Privacy Policy

This privacy policy explains how the Nyalist Website collects, uses, and protects your information.

When you log in with Discord we store:
• Your Discord user ID
• Your Discord username and display name
• Your Discord avatar URL

If you create a Nyalist account (username + password), we additionally store:
• Your chosen username
• Your email address (optional, but required for password recovery)
• A hashed password (never stored in plain text)

We also store data you create on the website (collection, achievements, trades, marketplace activity, friends, etc.) so the features work.

Your data is used to:
• Make the features of the website function (profile, collection, trading, marketplace, etc.)
• Display your public profile to other logged-in users
• Track quests, achievements, and event progress

If you have provided an email address, we use it to:
• Send you a password reset link if you forget your password
• Send you important service announcements (new features, maintenance notices, etc.)
• Respond to your support requests

We will not email you to sell you any products. The only exception may arise if we decide to open up donations in future, this will be a one-time announcement email, not persistent marketing

Your data is stored locally on the server that runs the website. Only the website owner (and you) can see your private data. Some data (avatar, display name, etc.) is visible to other logged-in users when they view your profile.

Emails are sent via our own self-hosted mail server. Your email address
is stored in our database and used only for the purposes described above.

Password reset tokens are single-use, expire after 1 hour, and are stored in
our database only until they are used or expire.

We do not sell, trade, or otherwise share your personal data with third parties for advertising or commercial purposes.

Email Communications
When you provide an email address, you will receive:
• Password reset emails (only when you request one)
• Announcements regarding Website/Discord Bot updates
• Replies to any support requests you send to [email protected]

You will NOT receive:
• Requests for your password or other personal/private information (If you receive an email of this nature, ignore it.)
• Third-party advertising

Emails are sent via [email protected]. If you reply to an automated email
(such as a password reset), the reply will not be read. For all support
inquiries, please email [email protected] directly.

To remove your email address from your account, visit
Profile → Password & Login and delete it. Note that without an email,
you will not be able to use the password recovery feature.

If you ONLY use username + password login, we CANNOT help you recover your account if you do not have an email linked, we simply do not have the identifiable data necessary to ensure that you are the rightful owner of your account (As stated prior, we do not even track IP information). It is your responsibility to ensure that you secure your account.

To ensure that you do not lose your account

• Link an email
• Setup 2fa
• Link a discord account

We use Discord OAuth2 for authentication (if you enable discord login). Please refer to Discord's own privacy policy for how they handle your data: https://discord.com/privacy

You can edit your profile, showcase, and settings at any time. To request full deletion of your account and all associated data, contact us via [email protected] with the subject 'GDPR Removal'

We extend GDPR data removal rights to all users worldwide, allowing you to request the complete deletion of your data regardless of your location.

If this policy is updated, the 'Last updated' date above will change. Continued use of the wesbite (or discord bot for applicable sections) after an update means you accept the revised policy

From launch, we used AniList API, JIKAN API and VNDB API in order to fill data in the following places;

• Visual Novel Database/Tracking
• Anime Database/Tracking
• Manga Database/Tracking
• Light Novel Database/Tracking

Over time, we intend to replace these entries and phase out the usage of these API's entirely, when that happens, this section will be amended with a clear date of WHEN we ceased using these sources.

JIKAN API: https://jikan.moe/ (Ceased using: 2026-07-03)
AniList API: https://docs.anilist.co/ (Ceased using: 2026-07-07)
VNDB API: https://api.vndb.org/kana

If you have questions about this privacy policy, please contact us via [email protected]