← Back to AniMarket

AniMarket — Privacy Policy

1. Information We Collect

When you use AniMarket, we may collect:

• Account Information — your email address and display name when you register.
• Profile Data — display name, avatar, bio, and preferences you choose to share.
• User-Generated Content — chat messages, comments, poll votes, suggestions, and profile text you submit to the platform.
• Usage Data — pages visited, features used, votes cast, cards pulled, and other in-app activity.
• Virtual Currency Records — in-game virtual currency balances, earnings, and spending within the platform. This currency has no real-world monetary value.
• Payment Information — when you purchase a subscription or item via Stripe, payment is processed entirely by Stripe. We do not store your card details.
• Communications — support tickets and messages you send us.

2. Google User Data — Data Accessed

AniMarket uses Google API Services (Google Sign-In / OAuth 2.0) to authenticate users. Our use of Google API Services complies with the Google API Services User Data Policy and the Google APIs Terms of Service. When you sign in with Google, the following types of Google user data are accessed, collected, or interacted with:

• Email Address — your Google account email address. This is the only persistent Google user data we store. It is used as your unique account identifier.
• Full Name — your Google account full name. This is used once during account creation to pre-fill your AniMarket display name. You can change it at any time. It is not retained from Google after initial profile population.
• Profile Picture URL — the URL of your Google account profile picture. This is used once during account creation to pre-fill your AniMarket avatar. You can change it at any time.
• OpenID Connect ID Token — a transient, cryptographically signed authentication token received during the OAuth 2.0 sign-in flow. It is used solely to verify your identity at the moment of sign-in and is never stored in our database.

OAuth Scopes Requested: We request only the minimum scopes necessary for authentication: `openid`, `email`, and `profile` (basic profile). We do NOT request access to any of the following: Gmail messages, Google Drive files, Google Contacts, Google Calendar, Google Photos, Google Sheets, Google Docs, Google Slides, Google Tasks, Google Analytics, Google Search Console, Google BigQuery, YouTube data, or any other Google service. We do NOT use any restricted Google API scopes or the Google People API.

No Additional Google Data: We do not access, read, transmit, or interact with any Google user data beyond the email, name, and profile picture described above. We do not aggregate, analyze, or derive additional data from your Google account.

No Google API Use for Imagery or AI-Generated Content: AniMarket does not use any Google API Service to generate, process, store, or distribute images or AI-generated content of any kind, and does not create, request, store, or distribute AI-generated non-consensual intimate imagery (NCII) or any other abusive material. Our use of Google API Services is limited strictly to the sign-in authentication described in this policy, and complies with the Google APIs Terms of Service and the Google API Services User Data Policy.

3. Google User Data — Data Usage

The Google user data we access is used exclusively for the following purposes, all of which are necessary to operate the AniMarket platform:

• Authentication & Account Creation — your Google email is used to create and identify your AniMarket account. When you sign in with Google, we verify your identity via Google's OAuth 2.0 flow and link your Google email to your AniMarket account. This is the primary purpose for accessing your Google user data.
• Profile Population — your Google full name and profile picture URL are used once, at account creation, to pre-fill your AniMarket display name and avatar. You can change both at any time from your Profile → Edit Profile dialog. After initial population, we do not re-fetch or sync this data from Google.
• Login Session Management — upon successful Google authentication, we create a login session so you remain logged in across pages. We do not access your Google account outside of the sign-in moment. We do not use incremental or additional authorization after the initial sign-in.
• Account Security — your email is used for account recovery, security notifications, and preventing duplicate or fraudulent accounts.
• Communication — your email may be used to send you service-related communications such as support ticket responses.

We do NOT use your Google user data for any of the following: serving personalized or interest-based advertising; selling or transferring data to advertising platforms, data brokers, or information resellers; training AI or machine learning models; building profiles about you for surveillance purposes; determining credit-worthiness; or any purpose other than operating your AniMarket account. Your Google data is never used to personalize ads on AniMarket or any third-party platform.

Limited Use Compliance: Our use of Google user data complies with the Limited Use requirements of the Google API Services User Data Policy. We limit our use of data to providing and improving user-facing features that are prominent in the AniMarket user interface. We do not allow humans to read your Google user data except for security purposes (e.g., investigating abuse) or as necessary to comply with applicable law.

