Privacidad y cookies

Navegando por el catálogo

Puedes explorar anime sin crear una cuenta. Las páginas y búsquedas envían su solicitud al servidor de Shiori; su navegador también proporciona información de conexión, como una dirección IP y un agente de usuario.

Shiori reads its own catalog database; no request is sent to another service to show a page. Visiting a title without a synopsis may prompt a background request from Shiori’s server to Wikipedia for that article; it carries no information about you. The current application does not include advertising or third-party analytics scripts. Shiori counts visits with simple anonymous statistics: for each day, how many times each page was opened, from which website the visitor came, and whether it was a phone, tablet or computer. No cookie is used, and your IP address and browser details are not stored; a one-way code that changes every day estimates the number of daily visitors and is deleted after two days. Visits are not counted if your browser sends Do Not Track or Global Privacy Control. Optional personalized discovery is described below.

When a cover image fails to load, your browser tells Shiori which image address failed, so broken covers can be hidden. To require several different visitors, Shiori stores a one-way code made from your IP address and the date for 24 hours; it is not linked to your account. This report is sent even when Do Not Track is on.

Preferencias almacenadas en su navegador

When you change appearance settings, this browser remembers your theme, accent, layout, motion, and homepage choices in local storage. These preferences are not account credentials and are not sent to our server. Your personal episode-by-episode ratings and watch-planner budget/runtime are also stored in this browser, keyed by anime, and are not sent to Shiori. Community episode votes are separate and are saved to your account only when you submit them. The time you choose in Tonight is stored there too, under one key; it is sent with Tonight requests so Shiori can pick what fits, but it is not saved to your account. Clear these by removing this site’s browser data. They remain until replaced or cleared.

Utilice Restablecer valores predeterminados en la configuración de apariencia para restaurar la apariencia predeterminada. Puede eliminar completamente las preferencias almacenadas a través de los controles de datos del sitio de su navegador. Al bloquear el almacenamiento del navegador, los cambios se limitan a su visita actual.

This browser remembers that the first-visit introduction has been shown, so it is not shown again. The shiori.introduction.v1 marker stays in browser storage until you clear this site’s data. It contains no account information and is not sent to Shiori. It also remembers, without any account information, whether you closed the guide card (shiori.guide-card.v1) and which site announcements you dismissed (shiori.notices.v1), and keeps, for this tab only, the page to reopen after your session is renewed. So that Back returns you to where you were, this tab also keeps a short record of recently visited pages under shiori.restore.v1: scroll position, open sections, the selected cover, your place in a Suggestions round, and search text you had not sent. It also holds a code that changes with your account, so the record is cleared when you sign out or switch account. It is not sent to Shiori, except the anime numbers and a random draw number needed to show the same page again, and it ends with the tab.

Imágenes y servicios externos

Cover images load directly from third-party image servers (cdn.anime-planet.com, cdn.anisearch.com, cdn.myanimelist.net, media.kitsu.app, www.anisearch.com) or, for selected titles, from official anime websites; see Fuentes de datos. Su navegador contacta con esos servidores, que ven su dirección IP y los detalles del navegador, pero no la información de su cuenta. Esos servidores reciben la información de conexión necesaria para entregar la imagen. Al seguir un enlace de servicio de visualización se abre un sitio web externo, que tiene su propia política de privacidad.

Shiori no envía tu lista a un servicio de seguimiento externo. La importación y exportación de XML compatible con MAL están a cargo de Shiori; no hay ninguna cuenta MyAnimeList ni conexión API involucrada.

YouTube trailers load only after you select Load YouTube trailer. Before that, the trailer section sends no request to YouTube and uses no YouTube thumbnail. Loading the player shares connection information with Google/YouTube and may use storage under their privacy policy. Google sign-in is available when the operator configures its OAuth application. Email registration and recovery use the configured mail service, which receives your address and the verification message.

When AnimeSchedule is enabled, Shiori’s server periodically requests timetable, title-identifier and (for matched scheduled titles) streaming-listing data. These requests do not include your account or watchlist. Your browser receives Shiori’s cached schedule and streaming links without contacting AnimeSchedule.net; it contacts an external viewing service only if you follow one of its links. AnimeSchedule sees connections from Shiori’s server; its broadcast times and listings may change. Your browser timezone is sent with home and calendar requests to show local times and appears in calendar URLs; it is not saved to your account.

