Privacy policy
Last updated May 2026What we collect, why, and what we don't.
This is a draft pending legal review. The final version will be reviewed and approved by a licensed attorney before Torinagi's public launch. Do not rely on this draft for legal certainty.
1. Information collected
Email and display name at account creation; AniList user id, watch history, and ratings via OAuth with your consent.
2. How it's used
To provide sync, recommendations, and account features.
3. Cookies and tracking
Minimal first-party cookies only. Analytics, if enabled, is privacy-respecting (Plausible-style) and opt-in. Not Google Analytics.
4. Third-party services
AniList (auth and list), Stripe (payments — card data never touches torinagi servers), and affiliate networks (aggregate, non-identifying attribution only).
5. Data retention
IP addresses are kept for 30 days for security, then discarded.
6. Your rights
Access, deletion, export, and correction on request.
7. International users (GDPR)
EU/UK users have GDPR rights including erasure and portability.
8. California residents (CCPA)
We do not sell personal information. CCPA rights are honoured.
9. Children under 13
torinagi does not knowingly collect data from children under 13.
10. Security practices
Tokens are encrypted at rest; transport is TLS; access is least-privilege.
11. Changes to this policy
Material changes are posted here with an updated date.