Privacy Policy

When you create an account, we store:

• Your name and email address (email is never shown to other users).
• Your password, hashed — we never store or see it in plain text.
• Your timezone (used only to group your sessions into days).
• Behavioral data you create by using the app: immersion sessions (what, when, for how long), library entries and progress, goals, session notes, follows, kudos, and club memberships/picks/votes.
• Basic technical data needed to keep you signed in and rate-limit abuse (session tokens, IP address).

To provide the service itself: tracking your immersion time, showing your library and stats, and powering the optional social features (leaderboards, feed, clubs) if you keep your profile public. We don’t use your data for advertising profiling, and we don’t sell it.

We process your account data to perform our contract with you (running the service you signed up for). If we ever send non-essential email, we’ll ask for consent first. You can withdraw consent or object to processing at any time by adjusting your settings or deleting your account.

If your profile is public (the default; you can turn this off in Settings), your name, image, activity feed entries, and stats are visible to other signed-in users. Session notes and club names/descriptions are free text you write and are visible to whoever can see that session or club. We don’t share your data with third parties except the infrastructure needed to run the service (hosting, database, and transactional email delivery for password resets/verification).

Cover art, titles, and descriptions for media come from AniList, VNDB, TMDB, and Google Books. Searching those sources may send your query to them; see their own privacy policies for how they handle that.

We keep your data for as long as your account exists. If you stop using the service without deleting your account, your data stays until you delete it or ask us to.

You can, at any time, from Settings:

• Export a copy of your data as a JSON file (Settings → Your data).
• Delete your account and all associated data (Settings → Danger zone). This is permanent and cannot be undone.
• Correct inaccurate profile data yourself (name, timezone) from Settings.

If you’re in the EU/UK and believe we’ve mishandled your data, you also have the right to lodge a complaint with your local data protection authority.

Passwords are hashed, not stored in plain text. We use standard measures (HTTPS, secure session cookies, rate limiting) to protect your data, but no system is perfectly secure.

Questions, or a data request you’d rather we handle manually: privacy@immersionlog.com.