Privacy policyプライバシー

• Username. Public: it is in your profile address (/u/your-name) and other signed-in people can find you by it. You can change it in Settings, up to three times in 30 days; your profile address changes with it and the old address stops working, and for 30 days nobody else can take your old username. Anilog keeps a record of each change (old name, new name, date) until you delete your account.
• Email address. Used to sign you in, confirm the address and reset your password. The address itself is never shown to other people.
• Password. Stored only as an Argon2id hash, which cannot be turned back into the password.
• Sign in with Google. If you use it, Google tells Anilog your Google account ID, email address and name. Anilog asks Google only for the basic sign-in scopes (openid, email, profile) and stores your Google account ID and email address. An account created this way is offered a username made from the part of your email address before the @ (without any +tag), which you can keep or change before you go on; either way it is public like any other. Google also knows that you signed in to Anilog, under Google’s own privacy policy.
• Settings. Title language, whether adult titles are shown, who can see your list, episode alerts, and whether you have seen the tour.

• Your list: titles, status, progress, scores, hype, priority and order, start and finish dates, rewatches, and notes.
• Your diary: the episodes and chapters you log, with dates, ratings and notes.
• Custom lists, cover picks, the franchises you follow, and recommendations you hide.
• Imports. A MyAnimeList import reads the export file you upload. An unapplied import preview is deleted within two days; an applied import is kept with your account, including what it imported.
• Reports. A problem you report about a title, or a report about another user, is kept with what you wrote, including after it has been dealt with.

• Your list follows your list visibility, set in Settings: Private (only you), Friends (people whose friend request you accepted, or who accepted yours), or Public (anyone, signed in or not). New accounts start on Friends.
• People who can see your list see your entries — status, progress, scores, dates, rewatches — and how many likes each has. Your notes stay private unless you share a note on a particular entry.
• Anyone who cannot see your list, including every signed-out visitor to a list that is not public, sees only your username.
• Year in review. A shared year opens for whoever can see your list, or for anyone holding its link when your list is not public. “New link” stops the old link working.
• Friends. A friend request needs accepting. Blocking someone hides each of your lists and activity from the other, though the person you blocked can still find your username in search. When somebody likes an entry you see a count, never who.
• Your email address is never shown to other people.

Anilog sends only account email: confirming your address and resetting your password, from no-reply@anilog.me. It sends no newsletters or marketing. Mail is delivered by Resend (resend.com), which handles your address and the message to deliver it. Anilog’s server log records each message sent, with the address and subject.

Notifications inside Anilog (friend requests, likes, news about franchises you follow, episode alerts) are stored with your account. They do not expire; they go when you delete your account, and some go earlier — for example when a friend request is withdrawn.

If you turn on browser notifications, your browser gives Anilog a push address at its maker’s push service (Google, Mozilla, Microsoft or Apple) and encryption keys, and Anilog stores them with your browser’s user-agent string. Each notification travels through that push service, encrypted. A subscription is removed when you turn it off in Settings, when the push service says it no longer exists, after 30 days of failed deliveries, or when your password is changed or reset.

• anilog_session keeps you signed in. It is only readable by the server, lasts 30 days from when you last used Anilog, and is required for signing in. The server stores only a hash of it.
• anilog_google_flow exists only for the few minutes of a Google sign-in, to check the sign-in finishes in the browser that started it.
• anilog-consent remembers your answer under Cookie choices, for 12 months.
• Google Analytics cookies (_ga and _ga_ followed by an ID) are set only when analytics cookies are allowed. See below.
• In your browser’s local storage, never sent anywhere: your light or dark theme, your title language while signed out, and a calendar display option.
• If you turn on browser notifications, Anilog installs a service worker that only receives and shows them. It caches nothing.

The website (not the apps) uses Google Analytics 4 to count visits and see which pages get used. Google receives the address and title of each page you view, the page you came from, your browser and device type, and your IP address, from which it works out a rough location. Anilog never sends Google your account ID, your username as a property of you, or your email address.

Besides page views, two things are counted: that an account was created (and whether with a password or with Google), and that an account added its first title to its list. Neither says who or which title, and both are sent only while analytics cookies are on.

