Privacy Policy
Last updated: April 19, 2026
This Privacy Policy explains how AniZap ("we", "us") collects, uses, and protects your information when you use anizap.app. We are committed to respecting your privacy and complying with applicable data protection laws, including Brazil's Lei Geral de Proteção de Dados (LGPD).
Who we are
AniZap is operated as an independent anime tracking service. You can reach us at privacy@anizap.app for any questions related to this Privacy Policy or your personal data.
What data we collect
We collect only the minimum information needed to provide our service:
- Account information: When you sign in with Google or Discord, we receive your email address, display name, and profile picture from the OAuth provider.
- Watch history: Episodes you mark as watched, your emotional ratings (positive / neutral / negative), and bookmarked titles, stored under your account.
- Usage analytics: Anonymized page views, interaction events, and aggregated behavioral data collected via Google Analytics 4.
- Technical data: IP address (stored temporarily in server logs by our hosting providers), browser type, device type, and referring URL.
How we use your data
We use your data to provide and maintain the service (tracking your watch progress), to understand aggregate usage patterns and improve the service, and to prevent abuse or security incidents. We do not sell your data to third parties, and we do not use it for advertising purposes.
Third-party services
We use the following service providers to operate AniZap. Each processes data on our behalf according to their own privacy policies:
- Supabase (database and authentication): Hosted in São Paulo, Brazil (sa-east-1). Stores your account data and watch history. Privacy policy: https://supabase.com/privacy
- Vercel (hosting): Serves the application and processes server logs (including IP addresses) for security and performance. Privacy policy: https://vercel.com/legal/privacy-policy
- Google Analytics 4 (usage analytics): Collects anonymized usage data. We do not enable Google Signals or advertising features. Privacy policy: https://policies.google.com/privacy
- Google and Discord (sign-in providers): Authenticate your identity when you sign in. We only receive the minimum profile information you grant. Google privacy policy: https://policies.google.com/privacy. Discord privacy policy: https://discord.com/privacy
Data retention
We retain your account data and watch history for as long as your account is active. If you delete your account, we remove this data from our active systems promptly, though residual copies may persist in encrypted backups for a limited period before being overwritten. Analytics data in Google Analytics 4 is configured with a 2-month retention window.
Your rights under LGPD
If you are located in Brazil, the LGPD grants you the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you.
- Correction: Request that we correct inaccurate or incomplete data.
- Deletion: Request deletion of your personal data, subject to legal retention requirements.
- Portability: Receive your data in a structured, commonly used format.
- Withdrawal of consent: Withdraw your consent to data processing at any time.
- Complaint: File a complaint with the Autoridade Nacional de Proteção de Dados (ANPD) if you believe your rights have been violated.
Cookies and tracking
AniZap uses cookies and similar technologies for authentication (required for signed-in features) and usage analytics (Google Analytics 4). We are currently working on a consent banner that will let you accept or decline non-essential tracking on your first visit. Until then, if you prefer not to be tracked by analytics, you can use browser-level protections such as Do Not Track, tracking prevention modes, or privacy-focused extensions.
International data transfers
Your primary account data is stored in Brazil (São Paulo) through Supabase. Some of our service providers, including Vercel and Google, may process data outside Brazil. These transfers are covered by the providers' own compliance frameworks, which include safeguards recognized under LGPD Article 33.
Changes to this policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically.
Contact us
If you have questions about this Privacy Policy or want to exercise your rights, please contact us at privacy@anizap.app.