← back

Privacy Policy

Last updated: May 2026

What this site does

Pyomo-chan's MAL Roaster is a novelty anime web app. You can enter a public MyAnimeList or AniList username, connect your own anime list, generate roasts and report cards, compare taste with a friend, play Predict the Weeb, or ask for seasonal and retro recommendations.

The app only works with anime list data that is public on the source service. We do not log in to MyAnimeList or AniList on your behalf, and we cannot access private lists.

Accounts and sign-in

Signing in with Google is optional, but it is required for account features such as saved report cards, credits, subscriptions, linked anime lists, taste duels, and some recommendation/game features.

If you sign in, we store account records in a Neon/Postgres database. These records can include your Google account email, name, profile image URL, internal user ID, display name, account creation date, premium status, credit balance, and connected anime list details.

What data we collect

Roast sessions

When you enter a MAL or AniList username, we fetch that public list, trim it into a smaller summary, and create a Redis session token so later roast/report-card requests can be checked against the same list. The token record contains the username, provider, and a digest of the list payload, and expires after about 1 hour.

Signed-in features

For signed-in users, we may store the anime list provider and username you connect, a snapshot of public list titles/scores/basic stats, saved report cards, report-card grades and verdicts, taste duel results, seasonal or retro recommendation outputs, credit balances, credit transaction history, and subscription status.

Payments

If you buy a subscription, payment checkout and billing are handled by Stripe. We store Stripe customer/subscription IDs and subscription status, but we do not receive or store your full payment card details.

Email signup

If you submit the optional email signup form, your email address is sent to Resend and added to an update list. You can use the site without joining that list.

Rate limits and games

Your IP address may be used in Upstash Redis rate-limit keys for API abuse prevention. Predict the Weeb lobbies use Redis to store lobby codes, player tokens, submitted usernames, player names, basic anime-list-derived clues, guesses, and round state while the game is operating.

Cookies and local storage

We do not use behavioral ad tracking or analytics pixels. If NEXT_PUBLIC_PLAUSIBLE_DOMAIN is configured, privacy-friendly Plausible analytics may be loaded on this site. Signed-in users receive essential NextAuth authentication cookies. The browser may also use local storage for in-progress UI state, such as restoring a roast flow after sign-in.

Public and shareable content

Some features are built for sharing. If a report card is marked public, selected fields such as the MAL/AniList username, provider, grade, elitist percentage, verdict, and creation date may appear in public card feeds. Taste duel share pages can expose both usernames, providers, scores, grades, verdicts, callouts, and Open Graph preview images to anyone with the link.

Predict the Weeb lobby state is visible to participants who have the lobby code or player token. Do not submit someone else's username unless you have permission to use it in that context.

AI generation

Roasts, report cards, taste duel analysis, and recommendations may be generated by local templates or by configured AI providers. The app may send a trimmed anime list summary, username, provider, stats, list portrait, and prompt context to Anthropic Claude, Google Gemini, xAI Grok, or OpenAI. We avoid sending raw source API responses to AI providers.

Each AI provider handles submitted data under its own policies. Output can be wrong, repetitive, or harsher than intended.

Third-party services

MyAnimeList, AniList, and Jikan

We use the MyAnimeList API, AniList API, and Jikan to fetch public anime list data and public user stats. Their policies apply to data they process: MyAnimeList privacy policy, AniList privacy policy, and Jikan.

AI providers

Configured AI generation may use Anthropic, Google Gemini, xAI, or OpenAI. Their policies apply: Anthropic, Google, Gemini API terms, xAI, and OpenAI.

Infrastructure and billing

We use Neon for Postgres database hosting, Upstash Redis for rate limits and temporary tokens/state, Vercel for hosting, and Stripe for subscriptions and billing.

Email, fonts, and donations

Optional email signups are handled by Resend. The site loads web fonts from Google, which may receive standard request metadata under the Google Privacy Policy. Ko-fi donation links go to Ko-fi, an external site with its own policies.

Data retention and deletion

Redis roast-session tokens expire after about 1 hour. Rate-limit keys are retained only for the applicable rate-limit window. Account records, linked anime list snapshots, credits, subscriptions, saved report cards, taste duels, and recommendations are retained while your account remains active or as needed to operate the service.

To request deletion of your account, saved report cards, email signup, or other associated data, email pyomosupport@proton.me. Some billing records may need to be retained if required for accounting, fraud prevention, dispute handling, or legal compliance.

No sale of personal data

We do not sell personal data. We also do not use behavioral ad tracking or analytics pixels.

Children's privacy

This site is not directed at children under 13. If you are under 13, do not sign in or submit your email. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact pyomosupport@proton.me and we will delete it.

Changes to this policy

If this policy changes meaningfully, the "last updated" date at the top will reflect that.

Contact

Questions or deletion requests? Email pyomosupport@proton.me or reach out via Ko-fi: ko-fi.com/animeroaster.