Privacy Policy
SekiList is an independent index of doll companies. It is free, carries no advertising, and sells nothing — including your data. This page says exactly what is stored and why.
Last updated 11 August 2026.
The short version
- You can browse the entire site without an account.
- New profiles are private by default. Your collections, likes and badges are visible to nobody until you choose to share each one.
- We never sell or rent personal data, and there are no advertising trackers.
- Email contact@sekilist.com to see or delete anything we hold.
What we store if you create an account
- Username — chosen by you and changeable.
- Password — never stored. We keep only a PBKDF2-SHA256 hash (210,000 iterations) with a per-account salt, which cannot be reversed into your password.
- Email address — optional. Stored only if you add one for account recovery, or if you sign in with Google.
- Google account identifier — if you use Google Sign-In, we store the stable subject id Google issues, plus your email address, so we can recognise you next time. We do not receive your Google password.
- Session tokens — stored as a hash, never in readable form. They expire after 60 days and you can revoke them by signing out.
- What you create — collections, likes, votes, reactions, saved dolls, posts and comments.
What we store if you do not
An anonymous visitor identifier is generated in your browser so votes and saved progress work without an account. It is a random value with no connection to you as a person.
We record which pages and searches are used, in a deliberately thin form: a page path, a search term, a product or company reference, and a two-letter country derived from your browser's timezone. We do not record your IP address or your browser's user-agent string in this data. These events are deleted after 90 days.
Stored in your browser
The site uses your browser's local storage rather than cookies for its own features: your session token, your username and role, the anonymous visitor id, and whether you have confirmed you are 18 or over. Clearing your browser data removes all of it and signs you out.
Google Analytics
We use Google Analytics to understand which pages are useful. It is configured with consent defaults set to denied, so it runs without setting advertising or analytics cookies and reports only aggregate, non-identifying measurements. We do not use Google Signals, advertising features, or remarketing.
Who else is involved
- Netlify hosts the site and processes standard web-server request logs.
- Convex hosts the database and application backend.
- Cloudinary serves product and company images.
- Google provides Sign-In and Analytics.
Product images and links point at the merchants' own sites. Once you follow an outbound link you are on someone else's site under their policy, not ours.
Your choices and rights
You can change your username, add or remove an email address, make each part of your profile public or private, sign out of every device at once, and ask us to delete your account and everything attached to it.
Depending on where you live you may have rights to access, correct, export or erase your personal data, and to object to how it is processed. Email contact@sekilist.com and we will action it. We do not require you to prove a legal basis to ask.
Children
This site indexes adult products and is not intended for anyone under 18. We do not knowingly hold data on minors, and will delete any such account on discovery.
Changes
If this policy changes materially we will update the date at the top and note the change on the site rather than quietly editing the page.