Cuando alguien abre un título por primera vez, el servidor de Shiori también puede pedir a AnimeSchedule.net los enlaces de streaming de ese título, enviando solo el ID de anime.

The Support Shiori link opens Buy Me a Coffee, an outside payment service, in a new tab. Shiori sends it nothing about you: the link carries no referrer and no tracking code, and Shiori sets no cookie and loads no script, image or button from it. Buy Me a Coffee receives what your browser sends to any website, such as your IP address and browser details, and what you choose to give it, under its own privacy policy. The payment page is run by Buy Me a Coffee, not by Shiori, and this site never receives your card, bank or other payment details. If you leave a tip, what you give there, such as your name, the amount, the date and any message, stays with Buy Me a Coffee and reaches Shiori Staff, who run the site, through it. That information is handled under Buy Me a Coffee’s own terms and Shiori Staff’s own records, and is not linked to a Shiori account.

Descubrimiento personalizado

Personalized discovery is off by default. If you enable it in appearance settings, this browser stores genre interests and up to 30 recently viewed anime IDs. Recent IDs are kept for up to 30 days; aggregate genre interests expire after 30 days without activity. Expired history is removed when the site next runs. The homepage sends your top three genres and recent IDs to Shiori when requesting suggestions. Turning it off removes the saved browsing history from this browser.

Signed-in suggestions also use your saved genres, statuses and ratings. Dropped and low-rated titles reduce a genre’s influence. Reset browsing history clears browser discovery data; it preserves your saved library and appearance choices. This is a simple discovery ranking, not a prediction of how you will rate an anime.

On Suggestions, “For you” is separate from this browser setting: it uses only your watched titles and choices made there. Private ratings may influence ranking but are never shown. Explicit choices are kept with your account for 90 days, included in your data export and deleted with your account. “Catalog picks” ignores these taste signals. No impression or swipe history is stored with your account. So that Back returns you to the same card, this tab remembers the anime you have seen in this visit (up to 120 anime numbers, in this tab only) and your place in the current round; when you go back, the current round's anime numbers are sent to Shiori only to show the same round again and are not saved.

Tonight’s suggestions use the same saved list. They change each day; Shiori remembers which suggestions it showed you, on how many days and when last (title, count and date only), so a title shown on three days without being added rests for two weeks. This record is kept for 15 days, included in your data export and deleted with your account.

Puede borrar el historial guardado en cualquier momento desde la configuración de apariencia, en Descubrimiento personalizado. Las opciones de recomendación se pueden restablecer en la página Sugerencias.

Cookies de cuentas y sesiones

El sitio usa el idioma que guardaste al elegir inglés, italiano, español, portugués de Brasil, francés o alemán en el menú del encabezado. Shiori guarda esa preferencia en una cookie propia y necesaria de este navegador durante un máximo de un año. Si no guardas una preferencia, el sitio usa el idioma de tu navegador. Al iniciar sesión, también guarda el idioma actual en tu cuenta para enviarte correos y notificaciones en ese idioma.

Public browsing does not create login cookies. Opening email sign-in sets a temporary HttpOnly form-protection cookie; registration and recovery also use a ten-minute browser-bound verification cookie. Email accounts store a verified email address and a salted password hash, never your password. Email verification codes expire after ten minutes and allow up to five attempts. Outgoing verification messages are encrypted temporarily and removed after delivery or expiry. Password reset signs out existing sessions. Google sign-in stores the verified Google account identifier and the e-mail address Google reports, which may prefill adding email sign-in or be shown privately in Account, and is never used to find or merge accounts; it does not store Google access or refresh tokens. Session cookies are HttpOnly; production uses HTTPS and Secure cookies. Your library stores saved anime, progress, ratings and notes. When you save progress on a title, including when you add or import one that already has progress, Shiori also records that episode and the time. These records are combined with other members’ (at least three people) to tell members when a new episode seems to be out; no one sees who watched. They are kept for 8 days, included in your data export and deleted with your account. Your chosen display name and avatar are saved with your account. New accounts choose both during first-login setup. No persistent cookie is used to remember your sign-in provider; older provider-hint cookies are removed when you open sign-in or sign in successfully. Access cookies last 15 minutes. Refresh cookies last up to seven days of inactivity, within a 30-day session-family limit; logout revokes this device’s session. Avatar uploads are no longer accepted. An image uploaded earlier stays in our database, visible only to your signed-in account, until you choose another avatar or reset it; it is then deleted. Import previews are retained for up to seven days; temporary sign-in state expires after ten minutes.

