Privacy Policy
Draft: this text is still being reviewed and some details (in brackets) are not filled in yet.
Last updated: [DATE]
1. Who we are
OtakuGraph ("we", "us") is an anime episode-ratings website at otakugraph.com, operated by [OPERATOR NAME], [COUNTRY]. Contact: contact@otakugraph.com [CHECK: set up this mailbox].
2. What we collect
When you visit the site (everyone)
- Technical data: IP address, browser type, device type, pages requested, and time of request. This is processed by our hosting provider (Cloudflare) to deliver the site, keep it secure and block abuse.
- Approximate country (from your IP address, via Cloudflare) to show region-relevant information. We do not store it with any account.
- No advertising trackers. We do not sell personal data or use it for advertising.
- Analytics: we use Cloudflare Web Analytics to count visits. It doesn't use cookies or track you across sites.
- Error reports: if a page fails because of an error on our servers, technical details of the error (the error message, the page address without any search terms, and the time) are sent to our error-tracking provider, Sentry. No cookies or other personal data are included.
Staff accounts (v1)
Admins and co-workers sign in through Clerk. We process their name, email address, sign-in and security data (including multi-factor authentication), and a record of the edits they make.
Accounts
If you create an account, we process:
- Account data via our sign-in provider Clerk: email address, username, and, if you use it, your Google or Discord account identifier.
- Contributions: data corrections and additions you submit, error reports, and the history of your edits.
- Security data: sign-in events and abuse-prevention signals (e.g. Cloudflare Turnstile).
3. Why we use it (legal bases)
| Purpose | Data | Legal basis (EU/UK GDPR) |
|---|---|---|
| Delivering and securing the site | Technical data | Legitimate interests (running a secure website) |
| Staff and user accounts, contributions | Account data, contributions | Contract (providing the service you signed up for) |
| Preventing abuse and fraud | Technical and security data | Legitimate interests |
| Keeping an edit history so data stays accurate and vandalism can be reversed | Contributions | Legitimate interests |
| Legal obligations | As required | Legal obligation |
4. Cookies
We use only strictly necessary cookies: sign-in session cookies set by Clerk when you're signed in, and security cookies set by Cloudflare. We don't use advertising or tracking cookies.
One cookie remembers a choice you make, and is only set when you make it:
ag_spoilers: you turned on "Hide spoilers" (kept for one year; turning it off deletes it).
Showing an 18+ image after you confirm your age is not remembered at all. If you have an account and turn on "Show explicit titles", we store that choice and when you made it with your account (you can turn it off at any time; it is included in your data download). [If non-essential cookies or analytics are ever added, add a consent banner and update this section.]
5. Who we share it with
We use these service providers (processors), who handle data only on our instructions:
| Provider | Purpose | Location |
|---|---|---|
| Cloudflare, Inc. | Hosting, database, security, analytics | Global network |
| Clerk, Inc. | Sign-in and account management | [CHECK] |
| Functional Software, Inc. (Sentry) | Error reports | [CHECK] |
| [Email provider, if used] | Account emails | [CHECK] |
Images from MyAnimeList: many posters are shown straight from MyAnimeList's image server (cdn.myanimelist.net). Your browser loads them from there, so MyAnimeList receives your IP address, your browser details and which image was requested, as with any image on the web. It can at most tell that the request came from our site, never which page you were on. 18+ posters are not loaded until you choose to show them. [CHECK: MyAnimeList's privacy policy link.]
We don't sell or rent personal data. We may disclose data if required by law.
Public information: anime ratings and the OtakuGraph Score are public. Your suggestions and your username are seen by our editors, not by the public [DECIDE: whether contributions should be publicly credited later].
6. International transfers
Our providers may process data outside your country, including in the United States. Where required, transfers rely on appropriate safeguards such as the EU Standard Contractual Clauses.
7. How long we keep it
| Data | Retention |
|---|---|
| Server/security logs | [e.g. 30 days] |
| Account data | Until you delete your account |
| Contributions & edit history | Kept to preserve data accuracy. When you delete your account, your identity is removed and entries show as "deleted user"; suggestions still waiting for review are closed. |
8. Your rights
Depending on where you live (e.g. EU/UK GDPR, California CCPA/CPRA), you may have the right to access, correct, delete or export your data, and to object to or restrict some processing. You can download or delete your account data on your account page, or email us. You can also complain to your local data protection authority.
9. Children
OtakuGraph accounts are for people aged 13 or older. If your country requires a higher age for you to use online services without a parent's consent, you must meet that age or have that consent. If we learn that a child under 13 has created an account, we will delete it. Contact us if you believe this has happened.
10. Security
We use encryption in transit (HTTPS), access controls, multi-factor authentication for staff, and keep an audit trail of data changes. No method of transmission or storage is 100% secure.
11. Changes
We'll update the "Last updated" date when we change this policy, and notify account holders of significant changes.
12. Contact
contact@otakugraph.com [CHECK: set up this mailbox]