Privacy Policy
Last updated: January 1, 2025
The short version: we collect almost nothing, store even less, and never sell your data.
Overview
AnimeDex ("we", "our", "us") is committed to protecting your privacy. This policy explains what information we collect when you use animedex.fun (the "Service"), how we use it, and the controls you have. We keep this plainspoken — no legalese.
What we collect
Information you provide
- AniList OAuth token — stored as an httpOnly cookie when you choose to log in. Used solely to sync your watch list. We never see or store your AniList password.
- AniList profile data — your username, avatar, and list entries, fetched on demand via the AniList GraphQL API with your token.
Automatically collected
- Watch history — stored entirely in your browser's localStorage. Never sent to any server. Never leaves your device unless you sync via AniList.
- Stream source preference — saved in localStorage so your preferred source persists between sessions.
- Server logs — Vercel (our host) may retain standard request logs including IP address, user agent, and URL per Vercel's data policy.
What we do NOT collect
- No email address or personal identification.
- No payment information. The service is free.
- No third-party advertising cookies or tracking pixels.
- No fingerprinting scripts.
Third-party services
- AniList — all anime metadata, artwork, and OAuth. Your use is subject to AniList's own privacy policy.
- Third-party streaming APIs — provide stream source data. Your IP may be visible to their servers during server-side fetches.
- Cloudflare — CDN and worker proxy. Subject to Cloudflare's privacy policy.
- Vercel — hosting provider. Subject to Vercel's privacy policy.
- Upstash / Turso — server-side API response caching only. No personal data is cached.
Data retention & deletion
We maintain no user database. To erase all data associated with your use of AnimeDex:
- Log out via the profile menu — instantly clears al_token and al_user cookies.
- Clear site data in your browser settings — removes all localStorage (history, preferences).
- Revoke the AnimeDex app at anilist.co/settings/apps — invalidates the token server-side.
Security
Your AniList token lives in an httpOnly cookie — inaccessible to JavaScript, protecting against XSS. All traffic is served over HTTPS. Content Security Policy headers restrict what scripts and frames may execute on the site.
Children's privacy
AnimeDex is not directed at children under 13. We do not knowingly collect personal information from children. Contact us if you believe a child has provided personal information and we will delete it promptly.
Changes
We may update this policy. Material changes will be shown by an updated "Last updated" date. Continued use constitutes acceptance.
Contact
Questions? Reach us at:
[email protected]