Privacy Policy.

This page describes what Poppukon stores about you and why. The short version: an account is a username and a password, we keep the data that makes the app work (your lists, progress and settings), and we run no advertising and no third-party analytics or tracking.

What we collect

• Account: your username, a hash of your password and a hash of your recovery code. No email address or phone number is required or collected at signup.
• App data you create: watch lists and progress, watch history, playlists, settings you sync, comments, community posts and statuses, direct messages, friendships and blocks, watch-together rooms, skip-time submissions and votes.
• Optional account links: if you connect an AniList or MyAnimeList account, we store the tokens needed to sync your lists there. You can unlink at any time.
• Signed-in devices: for each app or browser signed in to your account we keep its kind, app version, browser description and when it was last used, so you can review and sign them out from your account page.
• Playback reports you send: when you press "report" on a stream that would not play, the report carries your app version, platform, device model and system version, the host name of the stream (never its full address), and the player's error log with every address cut down to its host.
• Invites: if you sign up through a friend's link in the app, we record whose code brought you. Clicks on invite links are counted per link and day, never per person.
• Technical logs: our servers keep request logs (IP address, endpoint, timestamps, and your account id when you are signed in) for security, abuse prevention and rate limiting, for 30 days.

What other people can see

• Your profile, your comments and posts, and your public playlists are public — also on poppukon.net, where search engines can find them. Make your profile private, or switch social features off, in Settings.
• Your friends can see when you are online and what you are watching, unless you switch that off in Settings.
• Direct messages are private between you and the other person. Staff see a message only when one of you reports it.

Cookies

When you sign in on poppukon.net we set one cookie that keeps you signed in. The website sets no other cookies, and none for advertising or tracking.

What we do not do

• We host no audio-visual content and keep no record of what third parties serve you.
• We do not sell or share your data with advertisers or data brokers.
• We embed no third-party analytics, crash-tracking or advertising SDKs.

Third parties the app talks to

The app fetches public catalogue metadata (titles, artwork, episode data) from services such as AniList, MyAnimeList and TMDB; those requests go to their servers under their own policies. Anything you play from the internet comes from independent third parties: your device talks to them directly, and their handling of your requests is their own — we receive nothing from them. Casting to a Chromecast uses Google's Cast framework on your device; casting to a TV over your home network stays on your network.

Credits

Show data comes from AniList. Artwork comes from TMDB and TheTVDB. This website and the Poppukon app use TMDB and the TMDB APIs but are not endorsed, certified, or otherwise approved by TMDB.

Where your data lives and how long

Your data is stored on our own servers and kept while your account exists. Request logs are kept for 30 days, and notifications you have read are removed after a week. When you delete your account it is removed after 30 days (you can change your mind until then), and with it your lists, history, playlists, settings, friendships, playback reports and devices. Comments, posts and messages you wrote stay where they are but are no longer linked to you or your name; delete them yourself first if you want them gone, or ask us via the contact page.

Children

Poppukon is not meant for anyone under 13, and you may not create an account if you are under 13 (or under the age your country requires to use online services without a parent's consent). If you believe a child under that age has an account, tell us through the contact page and we will delete it.

Your choices

• Use the app without linking any external account.
• Make your profile private, or switch social features off entirely in Settings — you then leave search, presence and the social graph.
• Download your list from your account page.
• Delete your account from your account page, or ask us to — or ask for a copy of your data — via the contact page.

Changes

If this policy changes materially we will say so in the app's announcements.