Privacy Policy

Last updated: September 2026

Evorit does not live off advertising:
No ads, no trackers, no data resold.

Who handles your data

• Controller: Lucas Grisard, sole trader
• Address: 10 Rue de la Paix, 75002 Paris, France
• SIRET: 107 746 331 00019
• Contact: evorit.contact@gmail.com

What we store

• Your account: your email address, plus the name and picture Google or Discord passes on at sign-in. Then the username, avatar and banner you pick.
• Your library: the works you add, their status, the episodes watched, your ratings, your favorites.
• Your public profile: your username, which is unique. It starts from a piece of your account identifier, and you can change it whenever you like in Settings → Profile. The profile is public by default: anyone with the link (evorit.app/user/CODE) can see it. You can switch it back to private in the same place. Your library, your friends and your personal information are never public.
• Your connections: your friends and the accounts you follow.
• What you write: posts, polls, comments, reactions, private messages and group messages.
• Moderation: the reports you send or that target you, and what came of them.
• A call counter: how many searches your account runs each day, and with which provider. The text you searched for is not part of it.
• Your search history: the last 100 things you searched for, linked to your account so you find them again on your other devices. You clear them from the Search screen.
• Your devices: for each signed-in device, the browser, system, model, screen size, language, and the dates of the first and last visit.
• Your library's public link: when someone opens it, the date and the software used, without their IP address.
• The waiting list: if you sign up for it, your email address, your message and your platform.
• A small cookie on evorit.app: evorit_vitrine, which holds your username and your avatar, so the site knows you are signed in and shows you "Open the app". No tracking; it is deleted when you sign out.

Why

To run the service you asked for: your account, your library synced across your devices, the social features, sending you your backup. Legal basis: performance of that service.

Moderation and the call counter rest on our legitimate interest: keeping the service usable and its cost sustainable.

Who else receives your data

• Hetzner Online GmbH (Germany, European Union): the server hosting the database, accounts and server-side processing.
• Cloudflare (United States): site delivery, and storage of database backups (Cloudflare R2, European Union).
• Resend (United States): the email that delivers your backup.
• The catalogs (TMDB, TheTVDB, IGDB, MangaUpdates, ISBNdb, Metron, IMDb, Wikidata, Wikipedia): they may receive the title you search for, never your identity. They are called from our server; only Wikidata is sometimes called straight from your browser, with no authentication. Posters and covers go through our image server, which fetches them from the sources (including Steam, AniList and Wikimedia Commons).
• IsThereAnyDeal and NEXARDA: a game's title, when you look at its prices.
• YouTube: trailers. The video plays from youtube-nocookie.com, so your browser then contacts Google.
• Klipy: the keyword you type to look for a GIF.
• Azure Translator (Microsoft): the text of a comment, when you ask for its translation.

Several of these providers are established outside the European Union, mainly in the United States. Those transfers rely on the European Commission's standard contractual clauses and, for certified providers, on the EU – US Data Privacy Framework.

How long

• Your account and its content: for as long as the account exists, except messages (below).
• Your private and group messages: erased 30 days after everyone has read them, and 90 days at the most — even if the account stays active. The only exception: a reported message is kept until the report has been reviewed.
• After a deletion request: 30 days, to leave you time to come back. If you pick immediate deletion, the erasure happens at once and nothing can be recovered.
• The call counter: 60 days.
• Our server's search cache: no time limit. It holds search texts and titles of works, never a link to an account.
• The waiting list: until you ask for it to be erased. It is not erased with the account: write to us to have it removed.

What your browser keeps

No advertising cookies, no trackers, and therefore no consent banner. Evorit uses your browser's local storage to keep you signed in, to keep your library on the device (fast start-up, offline reading) and to cache images and your recent searches. The "Clear cache" button in the settings wipes all of it.

Your rights

You can access your data, correct it, retrieve it, object to its processing and have it erased.

Retrieve it: Settings → Account, "Export my data". The file is sent to your email address, at most once every 24 hours.

Erase it: Settings → Account, "Delete my account", either within 30 days (cancelled by signing back in) or right away (final). With immediate deletion, your export is sent to you just before, and the deletion does not happen if that sending fails. With deletion within 30 days, no export is sent: export your data beforehand if you want to keep it.

For anything else, write to evorit.contact@gmail.com. If our answer does not satisfy you, you can lodge a complaint with your country's data protection authority, or with the French CNIL.

Security

Sign-in goes through Google or Discord: Evorit holds no password. Each account's data is isolated by rules enforced in the database itself, and the external API keys never leave our servers.

Minimum age

Evorit is not meant for minors without a parent's consent. The age at which you can consent on your own is set by the law of the country you live in, and that is the one that applies: 15 in France.

Updates

This page can change. If the change matters, we will tell you in the app.

This translation is provided for your convenience. In case of any discrepancy, the French version prevails.