4. Google User Data — Data Sharing

We do NOT share, sell, rent, or trade your Google user data with any third party. Specifically:

• No Third-Party Sharing — your Google email, name, and profile picture are not sold, rented, traded, or shared with any external company, advertiser, or third-party service.
• No Advertising Partners — your Google user data is never shared with advertising networks (including Google Ads, Google AdSense, or any other ad platform) for ad personalization, retargeting, or audience building. While AniMarket displays ads via Google AdSense, your Google sign-in data is completely separate from the advertising system and is never used for ad personalization.
• No Data Brokers — we do not share your Google data with data brokers, analytics platforms that identify individuals, or any entity that aggregates personal data for resale.
• No AI/ML Training — your Google user data is never used to train AI or machine learning models, whether our own or third-party.
• No Surveillance — we do not access, aggregate, or analyze Google user data for display, sale, or distribution to any third party conducting surveillance.
• Internal Use Only — your Google email is stored in our database and used internally by our authentication system and backend services. It is not transmitted to any external API or service beyond the initial Google sign-in verification.
• Service Providers — we do not use any third-party service providers that process your Google user data. Payment processing is handled by Stripe, which is completely separate from Google authentication.
• Legal Requirements — the only exception is if we are required by law, court order, or government authority to disclose data, in which case we would share only what is legally required and only the minimum necessary.
• Merger or Acquisition — in the event of a merger, acquisition, or sale of assets, we would obtain your explicit prior consent before transferring your Google user data to the acquiring entity.

Your Google user data remains within AniMarket's secure infrastructure and is never exported, synced, or forwarded to any external system.

5. Google User Data — Data Storage & Protection

We protect your Google user data using industry-standard security practices:

• Secure Database Storage — your Google email is stored in our encrypted, access-controlled database. Only authorized backend system components can read this data. Frontend code never has direct database access — all data operations go through authenticated API endpoints.
• Authentication Tokens — Google OAuth tokens are used transiently during the sign-in flow and are not stored long-term in our database. We do not store your Google password, refresh tokens, or any Google account credentials. Google handles authentication entirely on their side; we only receive the ID token and basic profile info during the sign-in callback.
• Row-Level Security (RLS) — your account data is protected by row-level security policies that prevent other users from accessing your personal information. Each user can only read and modify their own data.
• Encryption in Transit — all data transmitted between your browser and our servers uses HTTPS/TLS encryption. This includes the OAuth callback from Google and all subsequent API requests.
• Access Control — only our backend services have access to user email records. Administrative access is restricted to authorized personnel and logged for audit purposes.
• No Sensitive Google Data Stored — we never store Google payment credentials, Google passwords, Google OAuth refresh tokens, or any sensitive Google account credentials. We only store the email address as a persistent identifier.
• No Card Data Stored — we never store credit card or payment information. All real-money transactions are processed by Stripe, which is PCI-DSS compliant.
• Breach Response — in the unlikely event of a data breach involving your Google user data, we would notify affected users and relevant authorities promptly and in accordance with applicable laws.
• Secure Operating Environment — we maintain a secure operating environment for all systems that make use of Google API Services and any data derived from them, protecting against unauthorized or unlawful access, use, destruction, loss, alteration, or disclosure.

6. Google User Data — Data Retention & Deletion

We retain your Google user data only as long as your AniMarket account is active:

• Retention Period — your Google email is retained for the lifetime of your AniMarket account. If you stop using AniMarket, your data remains until you request deletion. We do not retain Google profile pictures or full names beyond initial profile population — those are replaced by whatever you set in your AniMarket profile.
• Account Deletion — you can permanently delete your AniMarket account at any time. To do so, go to your Profile page, click the Edit button on your profile header, scroll to the Danger Zone section at the bottom of the Edit Profile dialog, and click Delete. You will be asked to type DELETE to confirm. Account deletion removes your Google email, profile data, cards, virtual currency, transactions, and all associated records. This action is irreversible.
• Alternative Deletion Methods — you can also request account deletion by contacting us via the Contact page. We aim to process deletion requests within 48 hours.
• Data Removal Process — upon account deletion, your Google email and all associated profile information are permanently removed from our database immediately. The deletion process wipes all user-owned data including cards, albums, transactions, notifications, bets, comments, chat messages, and settings. Some anonymized, aggregate data (e.g., total vote counts, total pulls) may be retained as they no longer identify you.
• Revoking Google Access — you can also revoke AniMarket's access to your Google account at any time from your Google Account security settings (myaccount.google.com → Security → Third-party apps with account access). Revoking access prevents future sign-ins but does not delete your AniMarket account or its data — you must delete your account separately using the method above if desired.
• Data Portability — upon request, we will provide you with an export of your account data in a machine-readable format. Contact us via the Contact page to request a data export.
• Moderation Logs — user-generated content (chat messages, comments) may be retained in moderation logs even after account deletion for security, legal, and audit purposes. This retained content does not include your Google profile data (email, name, picture).
• Legal Retention — we may retain certain data longer than the standard retention period if required by law, regulation, or legal proceedings.

