm_term) and a session ID, stored in your browser's sessionStorage (cleared when you close the tab). This is used solely to attribute which campaign reached you, not to track you elsewhere.
4. Third-party services
This website uses the following third-party services. Your Kino device, once shipped, will not.
- Cloudflare Pages — hosts this site. Receives standard request logs (IP, user-agent, page).
- Cloudflare D1 — stores waitlist emails and event analytics keyed by your session.
- Meta Pixel (Facebook) — fires
PageViewandLeadevents for ad attribution. Set in our pixel ID1010088628028812. Required for paid ad reporting; you can block it via tracker-blocker extensions and the page still functions. - Google Fonts — serves the Geist typeface. Receives request IP for font caching only.
The Kino device itself integrates with streaming services (Netflix, Disney+, etc.) and metadata providers (TMDb, IMDb, etc.) only when you explicitly add them. Each service receives its own traffic, governed by its own privacy policy. Kino does not aggregate or proxy this traffic.
5. Cookies & tracking on this site
This site uses no first-party cookies. It uses sessionStorage (cleared at tab close) for UTM and session ID. Meta Pixel sets a third-party cookie (_fbp) under Facebook's domain — see Facebook's policy.
We do not use Google Analytics, Hotjar, Mixpanel, Segment, or any session-replay tool. We do not fingerprint your browser.
6. Data retention & deletion
Waitlist emails are retained until you receive your unit (then archived for 12 months for warranty service) or until you request deletion. Event analytics is retained for 90 days at session granularity, then aggregated to anonymized weekly counts.
To request deletion of your email or event data, write hello@kino.prizmox.com. We will action requests within 30 days; in many cases within 24 hours.
7. Children's privacy
Kino is not designed for or marketed to children under 13. We do not knowingly collect personal information from children. If you believe a child has submitted information to this site, write us and we will delete it.
8. Changes to this policy
If we materially change what data leaves the device or how we handle waitlist emails, we will email everyone on the waitlist before the change takes effect, and update the "Last revised" stamp below. Minor wording changes are reflected in the stamp without notification.
9. Contact
For privacy questions, transparency-report archives, or deletion requests:
- Email — hello@kino.prizmox.com
- Public bug tracker — opens at launch (Q3 2026)
- Transparency reports —
kino.prizmox.com/transparencyfrom launch onward
— Last revised 02.05.2026 · v0 pre-launch · This policy will be re-issued at v1 launch with the device-side specifics finalized.