Privacy Policy

Aegami (“we”, “us”, “our”) is an anime tracking app and website operated as an independent indie project. This Privacy Policy explains what information we collect when you use Aegami, how we use it, who we share it with, and the choices you have. By using Aegami you agree to the practices described below.

1. Information we collect

We collect only what we need to run the service:

Account information. When you sign up with email and password, we store your email address and a salted hash of your password. We also assign each account an internal user ID. If you sign in with Google (OAuth), we additionally receive and store your Google account ID, email and basic profile (name, profile picture URL) from Google.
Profile content. Your nickname, optional bio, optional avatar image, theme preference, notification time, and public-profile settings (whether your collection is public, whether you appear in nickname search, whether reviews and rewatch history are publicly visible).
Anime tracking data. The anime you add to your watchlist, status (watching, completed, etc.), ratings, personal notes, mini reviews, custom tags, and rewatch history that you record in the app.
Device identifiers and push notification tokens. The mobile app generates a per-install identifier (a random string stored in the app's local storage) so we can tell your devices apart on the “Signed-in devices” screen and so we can route push notifications to the right device. If you opt in to notifications, we also store the device push token issued by Apple Push Notification service or Firebase Cloud Messaging, along with your device's brand, model and OS version (used as a human-readable label such as “iPhone (iOS 18)” so you can recognise the device in the list). The per-install identifier is reset when you delete the app or your account.
Sign-in session metadata (IP address, approximate location, user agent). For every active sign-in we store the IP address and user agent of the device the session was created on, and we derive an approximate location (typically city / region / country level) from that IP using an offline geolocation database. This information is shown to you on the “Signed-in devices” screen in the Profile tab so you can recognise unfamiliar sessions and revoke them. We do not collect precise GPS location.
MyAnimeList import data. If you choose to import your MAL list, we fetch the public anime entries from MAL for your username and store them on your Aegami account. We never ask for your MAL password.
Authentication cookies / local storage. Access and refresh tokens are stored in your browser or on your device so you stay signed in. These are functional only and are not used for tracking or advertising.
Basic request logs. Like any web service, our servers automatically receive standard request metadata (IP address, user agent, timestamp, requested path, response status) which is kept short-term for debugging and abuse prevention.

We do not collect precise (GPS) location, your contacts, calendar, SMS messages, call logs, the list of apps installed on your device, microphone audio, or camera images outside of the avatar you choose to upload. Aegami does not embed any analytics or advertising SDKs (no Sentry, Firebase Analytics, PostHog, ad networks, or similar) and does not collect advertising identifiers.

2. How we use your information

To create and authenticate your account.
To save and sync your anime watchlist, ratings, reviews, tags, and rewatch history across your devices.
To render your public profile page when you have opted in to publishing it.
To send airing reminders and transactional email such as password reset and security notifications.
To detect and prevent abuse, fraud, and violations of our Terms.

We do not use your data to train AI models, sell you advertising, or build advertising profiles.

3. Where your data is stored

Aegami’s database is a managed Postgres instance hosted on Replit’s infrastructure. Avatar images are stored on the same managed storage. Servers may be located in the United States or Europe.

4. Sharing with third parties

We do not sell your personal information and we do not share it with advertisers. We rely on a small number of processors strictly to operate the service:

Replit — hosting and database provider.
Google — only if you choose to sign in with Google (OAuth) we receive your Google profile from Google and Google receives the fact that you are signing in to Aegami.
Apple Push Notification service / Firebase Cloud Messaging — only if you opt in to push notifications, we send the notification payload to Apple / Google for delivery to your device.
Resend — transactional email delivery (account verification, password reset, security notifications).
MyAnimeList — only if you trigger a MAL import, we fetch your public list from MAL on your behalf.

We may also disclose information when required by law, court order, or to protect the safety, rights, or property of Aegami or its users.

5. Public content

If you turn on the “Public Collection” toggle, your nickname, avatar, bio, anime list, ratings, and (depending on your sub-toggles) mini reviews and rewatch history become accessible at https://aegami.com/public/<your-nickname>. Search engines can index this page. Turning the toggle off removes the page and asks search engines to drop it from their index, but cached copies on third-party services may persist for a while outside of our control.

6. Data retention

We keep your data for as long as your account exists. Request logs are kept for a short rolling window (typically 30 days) for debugging and abuse prevention. When you delete your account (see below), all of the above is removed from our active databases promptly; encrypted backups are rotated within approximately 30 days.

7. Your rights and how to delete your account

You can permanently delete your account at any time directly from the app: open the Profile tab, scroll to the Danger zone section, and tap Delete account. This permanently removes your account, profile, avatar, watchlist, ratings, personal notes, mini reviews, custom tags, rewatch history, push notification tokens, signed-in sessions (across all your devices), and your public profile. The deletion is a hard delete and cascades across all of these tables — the action cannot be undone.

You can also delete your account from the web without installing the app at https://aegami.com/delete-account. The web flow asks for your email and password, requires you to confirm the action, and then removes the same data as the in-app option. If you sign in only with Google (no password set), the same page offers a “Continue with Google to delete” option that verifies your identity through Google before deleting — no app install required.

If you cannot reach either option, or if you would like to request a copy of your data, correct inaccurate data, or otherwise exercise rights granted to you by your local data protection law (such as GDPR in the EU/UK or CCPA in California), you can email us at the address below and we will action it within 30 days.

8. Children

Aegami is not directed to children under 13 (or under 16 where local law sets a higher age of digital consent). We do not knowingly collect personal information from children. If you believe a child has created an account, contact us and we will delete it.

9. Security

Connections to Aegami are encrypted in transit with HTTPS. Passwords are stored only as salted hashes — we never see or store the plaintext. No system is perfectly secure; if we ever learn of a breach affecting your data we will notify you as required by applicable law.

10. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the “Last updated” date at the top of this page. Significant changes that affect how we use your data will additionally be communicated in the app or by email.

11. Contact

Questions, requests, or concerns about privacy? Email support@aegami.com.

← Back to Aegami