Privacy Policy
Last Updated: July 15, 2026
Aniotako ("we", "our", or "us") is developed and operated from Lucknow, Uttar Pradesh, India by a solo independent developer. We collect only the minimum information necessary to operate our personal anime tracking and schedule countdown service. This Privacy Policy explains what data we collect, how we use it, which external services are involved, and what rights you have under applicable law — including India's Digital Personal Data Protection Act, 2023 (DPDP Act).
1Legal Basis for Processing
Under India's Digital Personal Data Protection Act, 2023 and other applicable privacy laws, we process your personal data based on:
- Your Consent: By creating an account and agreeing to these policies at registration, you consent to the collection and use of your data as described in this policy. You may withdraw consent at any time by deleting your account.
- Legitimate Interests / Contractual Necessity: Certain data (such as session cookies and server logs) is processed to provide, maintain, and secure the Service you have requested.
2Information We Collect
We collect limited account and usage data necessary to operate the application:
- Account Information: When you register, our authentication service collects your email address and securely manages encrypted authentication credentials. You may also provide a display name.
- Watchlist & Preferences: We store the anime titles you track (using third-party catalog IDs such as AniList or MyAnimeList IDs), watch progress, scores, localized timezone selection, and display preferences.
- Push Notification Subscriptions: If you opt in to receive desktop push notifications, our application stores your browser's Web Push endpoint URL and standard encryption keys (p256dh and auth) to deliver alerts.
- Server & Connection Logs: Like most web applications, our cloud hosting infrastructure automatically records basic request logs (such as IP addresses, browser types, and request timestamps) for security monitoring and error diagnosis. These logs are retained for approximately 30 days and then automatically purged.
3What We Do NOT Collect
- No Analytics Tracking: We do not use Google Analytics, advertising pixels, behavioral tracking, or any user-level analytics tools. We do not build profiles of your browsing behavior.
- No Advertising: We do not show ads and have no relationships with ad networks.
- No Data Selling: We never sell, rent, trade, or monetize your personal data to any third party.
- Google Search Console (Aggregate Only): Our site is registered with Google Search Console to monitor search indexing performance. This provides only anonymous, aggregate data (e.g., search impressions and clicks) and does not identify individual users or collect any personal data.
4How We Use Your Information
We use your information strictly to provide and maintain the Aniotako service:
- To authenticate your identity and keep your personal watchlist synced across devices.
- To calculate airing countdowns tailored to your selected timezone (e.g., Asia/Kolkata).
- To schedule and deliver browser push notifications when your tracked episodes air.
- To respect your application settings (such as hiding adult content unless explicitly enabled).
- To protect the application against automated abuse, unauthorized access, and technical errors.
5External Services & Infrastructure
To provide dynamic anime catalogs, broadcast timetables, and reliable hosting, our application relies on external cloud infrastructure and APIs:
When you search for anime, view summaries, or check airing times, queries are sent to external anime databases. These providers process requests under their own privacy policies. We temporarily cache metadata results (such as titles and artwork) on our backend to reduce network overhead.
Our application interface, serverless functions, and user database are hosted on Vercel (US-based) and Supabase (US-based). Your personal data (account info, watchlist, notification subscriptions) is stored on these platforms. Both providers maintain strict security controls and are bound by their own privacy and data processing commitments.
To check broadcast timetables and trigger push notifications, our serverless endpoints are periodically invoked by automated scheduling services. These schedulers only send technical timing triggers and do not collect or process personal user data.
When an episode alert is triggered, our server encrypts the alert using your browser's subscription keys and transmits it through your browser vendor's push notification gateway (such as Google FCM for Chrome/Android or Apple APNs for Safari/iOS) to reach your device.
6International Data Transfers
Aniotako is operated from India, but our hosting infrastructure (Vercel and Supabase) is based in the United States. By using the Service, you acknowledge and consent to your data being transferred to and stored on servers located outside India.
We rely on our hosting providers' privacy and security commitments to protect your data during such transfers. We do not transfer your data to any other countries or entities beyond what is described in this policy.
7Cookies & Local Storage
We use strictly necessary session cookies and browser storage (localStorage) to keep you authenticated and remember display preferences (such as preferred title language, grid/list layout view, and sort order). We do not use third-party advertising cookies, tracking pixels, or session replay tools.
8Data Retention
We retain your data for the following periods:
| Data Type | Retention Period |
|---|---|
| Account & Watchlist Data | Until account deletion |
| Push Notification Subscriptions | Until you disable notifications or delete your account |
| Server / Connection Logs | ~30 days, then auto-purged |
| Cached Anime Metadata | Refreshed periodically; not tied to individual users |
9Data Security
We protect your data in transit using standard HTTPS / TLS encryption and rely on secure cloud database isolation (Supabase Row-Level Security) to safeguard stored records. Authentication credentials are never stored in plain text.
While we take reasonable security measures, no internet transmission or electronic storage method is 100% secure. We cannot guarantee absolute security of your data.
10Data Breach Notification
In the event of a personal data breach that poses a risk to your rights and interests, we will make reasonable efforts to notify affected users within a reasonable timeframe and in accordance with applicable law, including the DPDP Act, 2023. Notification will be provided via the email address associated with your account.
Because this is a solo-operated project with no dedicated security team, we encourage you to use a strong, unique password and to contact us immediately at contact.harshvdev@gmail.com if you suspect any unauthorized access.
11Your Rights & Control Over Your Data
Under the Digital Personal Data Protection Act, 2023 (DPDP Act) and other applicable privacy laws, you have the following rights:
- Right to Access: You can export a complete copy of your watchlist anytime via our Settings page in JSON, CSV, or MyAnimeList XML formats.
- Right to Correction: You can update your display name, timezone, and notification settings at any time via the Settings page.
- Right to Erasure (Right to Be Forgotten): You can permanently delete your account and all associated personal data directly from the Settings page (Danger Zone section). Deletion is immediate and irreversible.
- Right to Withdraw Consent: You can disable push notifications or adult content at any time via Settings, or delete your account to withdraw all consent.
- Right to Grievance Redressal: If you have a concern about how your data is handled, please contact us at contact.harshvdev@gmail.com. We will respond to your inquiry within a reasonable timeframe.
12Children's Privacy
Aniotako is not intended for children under the age of 13 (or under 18 for adult content features). We do not knowingly collect personal information from individuals under applicable age thresholds. If you believe an underage account has been created, please contact us at contact.harshvdev@gmail.com so we can take appropriate steps to remove the account.
13Governing Law
This Privacy Policy is governed by the laws of India, including the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000. Any disputes shall be subject to the exclusive jurisdiction of the courts in Lucknow, Uttar Pradesh, India.
14Changes to This Policy & Contact
We may update this Privacy Policy from time to time as the application evolves. The "Last Updated" date at the top of this document reflects the most recent revision. Continued use of the Service after changes are posted constitutes your acceptance.
If you have any questions or inquiries about your data, please contact us at:
Application Name: Aniotako
Developer Location: Lucknow, Uttar Pradesh, India
Contact Email: contact.harshvdev@gmail.com