Changing an email address or Google sign-in method requires proof of a current method and a ten-minute browser-bound operation. The existing method stays available until the change is confirmed. Temporary method-change records, including hashed browser bindings and verification codes, are removed after expiry or when you delete your account; they are not included in your data export. Security notices go to verified contacts independently of optional email choices, without showing another contact address or a verification code. Changing your email address turns off optional website emails until you enable them for the new address. Replacing or disconnecting Google removes the old account’s reported address from Shiori.

If you turn on two-step sign-in, Shiori keeps your authenticator key encrypted and a fingerprint of each unused recovery code (never the code itself). These records are deleted when you turn two-step sign-in off or delete your account. Accounts that sign in only with Google rely on Google’s sign-in protection and are not offered Shiori two-step sign-in.

Community episode ratings are saved with your account when you submit them. Only episode averages and vote counts are shown publicly, after at least three members have rated that episode; names and individual votes are never shown. Your votes are included in your data download and deleted with your account.

Su descarga de datos indica si el inicio de sesión en dos pasos está activado y cuándo se agregó y utilizó por última vez la aplicación de autenticación. No incluye claves, códigos de recuperación u otros registros de seguridad como sesiones y hashes de contraseñas.

If you lose every two-step method and recovery code, the site operator can start a request to remove two-step sign-in. It takes effect after 7 days, we tell every verified address on the account, and signing in with two-step sign-in before then cancels it. Shiori keeps the request (its status, its dates and the operator’s reference), and each step is also noted in the operator’s audit log, which has no fixed expiry. Your data download lists the status and dates of such requests, not the operator’s reference.

When you create an account and your email address is verified (or Google reports it), we send you one welcome message. It is a one-time service message with no marketing, no tracking and no unsubscribe link, and it is not sent again. It uses the same daily mail allowance as other messages and is skipped on busy days.

Tickets de soporte

Submitting a report stores its category, subject, message, creation time and reference with your account. You and explicitly authorized support staff can view its conversation. Replies record their author, staff role and timestamp; status changes update the report. Only the reference and category of your request, and the reference and status when you reply, are sent to the operator’s private staff channel on Discord, never the text. Account email addresses, session tokens and IP addresses are not included in that notification. Do not include passwords, verification codes or sensitive personal information in reports.

When outbound email is configured and your account has a verified email/password identity, a confirmation and staff replies/status updates are sent to that verified address. Mail includes the subject and reference of your request and the staff reply, not your original message. Messages are encrypted in a temporary delivery queue, removed after delivery or expiry (24 hours). Email-provider copies are subject to that provider’s handling. Accounts without an email address can follow replies on-site but do not receive these emails yet. Email replies are not monitored; continue the conversation on the site.

When a ticket is resolved you can answer “Helped” or “Not yet” with an optional comment of up to 500 characters; “Not yet” reopens it. The answer is stored with your account, included in your data export, deleted with the ticket or your account, and counted (without your name) in the staff’s helped rate.

Delivery attempts are recorded to retry interrupted notifications. Open tickets remain until resolved. Resolved tickets, their replies, ticket notifications and feedback are deleted 365 days after the ticket was created. Copies sent to the operator’s private Discord staff channel and delivered email copies are stored separately; their retention depends on those services and the recipient’s mailbox. This feature creates no additional cookies. It handles website conversations and outbound notices, not incoming email or Discord replies.

Comentarios del sitio

Cuando envía comentarios, almacenamos su calificación del 1 al 5, sus dos respuestas opcionales, el tipo de página de donde proviene si decide incluirla, el idioma de la página y cuándo la envió. Si ha iniciado sesión, está vinculado a su cuenta; si no, no está vinculado a nadie.

