What we collect
- Your email address and a securely hashed copy of your password (never stored in plain
text) — bcrypt for passwords, SHA-256 hashes for one-time tokens like the sync token.
- Optional profile info you choose to add: a display name, an uploaded avatar image.
- If you sync manga from the desktop app: job titles, page counts, and — only if you've
opted into full remote reading — the actual translated page images and transcripts.
- Login/session records: IP address, browser/device info, and timestamps, so you can see and
revoke your own active sessions in Settings.
- Preferences you set: theme, library view, reader direction, notification opt-ins.
- If you use pyontan2 AI translation (see below): how many lines you translated
each day and how much AI processing they used — counts only, never the text itself.
How we use it
To run your account — authenticating you and showing your own synced library back to you — and
to send transactional email you've triggered: a password reset you requested, verifying a new
account or email address, or, only if you opt in, a notice when a new blog post is published.
pyontan2 AI translation
This applies only if you choose pyontan2 AI as your translation engine in the desktop app. The
other engines are unchanged: the offline engine never leaves your computer, and DeepL, Google and
custom-LLM translation go straight from the app to that provider under your own account.
- The lines you ask it to translate (and, for Live Audio, a few of the lines just before them, so it
can follow who is being talked about) are sent to our server and on to an AI provider that
translates them: Google (Gemini API) or, if Google is unavailable,
Anthropic (Claude API). We use their paid API services, whose terms do not allow
them to train their models on this content.
- We don't store the text you translate against your account, and we don't write it to logs.
- To save cost, a shared cache remembers recent translations for up to 30 days. It holds a one-way
hash of the line and its translation, not the original text and not who asked for it, and it is
shared between users.
- Common one-word reactions (such as 草 or www) are answered on our server without contacting an
AI provider at all.
Who we share it with
- MongoDB Atlas — hosts the database itself.
- Resend — sends the transactional emails described above.
- Sentry — error tracking, so real bugs can be found and fixed; this can
capture technical request details (like the page you were on) when something goes wrong,
not your password or synced content.
- Google and Anthropic — AI translation providers, only for text you
send through pyontan2 AI, as described above.
We don't sell your data or share it with advertisers — pyontan2 doesn't run ads or third-party
tracking.
Browser extension
The pyontan2 Web Extension talks only to the desktop app on your own computer and sends nothing to us
itself. (If you have chosen pyontan2 AI as the desktop app's translation engine, the desktop app sends the
text to translate on our behalf, as described above.) See the Web Extension Privacy Policy for the details.
Cookies
See the separate Cookie Policy.
How long we keep it
For as long as your account exists. Deleting your account (Settings > Danger zone)
permanently removes your synced jobs, page images, activity history, avatar, and sessions, along
with the account record itself.
Your rights
You can update your display name, avatar, and email at any time in Settings, and delete your
account entirely whenever you want. If you'd like a copy of your data or have another privacy
request, reach out through the feedback page.
Changes to this policy
We may update this policy as the product develops. Material changes will be reflected in the
"last updated" date above.