Page addresses and titles are sent as they are, so viewing someone’s profile or shared year sends that page’s address and title, which contain their username. Addresses that carry a secret are kept from Google: on a page opened from an email confirmation link, a password reset link or a private year-in-review link, Analytics does not load at all, and a page reached from one of those has the secret removed from the “came from” address before it is sent.

Your choice. In the European Economic Area, the UK and Switzerland — and anywhere Anilog cannot tell where you are — analytics cookies stay off until you choose Accept. Everywhere else they are on unless you choose Decline. You can change your answer at any time with Cookie choices at the bottom of every page; Decline also deletes any Analytics cookies already set.

Anilog uses Google’s consent mode. With analytics cookies off, the Analytics script still loads and sends Google cookieless signals — that a page was viewed, without a cookie or any ID from Anilog — which Google uses for overall counts. Every advertising signal is off for everyone, as is Google signals; Anilog has no ads.

How Google uses this data: policies.google.com/technologies/partner-sites. Google’s browser add-on that blocks Analytics on every site: tools.google.com/dlpage/gaoptout. How long Google keeps Analytics data is set in the Analytics account and Google’s terms.

• Vercel hosts the website. It handles every request to anilog.me, including your IP address, and tells Anilog your country so it knows whether to ask about cookies first.
• A rented server runs Anilog’s API and database. The database is backed up every night to the same server, and the newest 14 nightly backups are kept. A few one-off backups taken before maintenance work are also kept there, with no set date for deleting them.
• Resend delivers email; Google provides Analytics and, if you use it, sign-in; your browser’s push service delivers notifications.
• The catalog’s sources, listed on the Sources page, supply the catalog. The server fetches it; your list is not sent to them. Where a cover picture is shown it comes from Anilog’s own server (api.anilog.me): the server fetches it from the source named in the credit line, keeps a copy on Anilog’s disk and serves that, so nothing about you, not even your IP address, is sent to the source. Otherwise a plain coloured tile is shown. Links out to sources or streaming sites take you to their sites and their policies.
• Stripe handles donations on its own pages. Anilog’s servers never see your payment details.

These services and Anilog’s server may be in the United States or other countries. Your data is not sold, and it is not used for advertising.

Anilog’s API server logs each request it receives — what was asked for and the IP address it came from — to find faults and limit abuse. Request limits are counted per IP address in memory. There is no fixed period after which these logs are deleted yet.

Connections are encrypted (HTTPS), passwords are hashed with Argon2id, and sign-in sessions are stored only as hashes. No system is perfectly secure.

• Your account, list, diary, notes, friends and notifications: until you delete your account.
• A sign-in: 30 days from when you last used Anilog. Expired sign-ins are deleted daily.
• Email confirmation links work for 24 hours and password reset links for 1 hour; the record that a link was issued stays with your account until you delete it.
• Import previews: up to two days. Applied imports: with your account.
• Browser notification subscriptions: as above, under Notifications and push.
• Database backups: nightly ones for about two weeks (the newest 14); the few one-off backups taken before maintenance, no set period yet.
• Server logs: no fixed period yet.

• Export. Settings → Your data → Import & export gives you your list as a file: JSON with everything on it (entries, scores, notes, diary rows, custom lists, cover picks), or a MyAnimeList-format XML file.
• Correct. Change your username, email, password and settings in Settings; edit or remove any list entry.
• Delete. Settings → Delete account. Deletion is immediate and real: your account and everything tied to it — list, diary, notes, custom lists, friends, likes, notifications, push subscriptions, reports you filed, sign-ins and a linked Google account — are removed from the database. It stays in the nightly backups until they roll over (about two weeks), in any one-off backup taken before the deletion, and in the server logs.
• Anything else — a copy of data the export does not include, a correction you cannot make yourself, an account you cannot delete yourself, or a question about your rights where you live — email hankcj18@gmail.com. It is a one-person inbox, so a reply may take a few days.

When this policy changes, the date at the top changes with it. The terms of use are on their own page.

Henry J., who runs Anilog: hankcj18@gmail.com.