Privacy Policy

Last updated: November 1, 2026

Who we are

AnimeIndex is a personal project run by Enzo Collovati, an individual based in Mendoza, Argentina. He is the person responsible for the personal data described here. You can reach him at contact@animeindex.app.

What we collect

• Account: email, username, a hashed password (we never store the password itself), language, and optionally a bio and profile photo.
• If you sign in with Google: your email, name and Google account id.
• Feedback: if you write to us from the footer form, we keep the text, the type you chose and your language. It is anonymous: we never record who sent it, even if you were logged in. Please do not include personal data in your message: since we cannot tell who wrote it, we cannot find or delete a specific message later (it is not part of your data download or account deletion).
• What you do on the site: your anime lists, ratings, reviews and votes, who you follow and block, recommendations you send or receive, notifications, and whether your profile is private.
• Devices: a hash of a random identifier stored in your browser, only to warn you when your account is used from a new browser.

We do not use analytics or advertising, and we do not sell or share your data for marketing.

Cookies

Only essential cookies, which the site needs to work:

• connect.sid: keeps you signed in (up to 14 days).
• lang: remembers your language (1 year).
• ai_device: the random device identifier mentioned above (1 year).

Who processes your data

• Vercel (United States) hosts the site.
• Supabase (Amazon Web Services, United States) hosts the database.
• Google, if you choose to sign in with it.
• Cloudflare (Turnstile), a security check that tells people from bots on the sign-up, password recovery and feedback forms, and on log in after several failed attempts. Your browser loads it from Cloudflare, which sees your IP address and browser signals to run the check; we send it only the check's token and your IP address to validate it, and we don't store the token.
• Resend (United States) delivers our emails (verification codes, password recovery, security alerts). It receives your email address and the content of each message.
• Cloudflare also handles our domain and forwards the emails you send to our contact address to our inbox.
• AniList provides the anime catalogue. We send it search terms and anime ids, never your account data.

Your browser also loads resources directly from third parties: Google Fonts, jsDelivr (Bootstrap), images from AniList and streaming platforms, and trailers from YouTube (privacy-enhanced mode). Those services see your IP address as any website you visit would.

How long we keep it

• Your account data, until you delete your account.
• Notifications: up to 60 days (read ones are removed after an hour).
• Known devices: 180 days without use.
• Rate-limit counters (to stop abuse): at most 24 hours.
• Suspended accounts: if an account is suspended for breaking the Terms, we keep a one-way hash of its email (never the email itself) for as long as the suspension lasts, permanently for permanent suspensions, so the same email can't be used to sign up again. We also keep a moderation log with the username, the reason for the action (if one was given) and, if a review was removed, its text. The suspension email includes that reason.
• Backups: we make occasional database backups and keep them for up to 90 days, so deleted data can remain in an old backup until it expires.

Your rights

You can access, correct and delete your data. From your profile settings you can download all your data as a JSON file, edit your profile, and delete your account. Deletion has a 7-day grace period: your account stays active and, if you log in again during that time, the deletion is cancelled. After that, your data is permanently removed. For anything you can't do from your profile, write to contact@animeindex.app and we will answer within 30 days.

Under Argentine Law 25.326 on Personal Data Protection, the holder of the data has the right to access it free of charge at intervals of no less than six months. The Agency for Access to Public Information (AAIP), as the oversight body of Law 25.326, has the authority to handle complaints and claims regarding non-compliance with the personal data protection rules.

Age

You must be at least 13 years old to create an account.

Changes

If this policy changes, we will update the date at the top. For significant changes we will let you know on the site.