Privacy Policy

The short version

• You can play without an account. Anonymous sample pulls are not saved.
• If you sign in with Google, we keep your account, your username and your game history.
• We don't sell your data, show ads, or use third-party analytics or tracking cookies.
• You can ask us to delete your account and all your data at any time.

What we collect

• Account data (signed-in players only). When you sign in with Google, our authentication provider (Supabase) receives your email address and the basic profile information Google shares (such as your name and profile picture). AniRNG itself only uses your email to identify your account; it is never shown to other players.
• Username. The public name you choose. It appears on the leaderboards and on results you share.
• Country (optional). A country you pick on your profile. It puts you on that country's leaderboard. We never work it out from your IP address or anything else.
• Friends. The players you send friend requests to or accept requests from.
• Game data (signed-in players only): the party and anime you pulled each day, when you revealed it, its score and rarity, and the badges you earned.
• Anonymous identifier. A random id stored in a cookie, so that the same browser gets the same sample pull for the day. It is not linked to who you are.
• IP address. We limit how many requests can be made, to protect the game from abuse. For this we keep a scrambled (keyed hash) form of your IP address, never the address itself, for about a day. This applies to all players, signed in or not.
• Site statistics. We count page views, daily visitors, sample pulls, sign-ins and shares as hourly totals, with coarse labels such as the page, the kind of device (phone, tablet or computer) and the site you came from (for example "google"). No IP address, identifier or browser details are stored with them, so they can't be linked to you. To count a visitor once a day, your browser keeps the date of its last visit in local storage; it is not an identifier.
• Technical data. Our hosting provider keeps standard request logs. If an error occurs, an error report (browser, page and technical details of the error) may be sent to our error monitoring service.
• Moderation records. If an account is suspended, we record when and why.

Why we use it

• To run the game (your account, daily pulls, collection, streaks and leaderboards). Legal basis: performance of our agreement with you (the Terms of Service).
• To keep the game fair and secure (rate limits, moderation, error monitoring). Legal basis: our legitimate interest in running a reliable and fair game.

We don't use your data for advertising, profiling or automated decisions.

What is public

• Your username, country (if you picked one), pulls and scores appear on the leaderboards. The home page lists the day's UR pulls and rarest pull with the username of the player who pulled them ("a player" without one) and the time.
• Your collection is private: only you see it. If you are the first to pull a character, ever or in a season, other players see your username and the date on that character's card. Without a username it shows as "a player".
• Your friend list is private. A player you send a request to sees your username, and your friends see you on their friends leaderboard.
• A result you share is visible to anyone with its link. It shows your username, the date, the party and anime pulled, its score, badges and rank that day. Result pages are kept out of search engines.
• Your email address and account id are never public.

Cookies

AniRNG only uses cookies that are needed for the game to work:

• anirng_anon: the anonymous identifier described above (kept up to 400 days).
• anirng_sample: remembers that this browser already revealed today's sample pull (expires at the daily reset).
• sb-…-auth-token: keeps you signed in (set by Supabase, only if you sign in).

There are no analytics, advertising or third-party tracking cookies.

Who processes your data

We use these providers to run AniRNG. They process data only on our behalf:

• Supabase: database and sign-in.
• Vercel: website hosting.
• Google: sign-in with your Google account.
• Sentry: error monitoring.
• AniList: character and anime images. Your browser loads them directly from AniList's image servers, so AniList sees your IP address. AniRNG never sends AniList anything about you.

Some of these providers may process data outside the European Economic Area. When they do, they rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or the EU–US Data Privacy Framework.

How long we keep it

• Account, username, game history and badges: until you delete your account.
• Scrambled IP addresses used for rate limits: about a day.
• Site statistics: kept indefinitely, as they contain nothing about you.
• Anonymous identifier cookie: up to 400 days, or until you clear your cookies.
• Error reports and hosting logs: for the limited period set by those providers.
• Moderation records: as long as needed to prevent repeated abuse.

Your rights

Under the GDPR you can ask to access, correct, delete or export your data, and to restrict or object to its use. To exercise any of these rights, including deleting your account, email adsdslandicas@gmail.com from the address linked to your account. We will reply within one month.

You can also complain to the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (cnpd.pt), or the authority in your country.

Children

You must be at least 13 to create an account. If you believe a younger child has created one, contact us and we will delete it.

Changes

If this policy changes, we will update the date at the top of this page. Significant changes will be announced in the game.