Sign in
Theme

Privacy Policy

Last updated: 11 October 2026

At mylistbl.com ("we," "our," or "us"), available at https://mylistbl.com, one of our main priorities is the privacy of our visitors and users. mylistbl.com is a platform and search engine dedicated to Boys' Love (BL) dramas, movies, and series.

This Privacy Policy document outlines the types of information that is collected and recorded by mylistbl.com and how we use, process, and protect it.

1. Information We Collect and How We Use It

A. Log Files and Network Security

Like most standard websites, we collect basic server and network logs. This includes internet protocol (IP) addresses, browser type, date/time stamps and the pages requested. This data is used strictly for administering the site, preventing abuse (such as spam, brute-force login attempts and DDoS attacks), and ensuring infrastructure security. IP addresses are never shown publicly and are not used for advertising or profiling.

B. User Accounts

If you register an account on mylistbl.com (to save favorites, create lists, rate shows or comment), we collect:

  • your email address and a securely hashed password (we never store your password in readable form),
  • an optional username and avatar,
  • your favorites, lists, watch progress and scores (private by default, unless you choose to share them),
  • two-step verification data, if you turn it on. When you add a passkey, we store only its public key – your fingerprint, face or device PIN never leave your device.

Comments you post are public. When you delete your account, your avatar, favorites and lists are removed immediately; your comments remain on the site, shown as written by a "deleted user".

C. System Emails and Contact Form

We send essential system emails (such as account confirmation links, password resets, security notices and critical service updates). Messages sent through our contact form are stored in our administration panel and handled by email. All our email is handled by STRATO (see section 3).

D. Cookies and Local Storage

We use only the cookies needed for the site to work, plus optional ones you agree to:

  • Essential: a session cookie that keeps you logged in, and a cookie that remembers your consent choices.
  • Preferences: your theme (light/dark) and dismissed announcements are stored in your browser's local storage.
  • Optional (only with your consent): Google Analytics and Google AdSense cookies, described below.

You can change your choices at any time on the Cookies page.

E. Internal Statistics

We collect anonymous, aggregated statistics directly on our own servers – without cookies and without tracking scripts. To count unique visitors, we use a one-way code made from your IP address and browser, mixed with a random value that changes every day, so you cannot be recognized from one day to the next. Detailed records are deleted after 30 days (search queries after 90 days); only daily totals are kept.

We use these statistics to see, for example:

  • the most popular BL dramas, movies and series,
  • the number of page views, searches and streaming links opened,
  • the number of new registrations and comments.

All internal statistics are stored on our European infrastructure, are used solely for content ranking and service optimization, and are never sold or shared with anyone.

F. Google Analytics

If you agree to analytics cookies, we use Google Analytics to understand how visitors interact with our website (e.g., pages visited, popular titles, time spent). If you do not agree, Google Analytics is not loaded at all.

G. Advertising (Google AdSense)

We may show advertisements served by Google. Ads are loaded only if you agree to advertising cookies. Google and its partners may use cookies to show ads based on your visits to this and other websites. You can manage or turn off personalized ads at any time in Google's My Ad Center, and learn more in How Google uses information from sites that use its services.

H. Spam Protection

To protect registration, login and the contact form from bots, we may use a verification service (Cloudflare Turnstile or Google reCAPTCHA). It checks whether you are a human and may process your IP address and technical browser data for that purpose only.

2. Infrastructure & Data Security

We take the security of your data and our infrastructure very seriously. We employ industry-standard technical and organizational measures to safeguard our systems:

  • Secure Server Infrastructure: Our main application and databases are hosted on Virtual Private Servers (VPS) located in secure data centers within the European Union (Germany).
  • Encrypted Connections: The entire site is served only over encrypted HTTPS connections.
  • Traffic & CDN Security: Web traffic, DNS routing, and static assets are protected against Distributed Denial of Service (DDoS) attacks and malicious bots via an enterprise-grade Content Delivery Network (CDN).
  • Restricted Access Controls: Administrative access to our server and application management panels is strictly controlled and protected with two-step verification. Server administration is performed exclusively via secure Virtual Private Network (VPN) connections combined with cryptographic SSH key authentication.
  • Encrypted Offsite Backups: System and website backups are stored in offsite data centers within the European Union. All backups are strongly encrypted prior to and during transmission to ensure data integrity and confidentiality.

3. Third-Party Services & Data Processors

To deliver a fast, secure, and reliable experience, we rely on trusted third-party service providers. Below is a breakdown of the third-party processors we use, what they are used for, and where they process data:

Hetzner

Bunny.net

  • Purpose: DNS, CDN & DDoS Protection
  • Data Location: Global / EU Edge Locations
  • Privacy Policy: bunny.net/privacy

STRATO

Backblaze B2

Google Analytics (only with your consent)

Google AdSense (only with your consent)

Google reCAPTCHA

4. Third-Party Links & External Streaming Services

Our website contains links to external websites and third-party streaming platforms (such as official broadcast partners, streaming providers, and video hosting services).

Please be aware that mylistbl.com has no control over the content, privacy practices, or cookies of these external sites. Once you click an external link and leave mylistbl.com, our Privacy Policy no longer applies. We strongly advise you to review the Privacy Policy and terms of service of any third-party website you visit.

5. Your Rights (GDPR)

If you are in the European Union or the European Economic Area (EEA), you have the following rights under the General Data Protection Regulation (GDPR):

  • The right to access, update, or delete the information we have on you.
  • The right of rectification (to correct inaccurate information).
  • The right to object to or restrict processing of your personal data.
  • The right to data portability.
  • The right to withdraw your consent at any time (for example on the Cookies page), without affecting processing that took place before.
  • The right to lodge a complaint with the data protection supervisory authority in your EU/EEA country.

You can change most of your data yourself on your account page, including deleting

Cookies

We use necessary cookies to keep the site working (sign-in and security). With your permission we would also use analytics cookies (Google Analytics) to see how the site is used. You can change your mind at any time in Cookie settings