Your privacy in AniCom

Adults-only private beta · 30 October 2026

Controller and contact

The controller is Luca Rossetto. For privacy, access, correction, deletion, support and appeals against moderation decisions: luhou7777@gmail.com. Updated 24 October 2026, version 2026-10-24-v2. This beta is for people aged 18 or over. We ask for an adult declaration without collecting a birth date or identity documents.

Library and photographs

You can use the library without an account: titles, categories, ratings, rewatches, notes and personal covers remain on your device. The camera is optional. Text recognition takes place on your iPhone; the photograph is not sent to our servers or catalogues. Personal images are excluded from cloud backups. Style and language are preferences; the language choice stays on the device.

Account and backup

An account requires a nickname, email, password hash, account identifier, verification status and privacy notice acknowledgement. The requested cloud backup includes titles, categories, ratings, view and rewatch counts, notes, import receipts, catalogue metadata and sources, style and selected avatar identifier. First and last names entered locally remain on the device. Passwords are not stored in plaintext. We do not collect Netflix, Prime Video or other platform passwords, cookies or sessions.

Optional social presence and compatibility

Social features require an adult declaration, acceptance of community rules and a separate visibility confirmation. Users in the town you manually choose can see your nickname and avatar even with the app closed, only after specific confirmation of persistent visibility. No GPS is used. Your profile stays visible until you disable social mode or delete your account. The online dot only indicates a recent signal, expiring within 90 seconds; last-seen times are not published. Earlier confirmations limited to app use retain that limit until a new explicit choice. Your full ranking, ratings, email and personal names are not published. Compatibility is a separate optional choice: the server compares watched and rated titles, rank positions, categories and library size, sharing only a percentage and common-title count. No percentage is shown with fewer than five common titles. This compares recorded lists; it does not assess personality or make decisions with legal effects. You can switch off social and compatibility in Profile without losing your library.

Connections, chat, blocking and notifications

Text and emoji chat requires the recipient to accept a connection. Messages are available to the participants and encrypted on the server. The operator can decrypt them; encryption is not end-to-end. Messages are not public. Muting stops notifications; removing a connection stops new messages. Blocking prevents new requests, messages and notifications between both people and hides them from each other in town squares. Unblocking does not automatically restore a connection. Optional iOS notifications use Apple APNs. Device tokens are encrypted and session-bound; logout, revocation and account changes remove registration. Alerts may contain a nickname but not message text. A notification already delivered to Apple may still appear after a block or revocation. Android integration of 30 October 2026: Android notifications are optional and use Google Firebase Cloud Messaging (FCM), with a separate choice in Bonds and Android permission where required. Google processes installation identifiers, device tokens and technical delivery data; AniCom stores the encrypted token bound to the session. FCM receives the event kind and technical event, bond and recipient identifiers, never chat text, library titles, ratings, photographs or email. Android alerts use generic text; the app checks the recipient account before displaying and opening them. Disable them in the app or Android settings; muting, blocking and revocation checks also apply. Delivery already in progress may arrive after revocation; Android restrictions and force-stop may prevent delivery. Firebase Analytics and advertising are not used.

Reports and moderation

A limited automated check detects some explicit threats, hate expressions and illegal content before sending. It cannot detect every abuse. You may report a profile or an individual message, including from a removed connection. We store the reason, optional notes, necessary identifiers and, when selected, a copy of that message only, not the whole conversation. The operator reviews evidence using restricted administrative tools. We do not disclose the reporter’s identity to the reported user. Reports do not automatically cause suspension: human review is required, with an initial assessment within 24 hours. Messages may be hidden and social access suspended; account access, backup and account deletion remain available. You may appeal using the contact above.

Purposes and legal bases

Requested accounts, verification emails, password recovery, backup and communications perform the service you choose (GDPR Article 6(1)(b)). Optional social visibility and compatibility rely on consent (Article 6(1)(a)), which can be withdrawn in settings. Protection against unauthorized access, spam limits, blocking, reports and security rely on the legitimate interest in protecting users and the service (Article 6(1)(f)), with access and data limited to what is needed. Legally binding obligations or requests may rely on Article 6(1)(c). Acknowledging this notice is not blanket consent for other uses. We do not use data to advertise, sell profiles or track users for advertising.

Recipients, providers and transfers

The account service and database are hosted on Hetzner in Finland. Google/Gmail delivers verification and recovery emails and alerts the operator to new reports; those alerts do not include reported text. Apple provides APNs and TestFlight. Wikipedia/Wikimedia, TVmaze and Trakt receive search text and connection information such as IP addresses, not photographs, ratings, email or AniCom profiles. Messages are shared with the recipient and, when reported, with the operator for review. Authorities or advisers may receive information only when necessary and lawful. The main server is in the EU. Google, Apple and catalogue services may process data outside the EEA under their own terms and privacy notices. GDPR-regulated transfers require the safeguards in Articles 44 onward, such as an applicable adequacy decision or other appropriate safeguards. Contact the controller for information about the safeguards actually applicable to the service used.

Retention and deletion

The local library remains until you remove it or uninstall the app. Cloud accounts and backups remain until you delete the account in Profile. Unverified accounts are removed after seven days. Email links expire after 30 minutes and sessions after at most 30 days. Messages are deleted after 90 days. Reports, their evidence and moderation action logs are deleted within 90 days of creation, even if the original message is no longer available. Social preferences, blocks and rule acknowledgements remain while needed for the account or until account deletion. Existing reports may remain for the stated period to address abuse; account deletion removes direct account links in the report register. Encrypted technical backups may retain deleted data for up to seven additional days until rotation. Recovery requires reapplying deletions made after the snapshot. Rate limits use temporary technical data. Application logs do not record request bodies, passwords or tokens.

Your rights and optional choices

Where GDPR applies, you may request access and a copy, correction, erasure, restriction, portability and objection to legitimate-interest processing. Consent to social presence and compatibility can be withdrawn without affecting earlier lawful processing. Camera and notification permissions can also be managed in iOS. The local library works without an account; without social you do not appear in town squares and cannot use online chat and connections. Account nickname and email corrections are handled by support after identity verification. Contact luhou7777@gmail.com to exercise your rights. We reply within one month, subject to permitted and explained GDPR extensions. You may complain to the Italian Garante (www.garanteprivacy.it) or your competent data protection authority. You do not need to waive that right to contact us.

Security and changes

Communications use HTTPS, with dedicated protections for password hashes, tokens and backups. These measures do not guarantee the absence of risk. This notice will be updated when features or processing change; relevant social changes require renewed confirmation where necessary. Any future commercial use requires a fresh review of provider terms, notices and declarations before new uses of personal data are introduced.

Provider information

Hetzner · Google · Google — transfers · Apple · Wikimedia · TVmaze · Trakt

Community rules

Italiano