Privacy policy
Last updated 26 October 2026
Sugoidex is an anime tracker and news site. We collect as little as we can: no ads, no third-party analytics, no tracking cookies. This page explains what we do store, why, and what you can do about it.
Who is responsible
The data controller is Sugoidex. Questions and requests: [email protected].
What we store
- Your account: username, email address, optional display name, and your password as a one-way scrypt hash (we never see or store the password itself).
- Your list: the anime you track, with status, episode progress, score, notes and dates.
- Sessions: when you log in, a hashed session token with its creation and expiry time, so you stay logged in.
- Visit statistics: which pages are viewed, and a few actions (signing up, logging in, saving to your list, importing from MyAnimeList). See Statistics below.
- MyAnimeList imports: an uploaded export file is read once to fill your list and is not kept.
If you browse without an account, we only count your visit anonymously (see below). Our own server doesn't keep access logs with IP addresses.
Statistics
To see how the site is used, our own server counts page views. No script runs in your browser
for this and no cookie is set. For each page view we store the time, the page address, the
country (from Cloudflare), the website that sent you here (only its name, such as reddit.com), and a visitor code.
The visitor code is a one-way hash of your IP address and browser version, mixed with a random value that changes every day. We never store your IP address, and the daily value is deleted the next day, so the code can't be traced back to you or linked to your visits on other days.
If you're logged in, the page views and actions are linked to your account, so we can see how the site is used by its members. They're included in your data download and deleted with your account. We don't use them for advertising or share them with anyone.
If a page breaks on our side, we record the error with the time, the page address and, if you're logged in, your username, so we can fix it. These reports are kept like the statistics; copies in the server's log files are overwritten as the logs fill up.
Why (legal basis)
- Account, list and sessions: to provide the service you signed up for (GDPR art. 6(1)(b)).
- Security, such as blocking abuse at our network provider: our legitimate interest in keeping the site running and safe (art. 6(1)(f)).
- Statistics: our legitimate interest in understanding how the site is used so we can improve it (art. 6(1)(f)). You can object by emailing us; logged-in statistics end when you delete your account.
We don't sell your data, use it for advertising, or share it with anyone else.
Cookies
We only use cookies that the site needs to work, so we don't ask for consent and there's no cookie banner.
| Cookie | What it does | How long |
|---|---|---|
sugoi_session | Keeps you logged in. Only set after you log in. Not readable by scripts. | 30 days after your last visit, or until you log out |
tz | Your time zone (such as Europe/Oslo), so the airing schedule shows your own
days and times. | Until you close the browser |
__cf_bm, cf_clearance | Set by Cloudflare, our network provider, only when needed to tell people from bots. | Up to 30 minutes / as set by Cloudflare |
Other services your browser talks to
- Cloudflare carries all traffic to this site and protects it from attacks. It sees your IP address and the pages you request, and processes them on our behalf under its data processing addendum. Cloudflare may process data outside the EEA, under the EU–US Data Privacy Framework and standard contractual clauses.
- Images are loaded straight from where they're hosted: anime covers from AniList (
anilist.co), news pictures from the outlet that published the story, and video thumbnails from YouTube (ytimg.com). Those servers see your IP address, like any website you visit. - YouTube videos in our articles only load when you click play. From then on, YouTube (Google) can set cookies and collect data under Google's privacy policy.
- Links to news stories and other sites take you to those sites, under their own privacy policies.
How long we keep it
- Your account and list: until you delete your account.
- Sessions: until you log out, or 30 days without a visit.
- Statistics: 13 months, then deleted automatically.
- Backups: a nightly database backup is kept for 14 days, so deleted data is gone from backups within two weeks.
Your rights
You can, at any time:
- Download your data (access and portability) from your account page.
- Delete your account from your account page. This removes your account, list, sessions and the statistics linked to your account right away.
- Ask us to correct your data, restrict or object to how we use it, by emailing [email protected].
- Complain to a data protection authority. In Norway that's Datatilsynet; elsewhere in the EEA, your local authority.
Children
Sugoidex accounts are for people aged 13 and over.
Changes
If we change this policy, we'll update the date at the top. If a change matters for how we use your data, we'll tell you on the site before it takes effect.