Sólo el personal de Shiori puede leerlo. Nunca se publica ni se muestra en su perfil o en el feed.

Su calificación y respuestas escritas nunca se envían a Discord ni a otro servicio.

Cuando el mensaje de calificación rápida opcional está habilitado, se puede enviar un aviso genérico al personal en Discord como máximo una vez al día; no contiene calificación, respuesta escrita, información de cuenta o página.

El personal ve un promedio y cuenta sin nombres.

When you send feedback without signing in, a keyed one-way code of your network (not your IP address) is kept for up to two days to limit abuse, and then erased. It is not copied into backups. The form uses the same one-hour security cookie as the sign-in forms; it sets no other cookie. The feedback itself is included in the encrypted nightly backups of members’ data.

If you are signed in with an e-mail address and allow it, staff may e-mail you one reply at that address. Without that choice nobody contacts you. Your feedback is included in your data download; you can delete it from the feedback page at any time, and it is deleted with your account or 12 months after you sent it.

Política de cookies

Shiori solo configura las cookies que necesita para funcionar, por lo que no hay que elegir ninguna cookie. El aviso flotante cerca de la parte inferior de la página es informativo, no una solicitud de consentimiento. Si elige "Entendido", este navegador almacena que el aviso se leyó en shiori.cookie-notice.v1 en el almacenamiento local.

• Sesión registrada. Dos cookies protegidas te mantienen conectado: una corta (15 minutos) y una cookie de actualización (hasta siete días sin actividad, 30 días como máximo). Cerrar sesión los elimina.
• Pasos para iniciar sesión. Email/password forms use a separate one-hour CSRF cookie. Verification codes and Google sign-in use temporary flow cookies (at most ten minutes) so the step can only be completed in the browser that started it. A separate cookie remembers which page to return to after signing in, for at most 30 minutes. El formulario de comentarios para los visitantes utiliza la misma cookie CSRF.
• Inicio de sesión en dos pasos. Un inicio de sesión que espera su segundo paso utiliza una cookie temporal (como máximo diez minutos), por lo que el paso solo se puede completar en el navegador que lo inició.
• Cambios en el método de cuenta. Una cookie HttpOnly temporal, exclusiva del host, vincula un cambio de correo electrónico al navegador que lo inició. Tiene una duración máxima de diez minutos y utiliza Strict SameSite. Los cambios de método de Google utilizan una cookie Lax SameSite temporal separada para la redirección del proveedor. Ambos utilizan Secure en producción.
• Acceso del personal. El personal de soporte recibe una cookie adicional mientras dure su sesión de personal, más una cookie de diez minutos mientras la confirma.

No utilizamos publicidad, redes sociales ni cookies de seguimiento. Tus opciones de apariencia y la hora de esta noche se guardan en el almacenamiento del navegador, no en cookies. Los recuentos de visitas son anónimos y no utilizan ninguna cookie. Puedes eliminar las cookies en tu navegador en cualquier momento; se cerrará su sesión.

Perfiles, amigos y notificaciones

Profiles start private. Your display name and account ID can be searched by signed-in users, and your name and visibility are shown on your profile link. A private library is visible only to you and approved followers. If you choose Public in your profile, anyone with your profile link can view your anime titles, watch status and episode progress. Personal notes and ratings are not shared. Your cover banner and short bio are shown to whoever can see your profile, and you choose whether your collection counts, anime list and activity appear. A private profile shows only your name and avatar to everyone else. Existing approved followers keep access when you switch back to private; you can remove followers in your profile.

Follow requests, approvals and new followers create in-app notifications, not emails. Shiori stores these events and your follow relationships with your account. Episode alerts are optional; email delivery is a separate opt-in and uses your verified email sign-in address. Unfollowing or removing a follower ends private-library access but does not erase historical notifications. Social records are removed when the associated account is deleted.

Blocking and reporting: you can block any member from their profile. Blocking removes any follows between you, and you will no longer see each other in search, activity or profiles. The other person is not told. You can unblock at any time in Manage connections. You can also report a member, an activity or a comment, with a reason and an optional note of up to 500 characters. Only authorized Shiori staff can read reports. We keep a report until it is reviewed, then up to 90 days more. Reports are never shown to the member you reported.

