Privacy policy

1. Controller

The controller for yorumi.store is Sascha Perkowski, Mühlenstraße 63, 10243 Berlin, Germany. Contact for privacy questions and rights requests: contact@yorumi.store or the contact form.

2. Visiting the website

Hosting systems process connection data needed to serve requests, including IP address, time, requested URL, browser or device information and response status. This supports delivery, troubleshooting and abuse prevention. The basis is our legitimate interest in operating a secure service under GDPR Article 6(1)(f). We currently run no optional analytics or advertising tracking scripts.

3. Accounts, sessions and collections

We process your email, password hash, optional display name and avatar choice, verification and security status, session information including IP address and user agent, and preferences. MFA, when enabled, uses an encrypted authenticator secret and hashed recovery codes. These details provide and protect your account. Without necessary account information, personal features cannot be supplied; browsing without an account remains possible.

We also store the collection and wishlist entries, notes, follows, release watches and notification rules you create. Providing requested features relies on Article 6(1)(b); account security relies on Article 6(1)(f).

4. Messages and enquiries

Release and availability notifications follow your region, event and channel settings. You can change or stop watches. Account security messages are distinct from optional release updates. Email delivery is currently not operational; delivery workflows may instead write message contents and activation or password-reset links to restricted operational logs. They are not made public.

Contact forms and publisher or retailer enquiries process the contact details, message, relevant links and partner information you provide. We use them to answer and prevent abuse, relying on Article 6(1)(b) for contractual or pre-contractual requests and otherwise Article 6(1)(f). Please avoid unnecessary sensitive information.

5. Retailer and affiliate clicks

Opening an offer records its offer and retailer, destination, time and redirect outcome. This can include a pseudonymous click identifier, a daily-derived IP hash and a user-agent hash; an event may be associated with your signed-in account. We rely on legitimate interests in safe redirects, error investigation and reconciling partner attribution under Article 6(1)(f).

Approved affiliate programmes may pass a pseudonymous click identifier to a network such as AWIN. Your email and password are not affiliate link parameters. Networks and retailers become independently responsible for processing on their sites and any required consent. See the affiliate disclosure and AWIN privacy information.

6. Public sharing

Voluntarily sharing a list makes the designated entries and displayed profile details accessible to anyone with its link. Choose recipients carefully. You can revoke sharing, but cannot recall copies already made.

7. Providers and product images

Vercel provides hosting and delivery; DigitalOcean provides PostgreSQL with the currently selected Frankfurt database location. These providers process data to provide their services. Vercel may process data outside the EEA, particularly in the United States. Their published safeguards and transfer information are described in the Vercel privacy notice and DigitalOcean data processing agreement. You can request further information from us.

Some product images load directly from publishers, manufacturers or retailers, including Shueisha, Good Smile, Carlsen, Glénat and the shops identified with offers. Their image servers receive your IP address, browser information and access time; we suppress the Yorumi page URL as a referrer. Providers outside the EEA may be involved. Images support the product display you requested and our legitimate interest in an understandable catalogue under Article 6(1)(f).

8. Retention

Account data and personal lists remain for the account's lifetime or until the relevant entries are removed. Active sessions currently expire within 14 days; expired session records are cleaned after a 30-day grace period. Verification links last 48 hours and reset links 30 minutes; used tokens or tokens expired for at least 7 days are cleaned.

Operational click events currently have a retention period of up to 400 days and administrative or security audit events up to 5 years, followed by scheduled cleanup. Generated account export contents become eligible for cleanup after 30 days and are also cleared during account deletion. Enquiries and evidence are retained as needed to handle requests or meet concrete legal retention and defence requirements. Hosting logs and backups follow providers' operational and deletion cycles; deleted data may remain in a backup until it is overwritten.

9. Your rights

Subject to the statutory conditions, you can request access, correction, erasure, restriction and portability. You can object to legitimate-interest processing for reasons relating to your situation, and object to direct marketing at any time. Consent can be withdrawn for the future. Account settings offer export and deletion requests; you can also contact us directly. Legal retention duties and others' rights may prevent immediate deletion in an individual case.

You can complain to a supervisory authority, including the Berlin Commissioner for Data Protection and Freedom of Information. We do not make solely automated decisions with legal or similarly significant effects under GDPR Article 22.

10. Device storage and updates

See cookies and browser storage for storage purposes, durations and controls. Material changes to features, providers or purposes will be reflected here; any necessary consent will be obtained separately.

11. Optional Google analytics

With your consent under GDPR Article 6(1)(a) and section 25(1) TDDDG, we use Google Analytics 4 through Google Tag Manager (container GTM-KRH8LXTV) to understand page use and product interest. Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland provides the service. Google may process usage events, browser/device information, cookie identifiers and connection data, including processing outside the EEA such as in the United States. See Google’s privacy policy and Google Analytics data safeguards for processing and transfer information.

The site blocks the GTM container until consent. Advertising storage, advertising user data and personalised advertising consent remain denied. Private account, shared-list, authentication and admin pages do not instantiate GTM. Our custom product events contain a catalogue product ID, not an account ID, email, collection notes or payment plans. Settings inside the GTM container determine the analytics tags and their retention. Do not enter personal information into public search fields.

GA4 can store _ga and property-specific _ga_* cookies, potentially for up to two years depending on the tag configuration. Your analytics choice is saved in yorumi_privacy_choices locally, with a corresponding yorumi_analytics cookie for up to 180 days; the local record remains until cleared but stops authorising analytics after 180 days. A session-storage product-view marker avoids counting the same product repeatedly in one tab and is removed with that session. Opted-in product visits also contribute to aggregate daily catalogue counts, retained for up to 400 days; those counts contain no user, IP or cookie identifier.

12. Collector and partner features

Worldwide edition statuses, reading status, cosplay checklists, sizes, notes, target dates, budgets, payment plans and business follows are stored to provide the features you request, under GDPR Article 6(1)(b). They remain private unless an existing collection or wishlist link is deliberately shared; owned/read worldwide entries join collection shares and wanted entries join wishlist shares. Private notes appear only if expressly included. Account exports and deletion include these records. Partner representatives receive access only to assigned businesses. Partner reports can show aggregate interest where at least five distinct accounts qualify; no individual collection or account identity is supplied.

13. Community ratings and reviews

If you submit a rating or review, we store the subject, star rating, optional title and text, language, spoiler flag, timestamps and moderation status with your account. Approved reviews display your public display name (or “Yorumi reader”), rating, text and dates. Your email and account identifier are not published. Pending and rejected submissions are visible to you and authorised moderators. Review reports and moderation reasons are processed to manage abuse; report reasons are not published. You can edit or delete your own review. Account export and deletion include your reviews and reports.