Manhwawi
Privacy Policy
What Manhwawi does
Manhwawi synchronizes prepared narration with guided scrolling on supported reader pages. Account and delivery information provide that service; optional reading and playback analytics help us measure and improve it.
Accounts and authentication
Supabase Auth processes sign-in details. We receive account identifiers and, depending on your sign-in method, your email, display name, avatar, and identity provider. Password sign-in sends your password to Supabase over HTTPS; the extension does not retain it. Session and refresh tokens are stored in protected extension storage.
Chapter delivery and service protection
Requesting narration sends the normalized chapter URL to our authenticated service. We keep account-linked delivery records, usage counters, entitlements, and security decisions. Our application stores a hash of a coarse network prefix for abuse controls, rather than raw IP addresses in the delivery database. Hosting, authentication, payment, and advertising providers receive network request information and may retain it under their own policies.
Optional reading and playback analytics
When enabled, analytics recognizes supported chapter pages and records chapter and series identifiers, timestamps, playback duration, seeks, pauses, buffering, delivery outcomes, feedback you submit, and coarse browser/display information. A persistent random installation ID links batches from the same installation. These records are pseudonymous, not guaranteed anonymous. Recognition can occur before you request narration. We do not collect general browsing history or copy chapter text or images into analytics.
Local reader data
Playback progress, preferences, catalog information, cover thumbnails, and pending analytics are stored locally. Sign-out removes the authentication session; it does not erase all reading history or preferences. Clearing extension storage or uninstalling removes device-local extension data.
Free delivery and advertising
Free chapter preparation displays an Adsterra advertisement in a hosted iframe. Adsterra and its partners receive ordinary web request information and may use cookies or similar technologies, subject to browser settings and their privacy policies. We do not intentionally send account tokens, chapter identifiers, or reading analytics to advertisers, and do not use extension-derived user data for personalized advertising. Active Premium access bypasses the placement. Provider policy: https://adsterra.com/privacy-policy/.
Ad availability checks
For Free delivery, the extension observes whether its ad frame appears ready and remains visible, and checks for local signs of blocking. It does not inspect installed extensions. Account-scoped summaries cover windows of 100 successful Free deliveries. Fewer than 20 deliveries with an ad appearing ready pauses further Free requests until an ad succeeds on retry. These are availability signals, not proof of blocking or billable impressions. These service controls are separate from optional analytics. Completed summaries are sent to our authenticated delivery service with your account identity; unsuccessful uploads are retried with a later chapter request. The service uses these counts to pause or restore Free delivery when server enforcement is enabled.
Billing and service providers
Lemon Squeezy processes checkout and payment details. We retain subscription identifiers, status, renewal dates, checkout reservations, and pricing needed to manage access; we do not receive full card details. Supabase supplies authentication and database services. Cloudflare supplies hosting, private audio delivery, and analytics storage. Providers process information according to their roles and policies. We do not sell personal information.
Retention
Account, delivery, usage, and billing records are retained while needed to provide the account, manage subscriptions, resolve disputes, and meet applicable obligations. Security audit retention is configured for 30 days, resolved security flags for 90 days, and stale rate buckets for 48 hours. Analytics storage is configured for 90 days for raw batches and 365 days for aggregates. Ad-availability summaries retain at most the 12 most recent windows per account locally and in the server report store. Deletion requests are reviewed for records that must be retained for billing, security, or legal reasons; not all records disappear immediately.
Your choices and data requests
Open Privacy settings in the extension side panel to turn reading and playback analytics on or off. Turning it off clears queued local analytics and stops subsequent uploads; it cannot recall requests already sent or erase records already received. Authentication, delivery limits, billing, and ad-availability controls remain active. Request access, correction, or deletion of account data at [email protected]. There is currently no self-service account-deletion button. Uninstalling does not cancel a paid subscription; manage renewal in the subscription screen.
Limited Use
The use of information received from Google APIs will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements. We limit extension user data to providing, securing, and improving the disclosed narration service.
Children and changes
Manhwawi is not directed to children under 13. We update this policy when data handling changes and provide notice of material changes in the extension.
Contact
Privacy and data requests: [email protected].