Friends activity: when you add an anime, change its status, watch an episode or rate it on Shiori, a short note (the title, what you did and when) appears in the activity feed. It is shown to you and to people who follow you; if your profile is public, anyone can also see it on your profile page. Imports do not create activity. Activity sharing is on when you create an account; your profile itself starts private. You can turn activity sharing off at any time in your profile. Activity is deleted after 90 days.

Acceso del personal a una biblioteca privada.

A private library stays private on your profile. In a narrow case, a Shiori staff member can open a read-only view of your library from the staff area: when there is an open report, a support ticket or a safety concern, or for another reason they must write down. They see the titles and their status, the counts and the date of your last activity. They never see your notes or ratings, and they cannot change anything. Each view needs a fresh staff sign-in and a reason, and is recorded in the staff history with the staff member's name, the reason and the time. The record does not contain any of your library. You are not notified, and each new view is logged again.

Correos electrónicos opcionales de actualización del sitio web

Notification Preferences includes a separate, off-by-default choice for emails about major Shiori releases. Enabling it requires a verified email address and is not a condition of using Shiori. We record the preference, consent wording version and timestamp, plus later consent changes. You can withdraw it anytime in the same settings without changing security emails or anime alerts. Announcements are sent only by authorized staff, only to members who turned this on, and at most once per release. These preference records are deleted with your account.

Notification Preferences also offers an optional Sunday digest, off by default: once a week, only when there is something to say, it summarizes what you logged, what is next and one sequel you have not added, without ratings. It uses your verified email address, records the consent wording version and time, and can be turned off in the same settings or with the link in every digest.

¿Cuánto tiempo guardamos las cosas?

• Notificaciones que has leído: 90 días. Los no leídos: 180 días.
• Tickets de soporte resueltos y sus respuestas: 12 meses después de su creación.
• Comentarios del sitio: 12 meses después de su envío. El código de red se conservó con los comentarios de los visitantes: se borró en dos días.
• Las sesiones caducadas se eliminan diariamente.
• Los cambios pendientes en el método de inicio de sesión caducan después de diez minutos y se eliminan mediante una limpieza diaria o la eliminación de la cuenta.
• Inicios de sesión en espera de un segundo paso y configuraciones de dos pasos sin terminar: 10 minutos.
• Métodos de dos pasos y códigos de recuperación no utilizados: hasta que los elimines o elimines tu cuenta.
• Solicitudes para eliminar el inicio de sesión en dos pasos: hasta que entren en vigor o se cancelen. Una solicitud cancelada se elimina después de 90 días; uno completado se conserva hasta que elimine su cuenta.
• Su biblioteca, perfil y configuración permanecen hasta que los elimine o elimine su cuenta. Los elementos de actividad y los comentarios y reacciones sobre ellos se eliminan después de 90 días.
• Opciones de recomendación explícita: 90 días después de cada elección.
• El recuento de visitas utiliza un código unidireccional diario que se elimina después de dos días; sólo se mantienen los totales diarios.
• Récord de sugerencias mostradas de esta noche: 15 días.
• Informes revisados: 90 días después de la revisión.
• Informes de fallos de cobertura y contadores anti-abuso (códigos unidireccionales de IP o dirección de correo electrónico): de 15 minutos a 24 horas.
• Registro de correos electrónicos opcionales planificados o enviados a usted: 60 días. Enlaces para darse de baja: válidos 90 días.
• Si una dirección rebota o reporta spam, se guarda un código unidireccional por hasta dos años para que no le escribamos nuevamente, también después de la eliminación de la cuenta.
• Registros de episodios (los episodios que avanzaste): 8 días.
• Votos de episodios de tu comunidad: hasta que los cambies o elimines tu cuenta; están incluidos en su descarga de datos. Los promedios de los episodios públicos se muestran solo después de que tres miembros hayan votado.
• Copias de seguridad cifradas de los datos de los miembros: 30 días.
• Deletion record: when your account is deleted, by you or at your request, Shiori keeps a one-way code derived from your account ID (the identifier shown on your profile; the code is made with a secret key that is kept apart from the database) and the date of the deletion, and nothing else, for 38 days, on our legitimate interest in honouring your deletion. It is used only to delete the account again if an older backup is ever restored. Backups made in that time keep it for as long as they are kept (up to 31 days more), so the record can exist for up to about 69 days in all.
• Registro de acceso al servidor web: 7 días.
• Registro de errores de la base de datos (sin texto de declaración): 7 días, como máximo 8.

