Privacy Policy
SekiList is an independent index of doll companies. It is free, carries no advertising, and sells nothing — including your data. This page says exactly what is stored and why.
Last updated 26 September 2026.
The short version
- You can browse the entire site without an account.
- New profiles are private by default. Your collections, likes and badges are visible to nobody until you choose to share each one.
- We never sell or rent personal data, and there are no advertising trackers.
- Email contact@sekilist.com to see or delete anything we hold.
What we store if you create an account
- Username — chosen by you and changeable.
- Password — never stored. We keep only a PBKDF2-SHA256 hash (210,000 iterations) with a per-account salt, which cannot be reversed into your password.
- Email address — optional. Stored only if you add one for account recovery, or if you sign in with Google.
- Google account identifier — if you use Google Sign-In, we store the stable subject id Google issues, plus your email address, so we can recognise you next time. We do not receive your Google password.
- Session tokens — stored as a hash, never in readable form. They expire after 60 days and you can revoke them by signing out.
- What you create — collections, likes, votes, reactions, saved dolls, posts, comments, and the tags you pick on Find your type.
What we store if you do not
An anonymous visitor identifier is generated in your browser so votes and saved progress work without an account. It is a random value with no connection to you as a person.
We record which pages and searches are used, in a deliberately thin form: a page path, a search term, a product or company reference, and a two-letter country code, read from your request at the hosting edge and stored as that code alone (if that lookup does not answer, the country is estimated from your browser's timezone instead). We do not record your IP address or your browser's user-agent string in this data. These events are deleted after 90 days.
Store suggestions and listing corrections
If you send a suggestion, we store the company or store name, source URL, explanation, submission date, and our review decision. Administrators can read submissions; they are not published automatically. We store hashes of the private receipt and anonymous visitor identifier to support status checks and submission limits. A receipt lets its holder see the review decision and explanation, so keep it private. Suggestions are retained for follow-up and editorial history; contact us with your receipt if you want yours removed. Do not include sensitive personal information.
Stored in your browser
The site uses your browser's local storage rather than cookies for its own features: your session token, your username and role, the anonymous visitor id, whether you have confirmed you are 18 or over, the tags you pick on Find your type and whether you dismissed its prompt, and, for up to a day, the two-letter country code resolved for you. Clearing your browser data removes all of it and signs you out.
The ten most recent suggestion receipts are also kept in this browser so you can check review decisions. Keep a copy before clearing browser data if you still need them.
Google Analytics
We use Google Analytics to understand which pages are useful. It may set first-party analytics cookies to distinguish visits and measure page views and interactions. We do not use Google Signals, advertising features, or remarketing, and we do not sell the resulting data.
Who else is involved
- Netlify hosts the site and processes standard web-server request logs.
- Convex hosts the database and application backend.
- Cloudinary serves product and company images.
- Google provides Sign-In and Analytics.
Product images and links point at the merchants' own sites. Once you follow an outbound link you are on someone else's site under their policy, not ours.
Your choices and rights
You can change your username, add or remove an email address, make each part of your profile public or private, sign out of every device at once, and ask us to delete your account and everything attached to it.
Depending on where you live you may have rights to access, correct, export or erase your personal data, and to object to how it is processed. Email contact@sekilist.com and we will action it. We do not require you to prove a legal basis to ask.
Children
This site indexes adult products and is not intended for anyone under 18. We do not knowingly hold data on minors, and will delete any such account on discovery.
Changes
If this policy changes materially we will update the date at the top and note the change on the site rather than quietly editing the page.