Privacy policy

Who is responsible for your data

• Data controller: Kris (KristinelGG).
• Contact: kristinelgg@gmail.com.
• Website: anisukii.com, a personal, not-for-profit (for now) project covering anime, manga, video games and Japan.

What we keep and why

If you visit without an account

You can read the news, play Animedle as a guest and browse the polls without signing up. In that case nothing about you is stored in our database. Even so:

• Your browser keeps a few preferences on your own device (theme, language, today’s game…). See the cookie policy.
• When you play Animedle as a guest, your browser sends the server the anime, manga or characters you have already tried so it can check each guess. The server doesn’t store them.
• Our hosting provider logs technical data about each visit, such as your IP address, the page requested and your browser (see “Providers”).

If you create an account

• Login details. Your email and password. The password is stored by our account provider (Supabase) as a hash: nobody at Anisukii can see it.
• If you sign in with Google. Google shares your Google ID, email, name and profile picture URL with Supabase, and they are kept in your account record. Anisukii only uses your name, to set up your profile; the picture is neither used nor shown (your avatar is your chibi).
• Session data. Supabase records when your account was created and when you sign in and, for security, the IP address and browser you sign in from.
• Profile. Your Anisukii display name (you can change it; if none is given when you sign up, we use the part of your email before the @), how you have customised your chibi, your favourite Animedle theme and the date the profile was created.
• Coins and shop. Your coin balance and the chibi items you have bought, with the purchase date.
• Reading news. Which articles you have opened (so they show as read) and, to award coins for reading, when you started each article and when you collected its coins. Articles you read while signed out on that browser are added to your account when you sign in.
• Animedle. Every guess (day, mode, theme, guess number, the anime, manga or character chosen and whether it was right), the result of each game, your current and best streak, the last day you played and which daily rewards you have already collected. We also keep a technical fingerprint of each day’s puzzle (a code that doesn’t reveal the answer) to detect if the puzzle has changed.
• Polls. Which candidate you voted for in each poll and when. Results are only published as overall totals.

None of this is public: the database rules only let each person read their own data. We don’t make automated decisions with legal effects on you and we don’t build marketing profiles.

Why we are allowed to use it (legal basis)

• Providing the service you ask for (Art. 6(1)(b) GDPR). When you create an account, with email or with Google, you ask us to keep your profile, coins, purchases, games, streak and votes. Without that data the account can’t work.
• Legitimate interests (Art. 6(1)(f) GDPR). Keeping the site secure and the games fair: the server stores Animedle guesses and the rewards already collected, checks reading time before awarding coins, and our providers log technical data (IP, browser) to prevent abuse. You can object by emailing us; we will consider it, although some checks are essential for the account to keep working.
• Legal obligation (Art. 6(1)(c) GDPR). Handling any requests you send us about your rights.

We never use your data for marketing. The only emails you may receive come from the account system, such as the one asking you to confirm your email address when you sign up.

Providers that process data for us

• Supabase (Supabase, Inc.). Database and account system (sign-up, sign-in and confirmation emails). The data is hosted in the European Union, in Ireland. Supabase is a US company: if it accesses the data from outside the European Economic Area (for example, to give us support), its data processing agreement covers this with the European Commission’s standard contractual clauses.
• Vercel (Vercel Inc.). Website hosting. It receives every request from your browser (IP, page requested, browser) and keeps technical logs. It is a US company and may process data outside the European Economic Area; for those transfers it relies on the EU-US Data Privacy Framework and standard contractual clauses.
• Google. Only if you choose “Sign in with Google”. Google identifies you and shares the data listed above with Supabase. For that sign-in, Google acts as a controller under its own privacy policy. You can remove Anisukii’s access from your Google Account settings.

Anime, manga, character and opening data is fetched by our server from AniList and AnimeThemes. Those requests carry no data about you. Opening audio also goes through our server: your browser never connects to AnimeThemes.

Third-party connections from your browser

Some parts of the site are downloaded by your browser directly from other services. As with any web resource, those services receive your IP address and technical browser data (type, language, referring page). We send them nothing else and, in our checks, they don’t set cookies.

• Google Fonts (Google). The site’s fonts (Unbounded, Manrope and Zen Kaku Gothic New) are loaded from fonts.googleapis.com and fonts.gstatic.com on every page.
• AniList. Anime, manga and character covers and images in Animedle, birthdays and polls are loaded from AniList’s image server (s4.anilist.co).
• Episode images. In the episode-of-the-week poll, each episode image is the one AniList links to, usually hosted on Crunchyroll’s image server.
• Supabase. If you have an account, your browser talks to Supabase directly to sign you in and to read or save your data.

The share buttons (X, WhatsApp, Telegram and Facebook) and the links to our social media are plain links: nothing from those networks loads until you click them.

How long we keep it

• Your account data is kept for as long as the account exists. Deleting it also deletes your profile, coins, purchases, reading history, games, guesses, collected rewards and votes.
• Nothing is deleted automatically because of its age: your game, guess and reading history is kept while you have the account. The only exception is that, if a day’s puzzle changes, that day’s guesses are deleted and we only keep a note that the mode has already paid out its reward.
• Technical logs and backups at Supabase and Vercel are kept according to each provider’s policies.
• Emails you send us to exercise your rights are kept for as long as needed to handle them and to show that we did.
• What your browser stores is explained in the cookie policy.

Your rights

You can ask to access your data, correct or erase it, object to its use, restrict it, or get a copy in a format you can take to another service (portability).

• Email kristinelgg@gmail.com from your account’s email address so we can check it’s you. If that isn’t possible, we will ask for another way to verify your identity.
• We will reply within one month of receiving your request.
• You can change your display name, chibi and favourite theme yourself on the site.
• Deleting your account: there is no button on the site yet. Ask us by email and we will delete it along with all its data.

If you think we haven’t handled your data properly, you can complain to the Spanish Data Protection Agency (aepd.es) or to the authority in your country. We’d appreciate it if you wrote to us first so we can try to sort it out.

Children

You must be at least 14 to create an account, the minimum age in Spain to give your own consent (Article 7 of the Spanish Data Protection Act, LOPDGDD). If you are under 14, you can still read the news and play as a guest without an account. If we learn that an account belongs to someone under 14, we will delete it. If you are a parent or guardian and think this is the case, please email us.

Security

The site always runs over HTTPS, each account can only read its own data, and coins, purchases, votes and games are validated on the server. No system is foolproof: if we detect a security issue affecting your data, we will act as the GDPR requires.

Changes to this policy

If what the site does with your data changes, we will update this page and its “last updated” date.