Last updated 15 November 2026
This policy explains what Taiyō collects, why we collect it, who else sees it, and the control you have over it. We have tried to write it in plain language rather than in the shape of a liability shield.
This policy applies to the Taiyō website and to any account you hold with us. It does not apply to sites we link to, which have their own policies.
For the purposes of the UK and EU GDPR, the operator of Taiyō is the data controller for the information described here.
Account information. Your display name, email address, and a hashed form of your password. We never store your password in a form we can read. If you sign in with Google or Discord instead, we receive your email address and basic profile information from them, not your password. If you turn on two-factor authentication, we store the secret your authenticator app uses and your backup codes in encrypted form, and a cookie on any device you choose to trust.
Content you submit. Your library entries and reading progress, the custom lists you create, the titles you add to them and the lists you upvote, the users you follow, the chapter pages you upload, the edits you suggest to a title and the note you attach to them, the groups you belong to and the permissions you hold in them, the invitations you send and receive, and the message and links you provide when you ask to take ownership of a group or to create one. When you take part in discussions we store the comments and replies you post on titles, chapters, groups and profiles, the earlier versions of a comment you edit (visible to moderators only), the images and GIFs you upload for them, the images you favorite, the comments you upvote, and the reports you send about comments or chapter pages. Uploaded images are re-encoded and stripped of their metadata, such as camera details and location, before they are stored; one that no comment uses and nobody favorited is deleted after a day.
Your public profile. The avatar and banner you upload, and whatever you choose to add about yourself: an about text, your city, country, gender and birth date. Everything here is optional and shown publicly on your profile, along with the title and name effect you pick. Your comments are public too, on the page you posted them, and so are the lists you make public, on your profile and on the lists page. Your reading and library statistics are shown on your profile, unless you hide your library.
Notifications. The notifications we create for you — new chapters of the titles in your library and of the groups you follow, replies to your comments, upvotes on your comments and new followers — and when you read them, kept for up to a year. For upvotes and follows we also record who caused them, so each person notifies you once; we show you who followed you, but upvotes stay anonymous and only their number is shown. If you turn on push notifications on a device, we store the address its browser gives us for delivering them and the keys that encrypt them, until you turn them off, sign out there, or the browser stops accepting them.
Technical information. Your IP address, browser and device type, and the pages you request, recorded in server logs. We use this to keep the Service running, to investigate abuse, and to diagnose faults.
Audience measurement. To know how many people visit and how they find us, we count visits with Umami, which we host ourselves: the pages you view, the site that sent you, your browser, operating system, device type, screen size and language, and the country, region and city derived from your IP address. Umami sets no cookie and does not store your IP address; it groups your page views under an identifier that changes every month, so it cannot follow you over time or across sites.
Anti-abuse signals. When you sign up we use Cloudflare Turnstile to tell humans from bots. Turnstile receives technical signals from your browser; it is designed not to profile you across sites.
We do not sell your personal information, and we do not use it to build advertising profiles.
Some of our providers operate outside your country. Where personal information leaves the UK or the EEA, we rely on an adequacy decision or on the UK Addendum and the EU Standard Contractual Clauses, together with additional safeguards where they are needed.
We keep account information for as long as your account exists. When you delete your account we remove or anonymise your personal information within 30 days, except where we must keep something longer — for example, records of copyright notices, or information needed to stop a suspended user returning.
Server logs are kept for a short period, normally no more than 90 days, and then deleted. Audience measurement data is deleted after 90 days. Backups roll off on their own schedule.
Depending on where you live, you have some or all of the following rights over your personal information:
Write to [email protected] and we will respond within one month. You also have the right to complain to your local data protection authority; in the UK that is the Information Commissioner’s Office.
Traffic is encrypted in transit, passwords are hashed, and access to production systems is limited to the people who need it. No service is perfectly secure, so if we discover a breach that is likely to put your rights at risk, we will notify you and the relevant regulator as the law requires.
Taiyō is not directed at children under 13, or under 16 in the EEA and the UK. If we learn that we hold personal information about a child below the applicable age, we will delete it. If you believe a child has given us information, contact us at [email protected].
When this policy changes we update the date at the top of the page. If a change materially affects how we use your information, we will give notice in the product or by email before it takes effect.
Privacy questions, access requests, and deletion requests all go to [email protected].