Legal
Privacy Policy
Last updated
This describes what Kaiken actually stores, rather than what a generic policy would let us store. If something here stops being true, this page changes.
You can use Kaiken without an account
Browsing, searching, watching, and reading all work signed out. Signed out, everything Kaiken remembers about you — what you were watching, your list, your player and reader preferences, your chosen title language — is kept in your own browser's local storage and never sent to us. Clearing your browser data erases it, and we have no copy.
What we store if you create an account
- Your email address — so you can sign in and reset your password.
- Your username — shown publicly next to any comment you post.
- Your password, stored only as a hash. We cannot read it, and neither can anyone who obtains the database.
- Your list and playlists — the titles you saved, their status, and any score you gave them.
- Your reading position — which chapter and page you reached, so the reader can resume.
- Comments and reactions you post, which are public by design.
- An AniList link, only if you connect one — your AniList ID, name, and access token, so your list can sync. Disconnecting removes the token.
- An avatar URL, if you signed in with Google or set one yourself.
That is the complete list. We do not store your real name, your address, your date of birth, or any payment details, because Kaiken never asks for them and has nothing to charge you for.
IP addresses
Requests reach our servers with your IP address attached, as every request on the internet does. We use it for one purpose — rate limiting, so one person cannot flood sign-in attempts, comments, or the contact form. It is stored as a truncated one-way hash with a short expiry, is never written to the database, and is not linked to your account.
Our infrastructure providers and Cloudflare keep their own connection logs under their own policies, which we do not control.
Analytics
Kaiken records anonymous page-performance measurements — how quickly a route loaded and rendered. These are stored against the route, not against a person: there is no user ID, no IP address, and no identifier in them, so they cannot be traced back to you. We use them to find slow pages.
There is no third-party analytics script, no advertising network, no tracking pixel, and no cross-site profiling on Kaiken.
Signing in with Google or AniList
If you choose to sign in with Google, we receive your email address, your display name, and your profile picture URL from Google. The email becomes your account, the name is used to suggest a username, and the picture is used as your avatar. We do not receive or keep your Google password, and we do not retain Google's access token after sign-in.
If you connect AniList, we keep the access token you granted so your list can sync. It is used for that and nothing else, and disconnecting removes it.
Cookies
Kaiken sets two cookies, both strictly necessary and neither used for advertising or profiling. The first is a session cookie that keeps you signed in. The second is a short-lived cookie set only while a Google or AniList sign-in is in progress, which exists to stop someone forging that sign-in on your behalf; it is deleted as soon as the sign-in finishes.
If you never sign in, neither is ever set. Everything else Kaiken remembers uses local storage, which is not sent to any server.
Third parties
When you play an episode or open a chapter, that media comes from a third-party service. Those services see the request and are governed by their own privacy policies, not this one. Kaiken proxies media requests where it can, which means those services generally see our server rather than you — but this is a technical consequence, not a privacy guarantee we can make on their behalf.
We use a third-party provider to deliver transactional email (password resets and contact-form messages). We do not sell, rent, or trade your data, and we do not share it with anyone except where we are legally required to.
How long we keep things
Account data is kept until you delete your account. Password reset tokens expire within an hour. Rate-limit hashes expire within the day. Anonymous performance measurements are kept in aggregate.
Your rights
You can ask us for a copy of what we hold about you, ask us to correct it, or ask us to delete it entirely. Deleting your account removes your list, playlists, reading progress, and AniList link along with it. Comments you posted publicly may be retained in anonymised form so that replies to them still make sense; tell us if you want them removed too and we will remove them.
To make any of these requests, use the contact form.
Children
Kaiken is not directed at children under 13, and we do not knowingly hold data about them. If you believe a child has created an account, contact us and we will remove it.
Changes
If this policy changes, the date at the top changes with it. Continued use after a change means you accept the updated policy.