7. How We Use Your Information

We use your information to:

• Operate and improve the platform and its features.
• Personalize your experience (leaderboards, profile, collection, showcase).
• Process in-app virtual currency transactions and Stripe payments.
• Send notifications you opt into (new events, giveaways, etc.).
• Respond to support requests.
• Moderate user-generated content (chat, comments, profiles) for community safety.
• Maintain security and prevent abuse, cheating, and multi-accounting.
• Analyze aggregate usage trends.

8. User-Generated Content & Moderation

AniMarket allows users to submit content including chat messages, comments on polls/episodes, profile text, and suggestions. This content is subject to automated and manual moderation.

• Content Screening — all user-submitted text is screened by AI-based content moderation for spam, harassment, NSFW content, and prohibited language.
• Image Screening — uploaded images (avatars, profile backgrounds, card art) are screened for inappropriate content.
• Reporting — users can report any message or comment for review by our moderation team.
• Enforcement — violations may result in content removal, warnings, chat suspensions, or permanent bans.
• Data Retention — user-generated content is retained for the lifetime of your account. Deleted content may be retained in moderation logs for security and audit purposes.
• Visibility — your display name, avatar, bio, and public profile sections are visible to other users based on your privacy settings.

9. Virtual Currency

AniMarket uses a virtual in-game currency for entertainment purposes only:

• No Real-World Value — the virtual currency has no monetary value and cannot be exchanged for cash, cryptocurrency, or any real-world currency.
• No Withdrawal — there is no withdrawal, cash-out, or transfer mechanism for virtual currency.
• Platform Control — balances may be adjusted by the platform for technical, security, or policy reasons (e.g., correcting exploits or bugs).
• Not Gambling — earning, spending, or losing virtual currency through any in-game feature does not constitute gambling. No real money can be won or lost.
• Purchase Separation — real-money purchases (subscriptions, pull resets, event tickets) are processed by Stripe and are separate from the virtual currency system.

10. Third-Party Advertising (Google AdSense)

AniMarket uses Google AdSense to display advertisements. Google may use cookies to serve ads based on your prior visits to AniMarket or other websites.

• You can opt out of personalized advertising at Google's Ads Settings.
• Learn more at policies.google.com/technologies/partner-sites.

Third-party vendors use cookies to serve ads based on prior visits. These cookies do not contain personally identifiable information.

11. Cookies & Tracking Technologies

AniMarket and its partners use cookies to:

• Maintain your login session.
• Remember your preferences and settings.
• Serve relevant ads via Google AdSense.
• Analyze site traffic and usage.

You can control cookies through your browser settings. Disabling cookies may affect some functionality.

12. Stripe Payments

All real-money transactions (subscriptions, event tickets, pull resets) are processed by Stripe, Inc. AniMarket does not store, process, or transmit your payment details. By making a purchase, you agree to Stripe's Privacy Policy (stripe.com/privacy).

13. Data Sharing & Disclosure

We do not sell, rent, or trade your personal information. We may share it in limited circumstances:

• Service Providers — trusted third parties (Stripe, Google) under strict confidentiality.
• Legal Requirements — if required by law, court order, or government authority.
• Protection of Rights — to protect AniMarket, our users, or the public.

14. Data Retention

We retain your account data for as long as your account is active. You can request deletion at any time through the Profile page or by contacting us. Aggregate, anonymized analytics may be retained longer. User-generated content may be retained in moderation logs even after account deletion for security and audit purposes.

15. Age Requirements & Children's Privacy

AniMarket is intended for users aged 13 and above. We do not knowingly collect personal information from children under 13.

• Age Restriction — by registering an account, you confirm you are at least 13 years old. Users under 18 should have parental permission to use the platform and make any purchases.
• Parental Controls — parents or guardians who believe a child under 13 has registered should contact us immediately so we can delete the account.
• Young Users — anime communities include many young fans. We moderate content to maintain a safe environment, but parents should supervise minors' online activity.

16. Security

We implement reasonable security measures to protect your information. However, no method of transmission over the internet is 100% secure. We encourage you to use a strong, unique password.

17. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data.
• Object to processing of your data.
• Data portability.

To exercise these rights, contact us via the Contact page.

18. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted here with an updated effective date. Continued use of AniMarket after changes constitutes acceptance.

19. Contact Us

If you have questions about this Privacy Policy, contact us via the Contact page or email us at animarketapp@gmail.com. We aim to respond within 48 hours.