Privacy Policy
Last updated 23 October 2026
This Privacy Policy explains what Go4Play (beta.go4play.pk), run by Go4Play, collects when you use the site, why, and what you can ask us to do with it. We keep it short and use plain words.
What we collect
| What | When | Why |
|---|---|---|
| Guest ID (a random cookie) | Only when you use the site without an account and do something we must remember: play a title, add to My List, set a reminder, turn on notifications | To keep your progress, list and reminders on this browser |
| Account details: e-mail address, display name, password (stored only as a secure hash), Google account ID if you sign in with Google | When you create an account or sign in | To let you sign in and to contact you about your account |
| Profiles: names, avatars, Kids setting, maturity limit, profile PIN (stored as a hash) | When you set them up | To show the right titles to each person |
| Viewing activity: watch history, where you stopped, My List, reminders, notifications | While you watch | Continue Watching, recommendations on this site, reminders |
| Devices and sessions: browser and device type, IP address, sign-in time and last activity | When you sign in and while you watch | Security, the “Devices” page, limits on screens at once, stopping misuse |
| Playback logs: which file was played, how (direct or converted), amount of data sent, IP address | While you watch | Keeping the service working, bandwidth limits, fixing problems |
| Push notification subscription (from your browser) | Only if you turn on notifications | To send the notifications you asked for |
| Messages you send us | When you write to us | To answer you |
We do not sell your data, show ads or use third-party analytics or tracking.
Cookies and browser storage
We only use cookies the site needs to work:
| Cookie | Purpose | Lifetime |
|---|---|---|
sid / __Host-sid |
Keeps you signed in | Browser session, or 30 days with “Remember me” |
gid / __Host-gid |
Guest ID (see above) | Up to 1 year from your last visit |
did |
Recognises this browser in your device list | Up to 400 days |
mfa, mfa_trust |
Two-step sign-in for administrators | 10 minutes / 30 days |
g_state |
Protects the “Continue with Google” sign-in | 10 minutes |
The site also keeps a few settings in your browser’s local storage (player volume and subtitles, recent searches). They never leave your device.
Other services
- Images and titles: film and TV information and images come from TMDB. We copy the images to our own server, so your browser does not contact TMDB.
- Trailers are YouTube videos (privacy-enhanced mode). Trailer pictures load from YouTube when you open the trailers, and YouTube’s own privacy policy applies when you play one.
- Google sign-in (only if you use it): Google tells us your name, e-mail address and Google account ID.
- E-mail (password resets, confirmations, summaries) is sent through our e-mail provider.
- Push notifications go through your browser maker’s push service (for example Google or Mozilla).
How long we keep it
- Guest data: deleted after 180 days without a visit.
- Accounts, profiles and viewing activity: until you ask us to delete the account.
- Notifications: read ones after 30 days, all after 90 days (the administrator may set other periods).
- Server logs: about 14 days.
Your choices and rights
You can see and change your profiles, history, devices and notifications on the Account pages, remove titles from your history, and sign out of all devices. To get a copy of your data, correct it or delete your account, write to our contact page from the address of your account. We answer within 30 days.
Children
Accounts are for adults. Parents can make Kids profiles with a maturity limit and a PIN on their own profile. If you think a child gave us personal data, contact us and we will delete it.
Security
Passwords and PINs are stored only as hashes, connections use HTTPS, and administrators must use two-step sign-in. No system is perfectly safe; if something goes wrong that affects you, we will tell you.
Changes
If we change this policy we update the date at the top; for big changes we also tell signed-in users.
Contact
Go4Play · our contact page