Privacy Policy

This policy explains what personal data Animanga Planet ("we", "us") processes when you use animanga-planet.com, why, and what rights you have. We are the data controller; reach us via the contact page.

1. What we process and why

Account data. Email address, username, and a hash of your password (we never store the password itself). If you sign in with Google, Facebook, or X, we store the provider's account identifier and the email address the provider shares. Legal basis: performance of our contract with you (providing the account).

Consent records. The version and timestamp of the Terms of Use and Privacy Policy you accepted. Legal basis: legal obligation and legitimate interest in proving consent.

Your content. Lists, progress, scores, favorites, reviews, and profile text you choose to publish. Legal basis: performance of contract.

Technical data. Strictly necessary cookies for login sessions and security (CSRF protection). Web-server logs, including IP addresses, are kept by our hosting stack for security and abuse prevention and rotate automatically. Legal basis: legitimate interest in operating and securing the Service.

Analytics. We use self-hosted, cookieless analytics (Rybbit). It records aggregate page statistics, sets no cookies, does not fingerprint devices, and shares nothing with third parties.

Advertising. We show advertising supplied by Google AdSense, which may set cookies and process data as described in section 3. Legal basis: your consent where required, and otherwise our legitimate interest in funding the Service.

Contact form. If you write to us, we process the name, email address, and message you provide in order to answer you, and we keep the correspondence for as long as the inquiry requires. The form is protected by Cloudflare Turnstile, which checks your browser for automated behavior; Cloudflare's privacy policy applies to that check. Legal basis: legitimate interest in answering inquiries and preventing abuse.

2. What we do not do

We do not sell or rent your personal data, and we ourselves do not profile you or make automated decisions about you; our own analytics are cookieless. Advertising is handled by Google as a third party, described next, and uses cookies only with your consent where the law requires it.

3. Advertising and consent

Animanga Planet uses Google AdSense to display ads. Google and its advertising partners may use cookies, device identifiers, and similar technologies to serve, cap, measure, and (where you allow it) personalize ads, and may process data such as your IP address, approximate location, and your interaction with ads.

• If you are in the EEA, the UK, or Switzerland, the first time you visit we show a Google-certified consent message (built on the IAB Transparency & Consent Framework) where you accept or reject the use of cookies and data for personalized advertising. Your choice is stored and applied on later visits, and you can change it at any time by reopening the consent options from the notice at the bottom of the page.
• If you reject personalization, or where personalized ads are unavailable, Google may still show non-personalized ads. These still use cookies for frequency capping, aggregate measurement, and fraud prevention, but are not based on a profile of your interests.
• Ads are not always shown, but the advertising and consent technology may load on any page.

How Google uses the data it collects is described in How Google uses information from sites or apps that use our services and in Google's Privacy Policy. You can review and limit ad personalization at Google Ad Settings. Our Cookie Policy lists the specific cookies involved.

4. Sign-in providers and embeds

If you choose to log in with Google, Facebook, or X, that provider tells us your account identifier and email address. We do not receive your contacts or post anything to your account. Your relationship with the provider is governed by its own privacy policy.

Anime pages with a trailer show a preview image loaded directly from YouTube's image servers (i.ytimg.com), so your browser requests that image from Google when the page displays it; these image requests set no cookies. The video player itself loads only when you press play, and from that point the provider's own privacy policy (YouTube or Dailymotion) applies to the playback. Legal basis: legitimate interest in presenting the catalog.

5. Where data is stored

Our own servers are located in the European Union, and we do not transfer the account data and content we hold outside the EU/EEA. Catalog metadata comes from the AniList public API; nothing about you is sent to AniList. Our advertising provider, Google, operates globally and may process advertising data (see section 3) on servers outside the EEA under the safeguards set out in its own privacy policy.

6. Retention

• Account data and your content: for as long as your account exists.
• Data-export files: deleted automatically within 48 hours of generation.
• Server logs: rotated automatically on a short schedule.
• Advertising-consent choices: stored in your browser and refreshed according to Google's consent framework.
• Backups: cycled on a fixed schedule; deleted data leaves backups as they rotate.

7. Your rights

Under the GDPR you have the right of access, rectification, erasure, portability, restriction, and objection.

• Export: download everything we hold about you as JSON from your account settings, self-service.
• Erasure: delete your account from settings. This permanently removes your account, lists, favorites, reviews, consents, and any linked sign-in identities.
• Rectification: edit your profile and content at any time.
• For anything else, reach us via the contact page. We respond within one month.

You also have the right to lodge a complaint with your local data-protection authority. The European Data Protection Board maintains a directory of all EU/EEA authorities at edpb.europa.eu.

8. Children

The Service is not directed at children under 16. We do not knowingly process the data of children under the age of digital consent without parental authorization; if you believe we do, contact us and we will delete it.

9. Security

Passwords are stored using the bcrypt hashing algorithm, connections are encrypted with TLS, access to production systems is restricted, and account actions such as deletion require re-authentication.

10. Changes

We will announce material changes to this policy on the site and, for registered users, by email before they take effect. The current version is always at this page.

Last updated: October 6, 2026.