Effective 29 September 2026.
Who operates AnimaDB
LocSo Inc. operates AnimaDB. Contact: ep@loc.so. The public host is https://nexusanimadex.com.
Google sign-in
Signing in is optional, and browsing needs no account. If you choose Continue with Google, AnimaDB uses Google Identity OpenID
Connect (openid email profile) on the server. The browser is sent to Google, then
back to
https://nexusanimadex.com/api/auth/callback/google.
LocSo receives your Google subject identifier, verified email address, and profile name from
Google’s ID token, then discards Google’s access, refresh and ID tokens. Those Google tokens
are not stored in cookies, HTML, or client JavaScript.
AnimaDB then sets its own HttpOnly session cookie on nexusanimadex.com so this browser can show that you are signed in. There is no separate AnimaDB password, and there is no AnimaDB user database in this version — the signed-in state lives in that cookie on your device until it expires or you sign out.
Cookies and similar storage
- animadb_session — HttpOnly, Secure, SameSite=Lax. AnimaDB’s own sign-in cookie.
- animadb_oauth — short-lived HttpOnly cookie used only while Google sign-in is in progress (PKCE and CSRF state).
- animadb-theme — in local storage, so paper cream or Nexus Night survives a reload.
- PostHog keeps an anonymous identifier in local storage so page-view journeys can be counted without identifying you.
Analytics
Google Analytics 4 (measurement ID G-WMT5CRDP97) runs in the page head and records
standard usage such as page views.
PostHog records anonymous page views and the explicit search, filter, record-open, and share
events the catalog defines. It does not identify readers, does not record raw search text,
and has session replay, heatmaps, generic autocapture, surveys, and exception capture turned
off. Query strings and URL fragments are stripped before events are sent. Browser events go
through https://edge.nexusanimadex.com.
What we do not do
LocSo does not sell AnimaDB reader data. We do not use Google sign-in to post on your behalf or to read Gmail. We do not put Google tokens in the browser. We do not invent a second account-creation screen.
How long data stays
The Google OAuth handshake cookie expires in minutes. The AnimaDB session cookie lasts up to 30 days, or until you sign out. Analytics products keep their own logs under their terms.
Asking us to forget you
Sign out on /account/ to clear the AnimaDB session cookie in this browser. For any other request, email ep@loc.so.
Children
Google sign-in follows Google’s own account rules. If you believe a child has signed in here in error, write to ep@loc.so.
Changes
If this policy changes, the updated text will replace this page. The effective date at the top is the date of the current wording.