Account data: a username and a hashed password. Email is optional.
Content you create: comic prompts, panel descriptions, captions, generated images, comments, votes, and reports.
Session data: a session token cookie (HTTP-only, expires within 30 days) stored in your browser.
Analytics: only after you opt in, we record anonymized page-view data via Cloudflare Web Analytics (static.cloudflareinsights.com), which is cookieless and does no fingerprinting or cross-site tracking, and via Google Analytics 4 (www.googletagmanager.com, Google Ireland Ltd.), which sets the cookies listed in section 5, with IP anonymization enabled. Declining or withdrawing consent stops both and deletes the Google Analytics cookies.
We do not log your IP address or user agent in our application logs.
2. Third-party processors
Your prompts are sent to AI providers when you generate text or images. Each provider has its own privacy policy:
Pollinations (image and text generation)
Google Gemini (text and image generation)
OpenAI (text and image generation when configured)
xAI Grok (image generation when configured)
Portkey (multi-provider gateway when configured)
MongoDB host (stores your account, comments, votes, reports)
Cloudflare Web Analytics (anonymous, cookieless analytics, only if you've consented)
Google Analytics 4 (Google Ireland Ltd.; usage statistics, only if you've consented; data may be processed by Google LLC in the USA under the EU-US Data Privacy Framework)
Google AdSense (Google Ireland Ltd.; advertising). The ad script loads on the pages that show comics (the stories feed, the comic viewer, events and the tutorial), not on the creator, account, pricing or legal pages. Until you accept the cookie banner it runs in Google's consent mode with every purpose denied: it shows only non-personalised ads and sets no cookies. After you accept, ads may be personalised and Google sets advertising cookies (see section 5). Declining or withdrawing consent switches it back to non-personalised ads. Google's own notice: How Google uses information from sites that use its services.
Bunny Fonts (fonts.bunny.net) — privacy-friendly font CDN; no logging, no cookies
3. Data retention
Stories and images remain until you delete them or your account is deleted.
Sessions expire after 30 days of inactivity (90-day hard cap).
Reports are retained for 1 year for moderation purposes.
Server logs are retained for 30 days; we redact prompt content from logs.
4. Your rights (GDPR)
You can:
Access / Export: download all data we hold about you via GET /api/account/export (logged in).
Erase: delete your account and all associated data via DELETE /api/account.
Correct: edit your username, email, and password in account settings.
Object / Withdraw consent: change or revoke analytics consent anytime with the cookie-settings button in section 5 below.
For other concerns, contact the site administrator.
5. Cookies
Essential: pending_invite (holds your invite while you sign up), trial_used (counts the free comics made from this browser today). Your login state is kept in your browser's local storage, not in a cookie.
Optional (only after you accept analytics & ads): _ga and _ga_* (Google Analytics, distinguish visitors and sessions, kept for up to 13 months), _gid (24 hours); Google advertising cookies such as __gads, __gpi, __eoi (googlesyndication.com) and IDE (doubleclick.net), used to serve and measure personalised ads, kept for up to 13 months. Cloudflare Web Analytics sets no cookies and stores nothing on your device. Declining or withdrawing consent deletes the Google Analytics cookies and stops personalised advertising.
Reopens the consent banner; your previous choice is cleared until you answer again.
6. Changes
This policy may be updated. We'll display a notice at the top of the page when material changes occur.