Privacy Policy
Last updated: TODO — set the date this copy was published
TODO: This page is a placeholder. Replace this content with the actual Privacy Policy before linking it from sign-in or launching publicly — seecontext/progress-tracker.md D55. The copy is the product owner's to write; it is not legal advice and should not be drafted from a template without review.
At minimum this should cover: what is stored (OAuth provider tokens, session data, recommendations and comments a user creates, view counts), that provider access tokens are server-only and never exposed to the client (invariant 10), what third-party services are involved (Supabase, Upstash Redis, AniList, MyAnimeList), and how a user can request deletion of their account and data.