Privacy Policy
Effective Date: April 26, 2026 · Last Updated: April 26, 2026
MangaFlow (“we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy describes how we collect, use, store, and share your personal information when you use our website at https://mangaflow.io (the “Service”).
By using the Service, you agree to the collection and use of information in accordance with this policy. Please also read our Terms of Service and Cookie Policy.
1. Data Controller
The data controller responsible for your personal information is:
MangaFlow
Email: support@mangaflow.io
2. Information We Collect
2.1 Information You Provide
| Data Type | What We Collect | Purpose |
|---|---|---|
| Account Data | Email address, username, hashed password | Account creation and authentication |
| Library Data | Manga titles, chapter URLs, reading progress (chapter numbers), cover image URLs | Providing the core tracking service |
2.2 Information Collected Automatically
| Data Type | What We Collect | Purpose |
|---|---|---|
| Technical Data | IP address, browser type, operating system, device type | Server security, abuse prevention, and basic analytics |
| Usage Data | Login timestamps, feature interactions | Service improvement and troubleshooting |
| Cookies | Session identifiers, authentication tokens | Keeping you logged in and maintaining your session (see our Cookie Policy) |
2.3 Information We Do NOT Collect
- Payment card details: All payment information is handled exclusively by our payment processor, Lemon Squeezy. We never receive, process, or store credit card numbers, CVVs, or billing addresses.
- Manga content: We do not download, cache, store, or process any manga images, text, or copyrighted content from third-party websites.
- Precise location data: We do not collect GPS coordinates or precise geolocation information.
3. How We Use Your Information
We use the information we collect for the following purposes:
- Service Delivery: To operate your manga library, track reading progress, and deliver new-chapter notifications
- Account Management: To authenticate your identity and manage your subscription status
- Automated Features: To run our chapter-detection engine and metadata enrichment service on your saved library entries (Premium users only)
- Communication: To send transactional emails (password resets, account notifications) and, if opted in, service-related updates
- Security: To detect, prevent, and address fraud, abuse, and technical issues
- Improvement: To analyze usage patterns and improve the Service
4. Legal Basis for Processing (GDPR)
If you are located in the European Economic Area (EEA), our legal basis for collecting and using your personal information depends on the data concerned:
- Contract Performance: Processing necessary to provide the Service you signed up for (account data, library data)
- Legitimate Interest: Processing for security, fraud prevention, and service improvement
- Consent: Where you have given explicit consent (e.g., agreeing to our Terms during registration)
- Legal Obligation: Processing necessary to comply with applicable laws
5. Third-Party Services (Data Processors)
We share your data with the following third-party services, solely for the purposes described:
| Service | Purpose | Data Shared | Location |
|---|---|---|---|
| Supabase | Database hosting and user authentication | Email, hashed password, library data, subscription status | EU (Frankfurt) |
| Lemon Squeezy | Payment processing (Merchant of Record) | Email address (for subscription matching). Lemon Squeezy independently collects payment details from you. | United States |
| Brevo (Sendinblue) | Transactional email delivery | Email address, email content | EU |
| DigitalOcean | Web server and backend hosting | Server logs (IP addresses, request data) | United States |
| Public Metadata APIs | Metadata enrichment (cover images, chapter counts) | Manga titles only (no user data is sent) | Public API |
| Namecheap | Domain registration and email inbox | Email messages sent to support/hello addresses | United States |
We do not sell, rent, or trade your personal information to any third party for marketing purposes.
6. Data Retention
- Active accounts: Your data is retained for as long as your account is active.
- Deleted accounts: Upon account deletion request, all personal data (account information and library data) will be permanently deleted from our database within 30 days.
- Server logs: Technical logs (IP addresses, access logs) are retained for up to 90 days for security purposes and then automatically purged.
- Backups: Encrypted database backups may retain your data for up to 30 days after deletion before being cycled out.
7. Your Privacy Rights
7.1 Rights Under GDPR (EEA Residents)
If you are located in the European Economic Area, you have the following rights:
- Right of Access: Request a copy of the personal data we hold about you
- Right to Rectification: Request correction of inaccurate or incomplete data
- Right to Erasure: Request deletion of your personal data (“right to be forgotten”)
- Right to Data Portability: Request your data in a structured, machine-readable format
- Right to Restrict Processing: Request that we limit how we use your data
- Right to Object: Object to processing based on legitimate interests
- Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time
7.2 Rights Under CCPA (California Residents)
If you are a California resident, you have the following rights under the California Consumer Privacy Act:
- Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected
- Right to Delete: Request deletion of your personal information
- Right to Opt-Out of Sale: We do not sell your personal information. No opt-out is necessary.
- Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights
7.3 Rights Under Costa Rican Law (Ley 8968)
If you are a resident of Costa Rica, you have the right to access, rectify, and delete your personal data in accordance with the Law for the Protection of Persons Regarding the Processing of Their Personal Data (Ley 8968). You may also file a complaint with the Agency for the Protection of the Inhabitants’ Data (PRODHAB).
7.4 How to Exercise Your Rights
To exercise any of these rights, contact us at support@mangaflow.io. We will respond within 30 days. We may ask you to verify your identity before processing your request.
8. Data Security
We implement appropriate technical and organizational measures to protect your personal data, including:
- All data transmitted between your browser and our servers is encrypted via HTTPS/TLS
- Passwords are cryptographically hashed using industry-standard algorithms — we never store plaintext passwords
- Database access is restricted through strict access control policies and row-level permissions
- Backend API keys and secrets are stored securely on the server and never exposed to client-side code
- Administrative access to the server is restricted to SSH key-based authentication
While we take reasonable steps to protect your data, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.
9. International Data Transfers
Your data may be transferred to and processed in countries outside your country of residence, including the United States (DigitalOcean, Lemon Squeezy, Namecheap) and the European Union (Supabase, Brevo). Where data is transferred outside your jurisdiction, we ensure that appropriate safeguards are in place in accordance with applicable data protection laws.
10. Children’s Privacy
The Service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected data from a child under 13, we will take steps to delete that information promptly. If you are a parent or guardian and believe your child has provided us with personal data, please contact us at support@mangaflow.io.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we make material changes, we will:
- Update the “Last Updated” date at the top of this page
- Notify registered users via email
We encourage you to review this policy periodically. Your continued use of the Service after changes take effect constitutes your acceptance of the updated policy.
12. Contact Us
For any questions, concerns, or requests related to this Privacy Policy or your personal data, please contact us at:
Email: support@mangaflow.io