Privacy

The short version

• Looking around and downloading subtitles needs no account.
• Your email address is not stored. The Vault keeps only a keyed fingerprint of it to recognise you next time.
• What you publish (your username, subtitles, posts) is public. That is the point of the Vault.
• No ads, no tracking cookies, no analytics that follow you, and nothing is sold.
• You can delete your account yourself, on My account.

When you just visit

• The Vault runs on Cloudflare. Like any website, it receives your IP address and browser details with each request. Cloudflare keeps request logs for a short time for security and error tracking.
• To stop floods, the Vault counts requests per IP address. It stores a keyed fingerprint of the address, not the address itself, and deletes the counts after two days.
• Your browser keeps a few things in its own storage (no cookies): your sign-in, the theme you picked, and whether you saw a moderator's warning. Clearing site data removes them.

When you sign in or create an account

• The robot check: Cloudflare Turnstile checks that you are a person. Cloudflare receives the check and your IP address (Turnstile privacy).
• The code email: your address and a one-time code go to Resend, which sends the email (Resend privacy). The code expires after 10 minutes.
• Your account holds your username, picture choice, the keyed fingerprint of your address, the date it was made, and a sign-in key for each browser you use (up to 10).

What others can see

• Your username and picture, the subtitle sets you share, their labels and files, your profile numbers (sets, episodes, upvotes, rank and badges).
• Your posts and the requests you make. Reactions on posts show only as counts.
• Votes count toward a set's score; the Vault does not show who voted.
• If you join the team, your role and the languages you help with are shown on People.

Kept for moderation

• Reports you send (moderators see who sent them), warnings, and a log of what moderators did.
• Team applications (your answers), seen by senior moderators.
• Copyright takedown requests: the name, email, organisation and signature in the form, to handle the request and as a record of it.
• Notices (replies, mentions and so on) are deleted after 60 days.
• A mark on a post the automatic spam / hate-words check flagged, and on an account it slowed down, until a moderator clears it. The check runs on our server when you post; your text is not sent anywhere else.

Supporter badges

If you support Kitsumi on Patreon, once a day the Vault receives the list of patrons' email addresses and monthly amounts from olexify.dev, which reads it from Patreon. Each address is turned into the same keyed fingerprint in memory and compared; the addresses are not stored. Only the badge tier is saved on a matching account.

Who receives what

Cloudflare and Resend may handle this data outside your country, including in the United States.

Deleting your account

On My account you can delete it at once. That removes your subtitle sets and their files, empties your posts, and deletes your reactions, notices, team application and every sign-in. Your username becomes "deleted user" and the address fingerprint is removed, so the same address can start fresh later. Shows you added and votes you cast stay, without anything that points to you; the moderation log keeps its entries.

Your rights

• Ask what the Vault holds about you, ask for a correction or deletion, or object to something: write to the address at the top.
• If you live in the EU or the UK, you can also complain to your data protection authority.
• The Vault is not made for children under 13. If you are younger, please do not create an account.

Changes

When this page changes, the date at the top changes too. Earlier versions are kept in the Vault's history.