Loading
Preparing the public reading experience
We are assembling the current surface so discovery, reading, and navigation feel smooth across the platform.
Legal
Last updated: 2026-09-24
This policy explains what data CHANGE_ME_LEGAL_ENTITY collects when you use our website, reader, wallet, and Discord bot integration, and how we use, share, and protect it. It applies to all visitors and account holders.
Account data: username, email address, and a securely hashed password (we use bcrypt — we never store your password in plain text), or your Discord ID/profile if you sign in with Discord.
Usage data: your library, reading progress, followed series, ratings, notification preferences, pages visited, and aggregate reading trends.
Wallet & transaction data: your Coin balance and transaction history, including, depending on the payment method you choose, blockchain transaction hashes and the wallet address a payment was sent from (for USDT/BEP20 verification), or order references from gift-card resellers (e.g. Kinguin, Eneba, G2A). We do not collect or store your private keys.
Content reports: the description, series/chapter reference, and any screenshot you attach when you submit a report, plus its status and any reply.
Technical data: IP address, browser/device information, and server logs, kept only as long as needed for security, abuse prevention, and debugging.
Cookies: a signed authentication cookie (via NextAuth) so you stay signed in, and a random first-party visitor identifier used to count unique readers and understand aggregate navigation trends. We do not use third-party advertising or analytics trackers on the Service.
We share the minimum data necessary with service providers who help us run the Service:
We do not sell your personal data, and we do not share it with advertisers.
We keep account and transaction data for as long as your account is active, and for a reasonable period after deletion where needed for fraud prevention, tax/accounting records, or legal obligations. First-party page-view events and their random visitor identifiers are retained for up to 13 months. Server access logs are retained for a limited window (typically a few weeks) and then deleted or anonymized.
The Service is not directed at children under 13. We do not knowingly collect personal data from children under that age. If you believe a child has created an account, contact support@toonary.example and we will remove it.
We use industry-standard measures to protect your data, including password hashing, HTTPS in transit, and role-based access control for admin tooling. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
We may update this Privacy Policy from time to time. We will update the "Last updated" date above when we do, and, for material changes, provide additional notice where required by law.
Questions about this policy or your data: support@toonary.example. Legal/copyright notices: legal@toonary.example.