Privacy Policy
Last Updated: May 4, 2026
1. Information We Collect
We collect information you provide directly to us (Email address, Username) and automated technical data (IP Address, Browser Type, Device Information) to ensure platform security and provide our services.
2. How We Use Your Data
Your email is used for account recovery and security notifications. Your IP address is tracked to prevent abuse, spam, and to enforce platform bans. Anime lists and messages are stored to provide the core KuroList experience.
3. Data Storage & Security
All data is stored in our secure database with industry-standard encryption. Passwords are never stored in plain text; we use high-entropy hashing (bcrypt) to protect your identity.
4. Cookies & Local Storage
We use essential cookies and local storage to keep you logged in and remember your preferences (Theme, Language). During a MyAnimeList OAuth connection, short-lived secure HTTP-only cookies (mal_verifier, mal_state) are set for the duration of the OAuth handshake and deleted immediately after. We do not use third-party tracking or advertising cookies.
5. Data Sharing & Third Parties
KuroList does not sell your data. We use third-party APIs (Kitsu, Jikan, AniList) for anime data and Resend for transactional emails. These providers only receive the minimal data necessary to function.
5a. Email Verification Tokens
When you register or change your email, we generate a single-use verification token tied to your email address and store it temporarily (24 hours) in our database. The token is deleted immediately after verification or expiry. We use the Resend API to deliver verification messages — only your email address is shared with Resend for this purpose.
5b. MyAnimeList OAuth
When you choose to connect your MyAnimeList account, we store your MAL OAuth access token and refresh token in our database solely to enable automatic nightly list syncs. Tokens are never shared or used for any purpose other than syncing your anime list. The data imported (titles, watch status, progress, scores) is saved to your KuroList library. We do not access your MAL messages, personal profile, or any features beyond the anime list. You can revoke access at any time via your MyAnimeList account settings or by deleting your KuroList account.
6. Your Rights (GDPR/CCPA)
You have the right to access, export, or delete your personal data at any time. You can manage these options directly from your account settings menu.
7. Account Deletion
When you delete your account, all personal data (Email, IP history, Lists, Messages) is permanently purged from our active database. Automated backups are cleared within 7 days.
8. Platform Governance
To maintain community safety, we reserve the right to ban users by Email or IP Address. Banned identifiers are kept in a separate secure list to prevent re-registration by malicious actors.
9. Children's Privacy
KuroList is not intended for children under 13. We do not knowingly collect information from children. If we discover such data, we will delete it immediately.
10. Updates to this Policy
We may update this Privacy Policy to reflect changes in our practices. Continued use of the platform after updates constitutes acceptance of the new policy.
11. Data Controller
The data controller for KuroList is KuroYamiiTV. All data is managed with the intent of providing the best possible user experience while maintaining strict security.
Your privacy is our priority. If you have questions, contact us at: