Privacy policy
Last updated: 2026-08-07
This policy explains what data Trovyn collects, what for, who it is shared with and how you can control it. It is written to be understood, not to cover ourselves.
Who processes your data
The data controller is Aarón Cantador Gómez (tax ID [[NIF / CIF]]), owner of trovyn.app. You can write to [email protected] about anything related to your data.
What data we collect
- • From your account: email address, username, display name and an encrypted version of your password (we never store the password in plain text).
- • From your activity: what you add to your library, your progress, your ratings, reviews, lists, favourites and what you post in communities and chat rooms.
- • That you choose to upload: avatar and banner images.
- • Technical, so your session works and stays secure: IP address and browser you log in from (you can see these yourself in Settings → Active sessions, and close them).
We do not collect browsing data for advertising, we do not profile you to sell anything and there is no third-party tracker in the application.
What we use them for and on what legal basis
- • To provide you the service (your account, your library, the social features). Legal basis: performance of the contract you accept when registering.
- • To keep the platform secure and moderated (detecting abuse, applying sanctions, keeping a record of moderation actions). Legal basis: our legitimate interest in keeping the service usable and safe.
- • To send you essential account emails: verifying your address and resetting your password. We do not send newsletters or marketing emails.
Who they are shared with
We do not sell your data or share it with third parties for commercial purposes. We do rely on providers that process it on our behalf and only for what is indicated:
- • Supabase — database and the images you upload (avatar and banner).
- • Railway — application hosting.
- • Upstash — active sessions and temporary memory (cache).
- • Resend — sending account emails (verification and password).
- • Cloudflare — DNS and domain email forwarding.
Separately, when you search for a title, your search text travels to the catalogue sources (TMDB, AniList, RAWG, Google Books and similar) to fetch results. The search is sent, not your identity: those sources do not receive your account or your library.
How long we keep them
For as long as your account is open. If you delete it, your personal data and associated content are deleted. A record of moderation actions may remain where there is a legitimate reason to keep it (for example, to prevent a ban being evaded by re-registering).
Session and presence data live in temporary memory and expire on their own within hours or days.
Your rights
You can access your data, correct it, delete it, take it to another service, object to a processing activity or request its restriction. Two of these do not require writing to anyone: in Settings you can download your data and delete your account yourself, whenever you want.
For anything else, write to [email protected]. If you believe we have not handled your request properly, you can complain to the Spanish Data Protection Agency (aepd.es).
Minimum age
Trovyn is not aimed at children under 14, which is the age from which Spanish law allows consent to data processing without a parent or guardian. If we detect an account belonging to someone younger, we will delete it.
Changes to this policy
If something relevant changes, the date above is updated and you are notified inside the application. While in beta, it is reasonable to expect changes as the platform grows.