Privacy Policy

Last updated 7 October 2026

Orbit is in beta. This policy explains what we collect, why, who helps us run the service, and the choices you have. To ask us anything about your data, send a message through the feedback form and choose Privacy.

What we collect

Your account

When you continue with Google, Google shares your name, email address and profile photo with us. That is all we request: we ask only for Google's basic profile and email access, so we can't see your Gmail, contacts, Drive or anything else. Our sign-in provider also keeps the sign-in tokens Google issues, which are used only to sign you in.

Sign-in sessions

Each time you sign in, our sign-in provider records the session: when it started and expires, your IP address, and a description of your browser and device. This keeps your account secure and lets you stay signed in. A session cookie stays in your browser until you sign out or it expires.

Your library

The titles you track, your progress, status (planning, reading, paused and so on) and a short history of changes, so your library is the same on every device. When you remove a title, a small marker stays so the removal reaches your other devices.

Your settings

Your theme, whether the theme's companion shows, how your library and Up next are laid out and filtered, and your share card style and display name, so they are the same on every device.

Notifications, if you turn them on

• Your notification settings, including your time zone and quiet hours, so reminders arrive at the right local time.
• For each browser or phone you turn notifications on in, a push subscription: an address at that browser's push service (for example Apple, Google or Mozilla) that lets us send it a notification.
• Upcoming notifications (which title and when), deleted 7 days after they are sent.

Feedback you send

The topic and message. If you leave the box ticked, also the page you were on and your browser and operating system version. If you ask for a reply, the email address to reply to.

Technical logs

Like any website, our hosting provider records requests to the service (such as IP address, time and the page requested) in logs kept for a short time to run the service and protect it from abuse.

What stays on your device

Orbit keeps some things only in your browser's storage and never sends them to us: your ratings (the ticks and crosses in Discover), recent searches, cached lists, and a working copy of your library so the app is fast and works offline. Signing out removes the library copy; clearing your browser's site data removes the rest. Recommendations are calculated in your browser from your ratings and library.

What we don't do

• We don't show ads or use your data for advertising.
• We don't sell your data or share it with anyone for their own purposes.
• We don't use third-party analytics, tracking pixels or tracking cookies. The only cookie is the one that keeps you signed in.

How we use it

To provide Orbit: signing you in, syncing your library, showing what's out and what's next, sending the reminders you set, answering your feedback, fixing bugs, and keeping the service secure.

If you are in the EEA or UK, our legal bases are: providing the service you asked for (account, library, sync); your consent (notifications, and page and device info in feedback, which you can withdraw at any time); and our legitimate interest in keeping the service secure and working.

Who helps us run Orbit

These providers process data for us, only to run the service:

• Vercel hosts the app (servers in the United States).
• Neon hosts our database and sign-in system (stored in Singapore).
• Google provides sign-in.
• Cloudflare runs a scheduler that tells our server when to send notifications. It handles no personal data.
• Apple, Google, Mozilla or your browser's maker deliver push notifications. They see the notification text (a title and episode or chapter).

Title information comes from MyAnimeList, TMDB, AniList, MangaUpdates and MyDramaList (MyDramaList through the Jina reader service). When you search or a title is refreshed, our server sends them the search text or title, not your name, email or account.

Because of where these providers are based, your data is stored in Singapore and processed in the United States. Where the law requires it, these transfers rely on the providers' standard data protection terms.

How long we keep it

• Your account, library, settings and notification settings: until you delete your account.
• Sent notifications: 7 days.
• Feedback: until it has been dealt with, or until you delete your account, whichever comes first.
• When you delete your account, it is removed from our live database immediately. Our database provider keeps a rolling 6-hour history for recovery, so it is fully gone within 6 hours.

Your choices and rights

• Download your data or delete your account in Settings, under Your data.
• Turn notifications off for any device, or pause them everywhere, in Settings.
• Sign out at any time; this removes your library from that device.

Depending on where you live (for example under the GDPR, UK GDPR or California law), you may also have the right to access, correct, delete or move your data, to object to or restrict how it is used, and to withdraw consent. To make a request, send a message through the feedback form and choose Privacy. We will reply within 30 days. You can also complain to your local data protection authority.

Children

Orbit is not for children under 13, and in the EEA and UK not for children under 16 without a parent's consent. If you believe a child has given us their data, send a message through the feedback form and choose Privacy and we will delete it.

Security

Data travels over encrypted connections, the sign-in cookie can't be read by page scripts, and every request that touches your library checks that it is really you. No service can promise perfect security, but we work to keep your data safe.

Changes

If we change this policy, we will update the date above, and for significant changes we will tell you in the app before they take effect.