Tus datos y tus derechos

From your profile you can download a copy of your data (JSON) and delete your account, which removes your profile, list, activity, comments, alerts, support tickets and feedback and ends all sessions. You can also ask for access, correction or restriction by contacting us, and complain to your data protection authority (in Italy, the Garante per la protezione dei dati personali). We rely on your agreement to the terms to run your account, and on our legitimate interest to keep the service secure and prevent abuse.

¿Quién procesa los datos para nosotros?

Estos servicios manejan datos para Shiori. Cuáles se aplican a usted depende de lo que haga en el sitio.

• Alojamiento. Amazon Web Services runs the Shiori server, so it handles every request, including your IP address and the page you ask for. The web server’s access log keeps the time, the request method, the site name, the response status and size, how long the reply took, and the network address that connects to the server (with Cloudflare in front of the site, that is Cloudflare’s address, not yours). It records no page addresses, no cookies, no browser headers and no address that Cloudflare forwards for you. The log is rolled daily and deleted after 7 days.
• Red. Cloudflare, a US company, sits in front of the site. It manages the domain name, encrypts the connection to your browser, keeps copies of the site’s static files, and sees every request, including your IP address and the page you ask for. It also forwards mail sent to the support address to the operator’s mailbox.
• Base de datos. La base de datos que contiene su cuenta y lo que guarda se ejecuta en el mismo servidor que el sitio, en el host mencionado anteriormente. No se trata de ningún servicio de base de datos independiente.
• Correo electrónico. SMTP2GO sends verification codes and notices, and receives your email address and the message. Messages wait in an encrypted queue until they are sent. A security notice that cannot go out the same day can wait there for up to six days, and it is still sent if you delete your account in the meantime.
• Copias de seguridad. Every night an encrypted copy of the members’ data is stored in Oracle Cloud Infrastructure Object Storage. It holds accounts (with password hashes and encrypted two-step keys), libraries, lists, notes, profiles, activity and support tickets. It does not hold the catalog, sessions, sign-in codes or the email queue. The copy is encrypted before it leaves the server, and the key is kept offline by the operator, not on the server. Encrypted backups are kept for 30 days. An account you delete disappears from the backups within 31 days. If an older backup ever has to be restored, the deletion record (see How long we keep things) is used to delete again, before the site reopens, the accounts deleted since. That only works for deletions made in the last 38 days and recorded in a newer backup or in the database being replaced: if the whole database were lost, a deletion made after the newest backup would be recorded nowhere, and a backup copy older than 38 days cannot be corrected this way, so we would repeat those deletions by hand when you ask.
• Inicia sesión con Google. Google participa cuando elige iniciar sesión con Google.
• Boletos de soporte. Discord, un servicio estadounidense, recibe la referencia y categoría de cada billete en el canal privado de personal del operador. Las alertas del personal también van a un canal privado de Discord. No contienen datos de miembros.
• Enlace de soporte. Buy Me a Coffee está involucrado solo si sigues el enlace Support Shiori. Shiori no le da nada de tu cuenta.

La ubicación del alojamiento, el almacenamiento de respaldo y los servidores de correo electrónico no figuran aquí todavía.

Los datos del catálogo provienen de la base de datos abierta de anime sin conexión y las imágenes se cargan desde servidores de imágenes de terceros.

¿Quién dirige Shiori y cómo llegar hasta nosotros?

Shiori is run by Giuseppe Casillo. Privacy contact: [email protected].

Para solicitar acceso, corrección o eliminación de sus datos, o para plantear una inquietud sobre la privacidad, abra un ticket de soporte desde su cuenta o escriba a la dirección anterior. Incluye el nombre de tu cuenta para que podamos encontrar tus datos.

If you cannot sign in, for example because your account is suspended or you lost access to two-step sign-in, ask by ticket or e-mail and we will delete the account for you. That deletion is done by the same routine as the Delete account button, so it also leaves the deletion record described under How long we keep things.